@zhixuan92/multi-model-agent-core 4.7.20 → 4.9.0

package/dist/research/web-fetch-helpers.js

@@ -1,209 +0,0 @@
-import { isIP } from 'node:net';
-import { Readability } from '@mozilla/readability';
-import { JSDOM } from 'jsdom';
-import { resolveAndPin, SsrfBlocked } from './ssrf-guard.js';
-/** Max bytes to drain from a redirect response body before giving up. */
-export const REDIRECT_DRAIN_CAP = 64 * 1024;
-export const REDIRECT_ERR_CODE_MAP = {
-    web_fetch_off_allowlist: 'web_fetch_redirect_off_allowlist',
-    web_fetch_invalid_url: 'web_fetch_redirect_invalid_url',
-    web_fetch_invalid_scheme: 'web_fetch_redirect_scheme_downgrade',
-    web_fetch_ip_literal_blocked: 'web_fetch_redirect_ip_literal_blocked',
-    web_fetch_private_ip_blocked: 'web_fetch_redirect_private_ip_blocked',
-    web_fetch_reserved_ip_blocked: 'web_fetch_redirect_reserved_ip_blocked',
-};
-/**
- * Races a promise against an AbortSignal. If the signal fires first, throws
- * a DOMException with name 'AbortError' so callers can map it to timeout.
- */
-export async function withDeadline(promise, signal) {
-    if (signal.aborted)
-        throw new DOMException('Aborted', 'AbortError');
-    return new Promise((resolve, reject) => {
-        const onAbort = () => reject(new DOMException('Aborted', 'AbortError'));
-        signal.addEventListener('abort', onAbort, { once: true });
-        promise.then((result) => {
-            signal.removeEventListener('abort', onAbort);
-            resolve(result);
-        }, (err) => {
-            signal.removeEventListener('abort', onAbort);
-            reject(err);
-        });
-    });
-}
-export async function validateAndPinURL(raw, hostAllowlist, privateNetworkHosts, resolveIP, signal) {
-    let url;
-    try {
-        url = new URL(raw);
-    }
-    catch {
-        return { ok: false, reasonCode: 'web_fetch_invalid_url' };
-    }
-    if (url.protocol !== 'https:') {
-        return { ok: false, reasonCode: 'web_fetch_invalid_scheme' };
-    }
-    const stripped = url.hostname.replace(/^\[|\]$/g, '');
-    if (isIP(stripped) !== 0) {
-        return { ok: false, reasonCode: 'web_fetch_ip_literal_blocked' };
-    }
-    const host = url.hostname.toLowerCase();
-    if (!hostAllowlist.has(host)) {
-        return { ok: false, reasonCode: 'web_fetch_off_allowlist', host };
-    }
-    const allowPrivate = privateNetworkHosts.has(host);
-    let pinnedIP;
-    try {
-        pinnedIP = await withDeadline(resolveAndPin(host, {
-            resolve: resolveIP ? async (h) => [await resolveIP(h)] : undefined,
-            allowPrivateForHost: allowPrivate,
-        }), signal);
-    }
-    catch (e) {
-        if (e instanceof DOMException && e.name === 'AbortError') {
-            throw e;
-        }
-        if (e instanceof SsrfBlocked) {
-            return { ok: false, reasonCode: e.code, host };
-        }
-        return { ok: false, reasonCode: 'web_fetch_dns_resolution_failed', host };
-    }
-    return { ok: true, url, host, pinnedIP };
-}
-export function extractContentType(headers) {
-    const raw = headers['content-type'];
-    if (typeof raw === 'string') {
-        return raw.split(';')[0].trim().toLowerCase();
-    }
-    if (Array.isArray(raw) && raw.length > 0) {
-        return String(raw[0]).split(';')[0].trim().toLowerCase();
-    }
-    return '';
-}
-export function isRedirect(status) {
-    return status === 301 || status === 302 || status === 303 || status === 307 || status === 308;
-}
-export function extractLocation(headers) {
-    const loc = headers['location'];
-    if (typeof loc === 'string')
-        return loc;
-    if (Array.isArray(loc) && loc.length > 0)
-        return String(loc[0]);
-    return null;
-}
-export function extractBodyFromHTML(html) {
-    let dom;
-    try {
-        dom = new JSDOM(html, { url: 'https://localhost/' });
-        const reader = new Readability(dom.window.document);
-        const article = reader.parse();
-        if (article?.textContent) {
-            return article.textContent;
-        }
-        return dom.window.document.body?.textContent?.trim() ?? html;
-    }
-    catch {
-        try {
-            return dom?.window.document.body?.textContent?.trim() || html;
-        }
-        catch {
-            return html;
-        }
-    }
-}
-export function stripCredentialsFromURL(url) {
-    if (!url.username && !url.password)
-        return false;
-    url.username = '';
-    url.password = '';
-    return true;
-}
-/**
- * Read a response body with a byte cap and abort-signal awareness.
- * Stream errors (non-abort) are re-thrown so the caller can map them to
- * web_fetch_body_read_failed rather than silently returning partial content.
- */
-export async function readBody(body, maxBytes, signal) {
-    if (!body)
-        return { text: '', bytesReturned: 0, truncated: false };
-    const chunks = [];
-    let total = 0;
-    let truncated = false;
-    for await (const chunk of body) {
-        if (signal.aborted) {
-            throw new DOMException('Aborted', 'AbortError');
-        }
-        const remaining = maxBytes - total;
-        if (remaining <= 0) {
-            truncated = true;
-            break;
-        }
-        const value = typeof chunk === 'string' ? Buffer.from(chunk) : chunk;
-        if (value.length > remaining) {
-            chunks.push(value.subarray(0, remaining));
-            total += remaining;
-            truncated = true;
-            break;
-        }
-        chunks.push(value);
-        total += value.length;
-    }
-    const decoder = new TextDecoder();
-    let text = '';
-    for (const chunk of chunks) {
-        text += decoder.decode(chunk, { stream: true });
-    }
-    text += decoder.decode();
-    return { text, bytesReturned: total, truncated };
-}
-/**
- * Drain a response body with a size cap and abort-signal awareness.
- * Used for redirect responses and rejected content types.
- */
-export async function drainBody(body, signal) {
-    if (!body)
-        return;
-    let drained = 0;
-    try {
-        for await (const chunk of body) {
-            if (signal.aborted)
-                break;
-            let len = 0;
-            if (typeof chunk === 'string') {
-                len = Buffer.byteLength(chunk);
-            }
-            else if (chunk instanceof Uint8Array) {
-                len = chunk.length;
-            }
-            else if (Buffer.isBuffer(chunk)) {
-                len = chunk.length;
-            }
-            drained += len;
-            if (drained > REDIRECT_DRAIN_CAP)
-                break;
-        }
-    }
-    catch {
-        // drain errors are ignorable
-    }
-}
-export function isUndiciTimeout(err) {
-    if (!(err instanceof Error))
-        return false;
-    const code = err.code;
-    return code === 'UND_ERR_CONNECT_TIMEOUT'
-        || code === 'UND_ERR_HEADERS_TIMEOUT'
-        || code === 'UND_ERR_BODY_TIMEOUT';
-}
-export function mapRequestError(err, signal, host) {
-    if (signal.aborted) {
-        return { status: 'error', reasonCode: 'web_fetch_timeout', host, credentialsStripped: false };
-    }
-    if (err instanceof DOMException && err.name === 'AbortError') {
-        return { status: 'error', reasonCode: 'web_fetch_timeout', host, credentialsStripped: false };
-    }
-    if (isUndiciTimeout(err)) {
-        return { status: 'error', reasonCode: 'web_fetch_timeout', host, credentialsStripped: false };
-    }
-    return { status: 'error', reasonCode: 'web_fetch_request_failed', host, credentialsStripped: false };
-}
-//# sourceMappingURL=web-fetch-helpers.js.map

package/dist/research/web-fetch-helpers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"web-fetch-helpers.js","sourceRoot":"","sources":["../../src/research/web-fetch-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAE9B,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAG7D,yEAAyE;AACzE,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5C,MAAM,CAAC,MAAM,qBAAqB,GAA2B;IAC3D,uBAAuB,EAAE,kCAAkC;IAC3D,qBAAqB,EAAE,gCAAgC;IACvD,wBAAwB,EAAE,qCAAqC;IAC/D,4BAA4B,EAAE,uCAAuC;IACrE,4BAA4B,EAAE,uCAAuC;IACrE,6BAA6B,EAAE,wCAAwC;CACxE,CAAC;AAeF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAI,OAAmB,EAAE,MAAmB;IAC5E,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACpE,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CACV,CAAC,MAAM,EAAE,EAAE;YACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAW,EACX,aAAkC,EAClC,mBAAwC,EACxC,SAAqC,EACrC,MAAmB;IAEnB,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,uBAAuB,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,0BAA0B,EAAE,CAAC;IAC/D,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,8BAA8B,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACxC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,YAAY,CAC3B,aAAa,CAAC,IAAI,EAAE;YAClB,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YAClE,mBAAmB,EAAE,YAAY;SAClC,CAAC,EACF,MAAM,CACP,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACzD,MAAM,CAAC,CAAC;QACV,CAAC;QACD,IAAI,CAAC,YAAY,WAAW,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;QACjD,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,iCAAiC,EAAE,IAAI,EAAE,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAsD;IACvF,MAAM,GAAG,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACpC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAsD;IACpF,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,GAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;YACzB,OAAO,OAAO,CAAC,WAAW,CAAC;QAC7B,CAAC;QACD,OAAO,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,GAAQ;IAC9C,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjD,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;IAClB,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;IAClB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAA+C,EAC/C,QAAgB,EAChB,MAAmB;IAEnB,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAEnE,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QAC/B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,GAAG,KAAK,CAAC;QACnC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM;QACR,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACrE,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;YAC1C,KAAK,IAAI,SAAS,CAAC;YACnB,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM;QACR,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;IACxB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IACzB,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAmC,EACnC,MAAmB;IAEnB,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YAC/B,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM;YAC1B,IAAI,GAAG,GAAG,CAAC,CAAC;YACZ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;iBAAM,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;gBACvC,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC;YACrB,CAAC;iBAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClC,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC;YACrB,CAAC;YACD,OAAO,IAAI,GAAG,CAAC;YACf,IAAI,OAAO,GAAG,kBAAkB;gBAAE,MAAM;QAC1C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,IAAI,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,IAAI,GAAI,GAAyB,CAAC,IAAI,CAAC;IAC7C,OAAO,IAAI,KAAK,yBAAyB;WAClC,IAAI,KAAK,yBAAyB;WAClC,IAAI,KAAK,sBAAsB,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,MAAmB,EAAE,IAAY;IAC7E,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC;IAChG,CAAC;IACD,IAAI,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC7D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC;IAChG,CAAC;IACD,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC;IAChG,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,0BAA0B,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC;AACvG,CAAC"}

package/dist/research/web-fetch.d.ts

@@ -1,55 +0,0 @@
-import type { LookupFunction } from 'node:net';
-import type { ResearchConfig } from '../config/schema.js';
-export interface WebFetchInput {
-    url: string;
-    cfg: ResearchConfig['fetch'];
-    hostAllowlist: ReadonlySet<string>;
-    privateNetworkHosts?: ReadonlySet<string>;
-    resolveIP?: (host: string) => Promise<string>;
-    /** Test seam — when present, treated as the IP that the connect callback
-     *  "resolved" at request time. Production must not pass this. */
-    _testConnectResolvedIp?: string;
-    /** Test-only injection seam. When set, webFetch uses the returned dispatcher
-     *  (or, if it returns undefined, no dispatcher — so undici's global MockAgent
-     *  can intercept). Production never sets this: it always uses the connect-guard
-     *  agent built in webFetch(). */
-    createDispatcher?: (host: string, pinnedIP: string, cfg: ResearchConfig['fetch']) => import('undici').Dispatcher | undefined;
-}
-export type WebFetchOk = {
-    status: 'ok';
-    body: string;
-    rawText: string;
-    host: string;
-    bytesReturned: number;
-    truncated: boolean;
-    textTruncated: boolean;
-    credentialsStripped: boolean;
-};
-export type WebFetchErr = {
-    status: 'error';
-    reasonCode: string;
-    host?: string;
-    credentialsStripped: boolean;
-};
-export type WebFetchResult = WebFetchOk | WebFetchErr;
-/**
- * Build the SSRF-revalidating `connect.lookup` for the guard agent.
- *
- * undici invokes `connect.lookup` with `{ all: true }` and expects the callback
- * to receive an ARRAY of `{ address, family }` entries — NOT the single-result
- * `dns.lookup(host, (err, address, family) => ...)` form. Returning a bare
- * address string makes undici read `addresses[0].address === undefined`, throw
- * `ERR_INVALID_IP_ADDRESS`, and surface as `web_fetch_request_failed`. Every
- * callback path here therefore returns the array form.
- *
- * Typed as `net.LookupFunction` — the exact type undici's `connect.lookup`
- * field accepts. On error paths we pass an empty address array (undici reads
- * `err` first and never consumes the addresses), which keeps the runtime
- * contract while satisfying the callback's required address argument.
- *
- * Exported for unit testing — it locks the undici lookup contract without
- * requiring real network (see tests/research/web-fetch.test.ts).
- */
-export declare function makeConnectGuardLookup(allowPrivateNetwork: boolean, testResolvedIp: string | undefined): LookupFunction;
-export declare function webFetch(input: WebFetchInput): Promise<WebFetchResult>;
-//# sourceMappingURL=web-fetch.d.ts.map

package/dist/research/web-fetch.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"web-fetch.d.ts","sourceRoot":"","sources":["../../src/research/web-fetch.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAW1D,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAkB,MAAM,CAAC;IAC5B,GAAG,EAAkB,cAAc,CAAC,OAAO,CAAC,CAAC;IAC7C,aAAa,EAAQ,WAAW,CAAC,MAAM,CAAC,CAAC;IACzC,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,SAAS,CAAC,EAAW,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD;qEACiE;IACjE,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;qCAGiC;IACjC,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,OAAO,QAAQ,EAAE,UAAU,GAAG,SAAS,CAAC;CAC9H;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,MAAM,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAC1D,aAAa,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAClE,mBAAmB,EAAE,OAAO,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,OAAO,CAAC;CAClF,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,WAAW,CAAC;AAStD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,sBAAsB,CACpC,mBAAmB,EAAE,OAAO,EAC5B,cAAc,EAAE,MAAM,GAAG,SAAS,GACjC,cAAc,CAkChB;AAeD,wBAAsB,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAoJ5E"}

package/dist/research/web-fetch.js

@@ -1,236 +0,0 @@
-// packages/core/src/research/web-fetch.ts
-//
-// Replaces the previous IP-pinning dispatcher (which failed 100% of real
-// requests on Node 25 / undici current) with a connect-callback re-validation
-// SSRF guard: undici resolves the host normally; the connect callback compares
-// the resolved IP against ssrf-guard's public-IP classification and aborts
-// the connection if it's private/loopback/metadata. validateAndPinURL still
-// runs first as the pre-request defense.
-import { request, Agent } from 'undici';
-import { USER_AGENT } from './user-agent.js';
-import { wrapFetchedContent } from './untrusted-content.js';
-import { classifyIP } from './ssrf-guard.js';
-import { REDIRECT_ERR_CODE_MAP, validateAndPinURL, extractContentType, isRedirect, extractLocation, extractBodyFromHTML, stripCredentialsFromURL, readBody, drainBody, mapRequestError, } from './web-fetch-helpers.js';
-const ALLOWED_CT = new Set([
-    'text/html', 'text/plain',
-    'application/xml', 'application/atom+xml', 'application/rss+xml',
-    'application/json',
-]);
-const RETURNED_TEXT_CAP = 64 * 1024;
-/**
- * Build the SSRF-revalidating `connect.lookup` for the guard agent.
- *
- * undici invokes `connect.lookup` with `{ all: true }` and expects the callback
- * to receive an ARRAY of `{ address, family }` entries — NOT the single-result
- * `dns.lookup(host, (err, address, family) => ...)` form. Returning a bare
- * address string makes undici read `addresses[0].address === undefined`, throw
- * `ERR_INVALID_IP_ADDRESS`, and surface as `web_fetch_request_failed`. Every
- * callback path here therefore returns the array form.
- *
- * Typed as `net.LookupFunction` — the exact type undici's `connect.lookup`
- * field accepts. On error paths we pass an empty address array (undici reads
- * `err` first and never consumes the addresses), which keeps the runtime
- * contract while satisfying the callback's required address argument.
- *
- * Exported for unit testing — it locks the undici lookup contract without
- * requiring real network (see tests/research/web-fetch.test.ts).
- */
-export function makeConnectGuardLookup(allowPrivateNetwork, testResolvedIp) {
-    return (host, opts, cb) => {
-        // If test seam present, return that IP; otherwise let Node resolve.
-        if (testResolvedIp) {
-            const fam = testResolvedIp.includes(':') ? 6 : 4;
-            // Re-validate test IP via ssrf-guard classification.
-            if (!allowPrivateNetwork) {
-                if (classifyIP(testResolvedIp) !== 'public') {
-                    cb(new Error('web_fetch_ssrf_postresolve_block'), []);
-                    return;
-                }
-            }
-            cb(null, [{ address: testResolvedIp, family: fam }]);
-            return;
-        }
-        // Production path: forward undici's options (which carry `all: true`) to
-        // Node's resolver, re-validate EVERY resolved address via the SSRF
-        // classifier, then return the array form undici expects.
-        import('node:dns').then(({ lookup }) => {
-            lookup(host, { ...opts, all: true }, (err, addresses) => {
-                if (err) {
-                    cb(err, []);
-                    return;
-                }
-                const list = addresses;
-                if (!allowPrivateNetwork) {
-                    for (const a of list) {
-                        if (classifyIP(a.address) !== 'public') {
-                            cb(new Error('web_fetch_ssrf_postresolve_block'), []);
-                            return;
-                        }
-                    }
-                }
-                cb(null, list);
-            });
-        }).catch(e => cb(e, []));
-    };
-}
-/** Build a shared agent that re-validates the resolved IP at connect time. */
-function makeConnectGuardAgent(allowPrivateNetwork, testResolvedIp, connectTimeoutMs) {
-    const lookup = makeConnectGuardLookup(allowPrivateNetwork, testResolvedIp);
-    return new Agent({
-        connect: { lookup },
-        connectTimeout: connectTimeoutMs,
-    });
-}
-export async function webFetch(input) {
-    const { cfg, hostAllowlist } = input;
-    const privateNetworkHosts = input.privateNetworkHosts ?? new Set();
-    let credentialsStripped = false;
-    let initial;
-    try {
-        initial = new URL(input.url);
-    }
-    catch {
-        return { status: 'error', reasonCode: 'web_fetch_invalid_url', credentialsStripped };
-    }
-    credentialsStripped = stripCredentialsFromURL(initial);
-    const totalCtrl = new AbortController();
-    const totalTimer = setTimeout(() => totalCtrl.abort(), cfg.totalDeadlineMs);
-    try {
-        let currentURL = initial.toString();
-        let redirects = 0;
-        while (true) {
-            let v;
-            try {
-                v = await validateAndPinURL(currentURL, hostAllowlist, privateNetworkHosts, input.resolveIP, totalCtrl.signal);
-            }
-            catch (e) {
-                if (e instanceof DOMException && e.name === 'AbortError') {
-                    return { status: 'error', reasonCode: 'web_fetch_timeout', credentialsStripped };
-                }
-                return { status: 'error', reasonCode: 'web_fetch_dns_resolution_failed', credentialsStripped };
-            }
-            if (!v.ok) {
-                if (redirects > 0) {
-                    const mapped = REDIRECT_ERR_CODE_MAP[v.reasonCode] ?? v.reasonCode;
-                    return { status: 'error', reasonCode: mapped, host: v.host, credentialsStripped };
-                }
-                return { status: 'error', reasonCode: v.reasonCode, host: v.host, credentialsStripped };
-            }
-            // Honor createDispatcher hook for tests: when present, use whatever it
-            // returns (or skip dispatcher entirely if undefined → MockAgent
-            // intercepts via global). In production, fall back to the connect-guard
-            // agent for post-resolve SSRF re-validation.
-            let agent;
-            if (input.createDispatcher !== undefined) {
-                agent = input.createDispatcher(v.host, v.pinnedIP, cfg);
-            }
-            else {
-                agent = makeConnectGuardAgent(cfg.allowPrivateNetwork ?? false, input._testConnectResolvedIp, cfg.connectTimeoutMs);
-            }
-            const closeAgent = async () => {
-                if (agent && typeof agent.close === 'function') {
-                    try {
-                        await agent.close();
-                    }
-                    catch { /* ignore */ }
-                }
-            };
-            let res;
-            try {
-                res = await request(v.url.toString(), {
-                    method: 'GET',
-                    headersTimeout: cfg.connectTimeoutMs,
-                    headers: { 'user-agent': USER_AGENT },
-                    ...(agent ? { dispatcher: agent } : {}),
-                    signal: totalCtrl.signal,
-                });
-            }
-            catch (e) {
-                await closeAgent();
-                // Map our connect-callback abort to a stable reasonCode.
-                const msg = e?.message ?? '';
-                if (msg.includes('web_fetch_ssrf_postresolve_block')) {
-                    return { status: 'error', reasonCode: 'web_fetch_ssrf_postresolve_block', host: v.host, credentialsStripped };
-                }
-                return { ...mapRequestError(e, totalCtrl.signal, v.host), credentialsStripped };
-            }
-            if (isRedirect(res.statusCode)) {
-                redirects++;
-                if (redirects > cfg.maxRedirects) {
-                    await closeAgent();
-                    return { status: 'error', reasonCode: 'web_fetch_too_many_redirects', host: v.host, credentialsStripped };
-                }
-                const location = extractLocation(res.headers);
-                if (!location) {
-                    await closeAgent();
-                    return { status: 'error', reasonCode: 'web_fetch_redirect_missing_location', host: v.host, credentialsStripped };
-                }
-                let nextURL;
-                try {
-                    nextURL = new URL(location, v.url);
-                }
-                catch {
-                    await closeAgent();
-                    return { status: 'error', reasonCode: 'web_fetch_redirect_invalid_url', host: v.host, credentialsStripped };
-                }
-                credentialsStripped = stripCredentialsFromURL(nextURL) || credentialsStripped;
-                currentURL = nextURL.toString();
-                await drainBody(res.body, totalCtrl.signal);
-                await closeAgent();
-                if (totalCtrl.signal.aborted) {
-                    return { status: 'error', reasonCode: 'web_fetch_timeout', host: v.host, credentialsStripped };
-                }
-                continue;
-            }
-            const contentType = extractContentType(res.headers);
-            if (contentType && !ALLOWED_CT.has(contentType)) {
-                await drainBody(res.body, totalCtrl.signal);
-                await closeAgent();
-                if (totalCtrl.signal.aborted) {
-                    return { status: 'error', reasonCode: 'web_fetch_timeout', host: v.host, credentialsStripped };
-                }
-                return { status: 'error', reasonCode: 'web_fetch_unsupported_content_type', host: v.host, credentialsStripped };
-            }
-            let rawText;
-            let bytesReturned;
-            let truncated;
-            try {
-                const rawBody = res.body;
-                const result = await readBody(rawBody, cfg.maxBodyBytes, totalCtrl.signal);
-                rawText = result.text;
-                bytesReturned = result.bytesReturned;
-                truncated = result.truncated;
-            }
-            catch (e) {
-                await closeAgent();
-                if (e instanceof DOMException && e.name === 'AbortError') {
-                    return { status: 'error', reasonCode: 'web_fetch_timeout', host: v.host, credentialsStripped };
-                }
-                if (totalCtrl.signal.aborted) {
-                    return { status: 'error', reasonCode: 'web_fetch_timeout', host: v.host, credentialsStripped };
-                }
-                return { status: 'error', reasonCode: 'web_fetch_body_read_failed', host: v.host, credentialsStripped };
-            }
-            await closeAgent();
-            let extracted = rawText;
-            if (contentType === 'text/html')
-                extracted = extractBodyFromHTML(rawText);
-            let textTruncated = false;
-            if (extracted.length > RETURNED_TEXT_CAP) {
-                extracted = extracted.slice(0, RETURNED_TEXT_CAP);
-                textTruncated = true;
-            }
-            const wrapped = wrapFetchedContent({
-                url: v.url.toString(), host: v.host, content: extracted,
-            });
-            return {
-                status: 'ok', body: wrapped, rawText, host: v.host,
-                bytesReturned, truncated, textTruncated, credentialsStripped,
-            };
-        }
-    }
-    finally {
-        clearTimeout(totalTimer);
-    }
-}
-//# sourceMappingURL=web-fetch.js.map

package/dist/research/web-fetch.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"web-fetch.js","sourceRoot":"","sources":["../../src/research/web-fetch.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,EAAE;AACF,yEAAyE;AACzE,8EAA8E;AAC9E,+EAA+E;AAC/E,2EAA2E;AAC3E,4EAA4E;AAC5E,yCAAyC;AAEzC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAIxC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EACL,qBAAqB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,UAAU,EACxE,eAAe,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,QAAQ,EACvE,SAAS,EAAE,eAAe,GAE3B,MAAM,wBAAwB,CAAC;AA8BhC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,WAAW,EAAE,YAAY;IACzB,iBAAiB,EAAE,sBAAsB,EAAE,qBAAqB;IAChE,kBAAkB;CACnB,CAAC,CAAC;AACH,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,sBAAsB,CACpC,mBAA4B,EAC5B,cAAkC;IAElC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;QACxB,oEAAoE;QACpE,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjD,qDAAqD;YACrD,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACzB,IAAI,UAAU,CAAC,cAAc,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC5C,EAAE,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAA0B,EAAE,EAAE,CAAC,CAAC;oBAC/E,OAAO;gBACT,CAAC;YACH,CAAC;YACD,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,yEAAyE;QACzE,mEAAmE;QACnE,yDAAyD;QACzD,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;YACrC,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE;gBACtD,IAAI,GAAG,EAAE,CAAC;oBAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBACjC,MAAM,IAAI,GAAG,SAA4B,CAAC;gBAC1C,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBACzB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;wBACrB,IAAI,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;4BACvC,EAAE,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAA0B,EAAE,EAAE,CAAC,CAAC;4BAC/E,OAAO;wBACT,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACjB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,SAAS,qBAAqB,CAC5B,mBAA4B,EAC5B,cAAkC,EAClC,gBAAwB;IAExB,MAAM,MAAM,GAAG,sBAAsB,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;IAC3E,OAAO,IAAI,KAAK,CAAC;QACf,OAAO,EAAE,EAAE,MAAM,EAAE;QACnB,cAAc,EAAE,gBAAgB;KACjC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAoB;IACjD,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IACrC,MAAM,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,IAAI,IAAI,GAAG,EAAU,CAAC;IAC3E,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAEhC,IAAI,OAAY,CAAC;IACjB,IAAI,CAAC;QAAC,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IACrC,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,CAAC;IAAC,CAAC;IAC/F,mBAAmB,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAEvD,MAAM,SAAS,GAAG,IAAI,eAAe,EAAE,CAAC;IACxC,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC;IAE5E,IAAI,CAAC;QACH,IAAI,UAAU,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QACpC,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,CAAkC,CAAC;YACvC,IAAI,CAAC;gBACH,CAAC,GAAG,MAAM,iBAAiB,CACzB,UAAU,EAAE,aAAa,EAAE,mBAAmB,EAC9C,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,MAAM,CAClC,CAAC;YACJ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBACzD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,CAAC;gBACnF,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,iCAAiC,EAAE,mBAAmB,EAAE,CAAC;YACjG,CAAC;YACD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACV,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;oBAClB,MAAM,MAAM,GAAG,qBAAqB,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC;oBACnE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,mBAAmB,EAAE,CAAC;gBACpF,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,mBAAmB,EAAE,CAAC;YAC1F,CAAC;YAED,uEAAuE;YACvE,gEAAgE;YAChE,wEAAwE;YACxE,6CAA6C;YAC7C,IAAI,KAA8C,CAAC;YACnD,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBACzC,KAAK,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACN,KAAK,GAAG,qBAAqB,CAC3B,GAAG,CAAC,mBAAmB,IAAI,KAAK,EAChC,KAAK,CAAC,sBAAsB,EAC5B,GAAG,CAAC,gBAAgB,CACrB,CAAC;YACJ,CAAC;YACD,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE;gBAC5B,IAAI,KAAK,IAAI,OAAQ,KAAyC,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;oBACpF,IAAI,CAAC;wBAAC,MAAO,KAAwC,CAAC,KAAK,EAAE,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBACzF,CAAC;YACH,CAAC,CAAC;YAEF,IAAI,GAAG,CAAC;YACR,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;oBACpC,MAAM,EAAE,KAAK;oBACb,cAAc,EAAE,GAAG,CAAC,gBAAgB;oBACpC,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE;oBACrC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvC,MAAM,EAAE,SAAS,CAAC,MAAM;iBACzB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAU,EAAE,CAAC;gBACpB,MAAM,UAAU,EAAE,CAAC;gBACnB,yDAAyD;gBACzD,MAAM,GAAG,GAAI,CAA0B,EAAE,OAAO,IAAI,EAAE,CAAC;gBACvD,IAAI,GAAG,CAAC,QAAQ,CAAC,kCAAkC,CAAC,EAAE,CAAC;oBACrD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,kCAAkC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,mBAAmB,EAAE,CAAC;gBAChH,CAAC;gBACD,OAAO,EAAE,GAAG,eAAe,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,mBAAmB,EAAE,CAAC;YAClF,CAAC;YAED,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,SAAS,EAAE,CAAC;gBACZ,IAAI,SAAS,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;oBACjC,MAAM,UAAU,EAAE,CAAC;oBACnB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,8BAA8B,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,mBAAmB,EAAE,CAAC;gBAC5G,CAAC;gBACD,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,OAA4C,CAAC,CAAC;gBACnF,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,UAAU,EAAE,CAAC;oBACnB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,qCAAqC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,mBAAmB,EAAE,CAAC;gBACnH,CAAC;gBACD,IAAI,OAAY,CAAC;gBACjB,IAAI,CAAC;oBAAC,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;gBAAC,CAAC;gBAC3C,MAAM,CAAC;oBAAC,MAAM,UAAU,EAAE,CAAC;oBAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,gCAAgC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,mBAAmB,EAAE,CAAC;gBAAC,CAAC;gBAC1I,mBAAmB,GAAG,uBAAuB,CAAC,OAAO,CAAC,IAAI,mBAAmB,CAAC;gBAC9E,UAAU,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAChC,MAAM,SAAS,CAAC,GAAG,CAAC,IAAqC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;gBAC7E,MAAM,UAAU,EAAE,CAAC;gBACnB,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC7B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,mBAAmB,EAAE,CAAC;gBACjG,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAA4C,CAAC,CAAC;YACzF,IAAI,WAAW,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChD,MAAM,SAAS,CAAC,GAAG,CAAC,IAAqC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;gBAC7E,MAAM,UAAU,EAAE,CAAC;gBACnB,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC7B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,mBAAmB,EAAE,CAAC;gBACjG,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,oCAAoC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,mBAAmB,EAAE,CAAC;YAClH,CAAC;YAED,IAAI,OAAe,CAAC;YAAC,IAAI,aAAqB,CAAC;YAAC,IAAI,SAAkB,CAAC;YACvE,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,GAAG,CAAC,IAAwC,CAAC;gBAC7D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;gBAC3E,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;gBAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;gBAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YAC5F,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,UAAU,EAAE,CAAC;gBACnB,IAAI,CAAC,YAAY,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBACzD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,mBAAmB,EAAE,CAAC;gBACjG,CAAC;gBACD,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC7B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,mBAAmB,EAAE,CAAC;gBACjG,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,4BAA4B,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,mBAAmB,EAAE,CAAC;YAC1G,CAAC;YACD,MAAM,UAAU,EAAE,CAAC;YAEnB,IAAI,SAAS,GAAG,OAAO,CAAC;YACxB,IAAI,WAAW,KAAK,WAAW;gBAAE,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAE1E,IAAI,aAAa,GAAG,KAAK,CAAC;YAC1B,IAAI,SAAS,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;gBACzC,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;gBAClD,aAAa,GAAG,IAAI,CAAC;YACvB,CAAC;YAED,MAAM,OAAO,GAAG,kBAAkB,CAAC;gBACjC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS;aACxD,CAAC,CAAC;YACH,OAAO;gBACL,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;gBAClD,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,mBAAmB;aAC7D,CAAC;QACJ,CAAC;IACH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,UAAU,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC"}