@zxyycom/vibe-check 0.0.1

package/dist/esm/package-checks/json-schema-validation/options-validation.mjs

@@ -0,0 +1,212 @@
+import { hasExactPlainRecordKeys, snapshotClosedArray, snapshotClosedRecord } from "../../data-boundary/closed-values.mjs";
+import { validProjectFileSelection } from "../project-files/configuration.mjs";
+function exactRecord(value, keys) {
+    const record = snapshotClosedRecord(value);
+    return record !== undefined && hasExactPlainRecordKeys(record, keys) ? record : undefined;
+}
+function positiveSafeInteger(value) {
+    return typeof value === "number" && Number.isSafeInteger(value) && value > 0;
+}
+export function validJsonSchemaValidationOptions(candidateOptions) {
+    const options = exactRecord(candidateOptions, [
+        "files",
+        "maximumBytes",
+        "schemaIdentity",
+        "referenceResolution",
+        "schemas",
+        "bindings"
+    ]);
+    if (options === undefined ||
+        !validProjectFileSelection(options.files) ||
+        !positiveSafeInteger(options.maximumBytes) ||
+        !validJsonSchemaIdentity(options.schemaIdentity) ||
+        !validJsonSchemaReferenceResolution(options.referenceResolution)) {
+        return false;
+    }
+    const schemas = snapshotClosedArray(options.schemas);
+    const bindings = snapshotClosedArray(options.bindings);
+    const declaredSchemaIds = schemas === undefined ? undefined : validatedSchemaRegistryIds(schemas);
+    return (bindings !== undefined &&
+        declaredSchemaIds !== undefined &&
+        validJsonSchemaBindings(bindings, declaredSchemaIds));
+}
+function validJsonSchemaIdentity(candidateIdentity) {
+    const identity = exactRecord(candidateIdentity, ["mode"]);
+    return (identity !== undefined &&
+        (identity.mode === "require-match" ||
+            identity.mode === "configuration-authoritative" ||
+            identity.mode === "document-authoritative"));
+}
+function validJsonSchemaReferenceResolution(candidateResolution) {
+    const referenceResolution = snapshotClosedRecord(candidateResolution);
+    if (referenceResolution === undefined || typeof referenceResolution.mode !== "string") {
+        return false;
+    }
+    if (referenceResolution.mode === "offline") {
+        return exactRecord(referenceResolution, ["mode"]) !== undefined;
+    }
+    if (referenceResolution.mode !== "allowlisted")
+        return false;
+    const allowlisted = exactRecord(referenceResolution, ["mode", "sources"]);
+    const sources = allowlisted === undefined ? undefined : snapshotClosedArray(allowlisted.sources);
+    return sources !== undefined && sources.length > 0 && validJsonSchemaReferenceSources(sources);
+}
+function validJsonSchemaReferenceSources(sources) {
+    const sourceIds = new Set();
+    const sourceLocations = new Set();
+    let bundledCatalogCount = 0;
+    for (const sourceCandidate of sources) {
+        const source = validatedReferenceSource(sourceCandidate);
+        if (source === undefined)
+            return false;
+        if (source.kind === "bundled") {
+            bundledCatalogCount += 1;
+            if (bundledCatalogCount > 1)
+                return false;
+            continue;
+        }
+        if (sourceIds.has(source.id) || sourceLocations.has(source.location))
+            return false;
+        sourceIds.add(source.id);
+        sourceLocations.add(source.location);
+    }
+    return true;
+}
+function validatedReferenceSource(sourceCandidate) {
+    const source = snapshotClosedRecord(sourceCandidate);
+    if (source === undefined || typeof source.kind !== "string")
+        return undefined;
+    if (source.kind === "bundled")
+        return validBundledSource(source) ? { kind: "bundled" } : undefined;
+    if (source.kind !== "https")
+        return undefined;
+    const httpsSource = validatedHttpsSource(source);
+    return httpsSource === undefined ? undefined : { kind: "https", ...httpsSource };
+}
+function validBundledSource(source) {
+    return exactRecord(source, ["kind", "catalog"])?.catalog === "json-schema-2020-12";
+}
+function validatedHttpsSource(source) {
+    const httpsSource = exactRecord(source, ["kind", "id", "origin", "pathPrefix"]);
+    if (httpsSource === undefined ||
+        !safeAbsoluteIdentifier(httpsSource.id) ||
+        !safeHttpsOrigin(httpsSource.origin) ||
+        !safePathPrefix(httpsSource.pathPrefix))
+        return undefined;
+    return { id: httpsSource.id, location: `${httpsSource.origin}\n${httpsSource.pathPrefix}` };
+}
+/** Returns declared IDs only after the whole schema registry satisfies its closed authoring invariant. */
+function validatedSchemaRegistryIds(schemas) {
+    const declaredSchemaIds = new Set();
+    const schemaPaths = new Set();
+    for (const schemaCandidate of schemas) {
+        const schemaRecord = exactRecord(schemaCandidate, ["id", "path"]);
+        if (schemaRecord === undefined ||
+            !safeAbsoluteIdentifier(schemaRecord.id) ||
+            !normalizedProjectJsonPath(schemaRecord.path) ||
+            declaredSchemaIds.has(schemaRecord.id) ||
+            schemaPaths.has(schemaRecord.path)) {
+            return undefined;
+        }
+        declaredSchemaIds.add(schemaRecord.id);
+        schemaPaths.add(schemaRecord.path);
+    }
+    return declaredSchemaIds;
+}
+function validJsonSchemaBindings(bindings, declaredSchemaIds) {
+    const bindingIds = new Set();
+    const bindingTargets = new Set();
+    for (const bindingCandidate of bindings) {
+        const bindingRecord = exactRecord(bindingCandidate, ["id", "instancePath", "schemaId"]);
+        if (bindingRecord === undefined ||
+            !safeBindingId(bindingRecord.id) ||
+            !normalizedProjectJsonPath(bindingRecord.instancePath) ||
+            typeof bindingRecord.schemaId !== "string" ||
+            !declaredSchemaIds.has(bindingRecord.schemaId) ||
+            bindingIds.has(bindingRecord.id)) {
+            return false;
+        }
+        const bindingTarget = `${bindingRecord.instancePath}\n${bindingRecord.schemaId}`;
+        if (bindingTargets.has(bindingTarget))
+            return false;
+        bindingIds.add(bindingRecord.id);
+        bindingTargets.add(bindingTarget);
+    }
+    return true;
+}
+function safeAbsoluteIdentifier(identifier) {
+    if (!boundedNonEmptyString(identifier, 256))
+        return false;
+    try {
+        const url = new URL(identifier);
+        return safeIdentifierUrl(url, identifier);
+    }
+    catch {
+        return false;
+    }
+}
+function safeIdentifierUrl(url, identifier) {
+    return ((url.protocol === "https:" || url.protocol === "urn:") &&
+        url.username.length === 0 &&
+        url.password.length === 0 &&
+        url.search.length === 0 &&
+        url.hash.length === 0 &&
+        url.href === identifier);
+}
+function safeHttpsOrigin(origin) {
+    if (!boundedNonEmptyString(origin, 200))
+        return false;
+    try {
+        const url = new URL(origin);
+        return safeHttpsOriginUrl(url, origin);
+    }
+    catch {
+        return false;
+    }
+}
+function safeHttpsOriginUrl(url, origin) {
+    return (url.protocol === "https:" &&
+        url.hostname.length > 0 &&
+        url.username.length === 0 &&
+        url.password.length === 0 &&
+        url.search.length === 0 &&
+        url.hash.length === 0 &&
+        url.pathname === "/" &&
+        url.origin === origin);
+}
+function safePathPrefix(pathPrefix) {
+    if (!validPathPrefixSyntax(pathPrefix))
+        return false;
+    const segments = pathPrefix.split("/");
+    return segments.every((segment, index) => index === 0 || segment === "" || (segment !== "." && segment !== ".."));
+}
+function validPathPrefixSyntax(pathPrefix) {
+    return (boundedNonEmptyString(pathPrefix, 256) &&
+        pathPrefix.startsWith("/") &&
+        (pathPrefix === "/" || pathPrefix.endsWith("/")) &&
+        !pathPrefix.includes("\\") &&
+        !pathPrefix.includes("?") &&
+        !pathPrefix.includes("#") &&
+        !pathPrefix.includes("//"));
+}
+function boundedNonEmptyString(value, maximumLength) {
+    return typeof value === "string" && value.length > 0 && value.length <= maximumLength;
+}
+function normalizedProjectJsonPath(projectPath) {
+    if (typeof projectPath !== "string" ||
+        projectPath.length === 0 ||
+        projectPath.length > 512 ||
+        !projectPath.endsWith(".json") ||
+        projectPath.startsWith("/") ||
+        projectPath.includes("\\") ||
+        projectPath.includes("\u0000")) {
+        return false;
+    }
+    return projectPath
+        .split("/")
+        .every((segment) => segment.length > 0 && segment !== "." && segment !== "..");
+}
+function safeBindingId(bindingId) {
+    return typeof bindingId === "string" && /^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/u.test(bindingId);
+}
+//# sourceMappingURL=options-validation.mjs.map

package/dist/esm/package-checks/json-schema-validation/options-validation.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"options-validation.mjs","sourceRoot":"","sources":["../../../../src/package-checks/json-schema-validation/options-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAG9E,SAAS,WAAW,CAClB,KAAc,EACd,IAAuB;IAEvB,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,MAAM,KAAK,SAAS,IAAI,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5F,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,gBAAyB;IAEzB,MAAM,OAAO,GAAG,WAAW,CAAC,gBAAgB,EAAE;QAC5C,OAAO;QACP,cAAc;QACd,gBAAgB;QAChB,qBAAqB;QACrB,SAAS;QACT,UAAU;KACX,CAAC,CAAC;IACH,IACE,OAAO,KAAK,SAAS;QACrB,CAAC,yBAAyB,CAAC,OAAO,CAAC,KAAK,CAAC;QACzC,CAAC,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC;QAC1C,CAAC,uBAAuB,CAAC,OAAO,CAAC,cAAc,CAAC;QAChD,CAAC,kCAAkC,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAChE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,iBAAiB,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAClG,OAAO,CACL,QAAQ,KAAK,SAAS;QACtB,iBAAiB,KAAK,SAAS;QAC/B,uBAAuB,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CACrD,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,iBAA0B;IACzD,MAAM,QAAQ,GAAG,WAAW,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,OAAO,CACL,QAAQ,KAAK,SAAS;QACtB,CAAC,QAAQ,CAAC,IAAI,KAAK,eAAe;YAChC,QAAQ,CAAC,IAAI,KAAK,6BAA6B;YAC/C,QAAQ,CAAC,IAAI,KAAK,wBAAwB,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,SAAS,kCAAkC,CAAC,mBAA4B;IACtE,MAAM,mBAAmB,GAAG,oBAAoB,CAAC,mBAAmB,CAAC,CAAC;IACtE,IAAI,mBAAmB,KAAK,SAAS,IAAI,OAAO,mBAAmB,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,mBAAmB,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,WAAW,CAAC,mBAAmB,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,SAAS,CAAC;IAClE,CAAC;IACD,IAAI,mBAAmB,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,KAAK,CAAC;IAE7D,MAAM,WAAW,GAAG,WAAW,CAAC,mBAAmB,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACjG,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,+BAA+B,CAAC,OAAO,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,+BAA+B,CAAC,OAA2B;IAClE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,KAAK,MAAM,eAAe,IAAI,OAAO,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,wBAAwB,CAAC,eAAe,CAAC,CAAC;QACzD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,mBAAmB,IAAI,CAAC,CAAC;YACzB,IAAI,mBAAmB,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1C,SAAS;QACX,CAAC;QACD,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QACnF,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzB,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,wBAAwB,CAAC,eAAwB;IACxD,MAAM,MAAM,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;IACrD,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9E,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAC3B,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAkB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,WAAW,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACjD,OAAO,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,GAAG,WAAW,EAAE,CAAC;AAC5F,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAyC;IACnE,OAAO,WAAW,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,KAAK,qBAAqB,CAAC;AACrF,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAyC;IACrE,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;IAChF,IACE,WAAW,KAAK,SAAS;QACzB,CAAC,sBAAsB,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,CAAC,eAAe,CAAC,WAAW,CAAC,MAAM,CAAC;QACpC,CAAC,cAAc,CAAC,WAAW,CAAC,UAAU,CAAC;QAEvC,OAAO,SAAS,CAAC;IACnB,OAAO,EAAE,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,UAAU,EAAE,EAAE,CAAC;AAC9F,CAAC;AAED,0GAA0G;AAC1G,SAAS,0BAA0B,CAAC,OAA2B;IAC7D,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,eAAe,IAAI,OAAO,EAAE,CAAC;QACtC,MAAM,YAAY,GAAG,WAAW,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAClE,IACE,YAAY,KAAK,SAAS;YAC1B,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,CAAC,yBAAyB,CAAC,YAAY,CAAC,IAAI,CAAC;YAC7C,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACtC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,EAClC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACvC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAA4B,EAC5B,iBAAsC;IAEtC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,KAAK,MAAM,gBAAgB,IAAI,QAAQ,EAAE,CAAC;QACxC,MAAM,aAAa,GAAG,WAAW,CAAC,gBAAgB,EAAE,CAAC,IAAI,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC;QACxF,IACE,aAAa,KAAK,SAAS;YAC3B,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,CAAC;YAChC,CAAC,yBAAyB,CAAC,aAAa,CAAC,YAAY,CAAC;YACtD,OAAO,aAAa,CAAC,QAAQ,KAAK,QAAQ;YAC1C,CAAC,iBAAiB,CAAC,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC;YAC9C,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,EAChC,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,aAAa,GAAG,GAAG,aAAa,CAAC,YAAY,KAAK,aAAa,CAAC,QAAQ,EAAE,CAAC;QACjF,IAAI,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC;YAAE,OAAO,KAAK,CAAC;QACpD,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACjC,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAmB;IACjD,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;QAChC,OAAO,iBAAiB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAQ,EAAE,UAAkB;IACrD,OAAO,CACL,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC;QACtD,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QACrB,GAAG,CAAC,IAAI,KAAK,UAAU,CACxB,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAe;IACtC,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAQ,EAAE,MAAc;IAClD,OAAO,CACL,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QACvB,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QACrB,GAAG,CAAC,QAAQ,KAAK,GAAG;QACpB,GAAG,CAAC,MAAM,KAAK,MAAM,CACtB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,UAAmB;IACzC,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,QAAQ,CAAC,KAAK,CACnB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,OAAO,KAAK,EAAE,IAAI,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAC3F,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAmB;IAChD,OAAO,CACL,qBAAqB,CAAC,UAAU,EAAE,GAAG,CAAC;QACtC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAC1B,CAAC,UAAU,KAAK,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC1B,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;QACzB,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;QACzB,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAE,aAAqB;IAClE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,aAAa,CAAC;AACxF,CAAC;AAED,SAAS,yBAAyB,CAAC,WAAoB;IACrD,IACE,OAAO,WAAW,KAAK,QAAQ;QAC/B,WAAW,CAAC,MAAM,KAAK,CAAC;QACxB,WAAW,CAAC,MAAM,GAAG,GAAG;QACxB,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC9B,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;QAC3B,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC1B,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAC9B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,WAAW;SACf,KAAK,CAAC,GAAG,CAAC;SACV,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,aAAa,CAAC,SAAkB;IACvC,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,qCAAqC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAChG,CAAC","sourcesContent":["import {\n  hasExactPlainRecordKeys,\n  snapshotClosedArray,\n  snapshotClosedRecord\n} from \"../../data-boundary/closed-values.ts\";\nimport { validProjectFileSelection } from \"../project-files/configuration.ts\";\nimport type { ResolvedJsonSchemaValidationOptions } from \"./options.ts\";\n\nfunction exactRecord(\n  value: unknown,\n  keys: readonly string[]\n): Readonly<Record<string, unknown>> | undefined {\n  const record = snapshotClosedRecord(value);\n  return record !== undefined && hasExactPlainRecordKeys(record, keys) ? record : undefined;\n}\n\nfunction positiveSafeInteger(value: unknown): value is number {\n  return typeof value === \"number\" && Number.isSafeInteger(value) && value > 0;\n}\n\nexport function validJsonSchemaValidationOptions(\n  candidateOptions: unknown\n): candidateOptions is ResolvedJsonSchemaValidationOptions {\n  const options = exactRecord(candidateOptions, [\n    \"files\",\n    \"maximumBytes\",\n    \"schemaIdentity\",\n    \"referenceResolution\",\n    \"schemas\",\n    \"bindings\"\n  ]);\n  if (\n    options === undefined ||\n    !validProjectFileSelection(options.files) ||\n    !positiveSafeInteger(options.maximumBytes) ||\n    !validJsonSchemaIdentity(options.schemaIdentity) ||\n    !validJsonSchemaReferenceResolution(options.referenceResolution)\n  ) {\n    return false;\n  }\n\n  const schemas = snapshotClosedArray(options.schemas);\n  const bindings = snapshotClosedArray(options.bindings);\n  const declaredSchemaIds = schemas === undefined ? undefined : validatedSchemaRegistryIds(schemas);\n  return (\n    bindings !== undefined &&\n    declaredSchemaIds !== undefined &&\n    validJsonSchemaBindings(bindings, declaredSchemaIds)\n  );\n}\n\nfunction validJsonSchemaIdentity(candidateIdentity: unknown): boolean {\n  const identity = exactRecord(candidateIdentity, [\"mode\"]);\n  return (\n    identity !== undefined &&\n    (identity.mode === \"require-match\" ||\n      identity.mode === \"configuration-authoritative\" ||\n      identity.mode === \"document-authoritative\")\n  );\n}\n\nfunction validJsonSchemaReferenceResolution(candidateResolution: unknown): boolean {\n  const referenceResolution = snapshotClosedRecord(candidateResolution);\n  if (referenceResolution === undefined || typeof referenceResolution.mode !== \"string\") {\n    return false;\n  }\n  if (referenceResolution.mode === \"offline\") {\n    return exactRecord(referenceResolution, [\"mode\"]) !== undefined;\n  }\n  if (referenceResolution.mode !== \"allowlisted\") return false;\n\n  const allowlisted = exactRecord(referenceResolution, [\"mode\", \"sources\"]);\n  const sources = allowlisted === undefined ? undefined : snapshotClosedArray(allowlisted.sources);\n  return sources !== undefined && sources.length > 0 && validJsonSchemaReferenceSources(sources);\n}\n\nfunction validJsonSchemaReferenceSources(sources: readonly unknown[]): boolean {\n  const sourceIds = new Set<string>();\n  const sourceLocations = new Set<string>();\n  let bundledCatalogCount = 0;\n  for (const sourceCandidate of sources) {\n    const source = validatedReferenceSource(sourceCandidate);\n    if (source === undefined) return false;\n    if (source.kind === \"bundled\") {\n      bundledCatalogCount += 1;\n      if (bundledCatalogCount > 1) return false;\n      continue;\n    }\n    if (sourceIds.has(source.id) || sourceLocations.has(source.location)) return false;\n    sourceIds.add(source.id);\n    sourceLocations.add(source.location);\n  }\n  return true;\n}\n\nfunction validatedReferenceSource(sourceCandidate: unknown) {\n  const source = snapshotClosedRecord(sourceCandidate);\n  if (source === undefined || typeof source.kind !== \"string\") return undefined;\n  if (source.kind === \"bundled\")\n    return validBundledSource(source) ? { kind: \"bundled\" as const } : undefined;\n  if (source.kind !== \"https\") return undefined;\n  const httpsSource = validatedHttpsSource(source);\n  return httpsSource === undefined ? undefined : { kind: \"https\" as const, ...httpsSource };\n}\n\nfunction validBundledSource(source: Readonly<Record<string, unknown>>): boolean {\n  return exactRecord(source, [\"kind\", \"catalog\"])?.catalog === \"json-schema-2020-12\";\n}\n\nfunction validatedHttpsSource(source: Readonly<Record<string, unknown>>) {\n  const httpsSource = exactRecord(source, [\"kind\", \"id\", \"origin\", \"pathPrefix\"]);\n  if (\n    httpsSource === undefined ||\n    !safeAbsoluteIdentifier(httpsSource.id) ||\n    !safeHttpsOrigin(httpsSource.origin) ||\n    !safePathPrefix(httpsSource.pathPrefix)\n  )\n    return undefined;\n  return { id: httpsSource.id, location: `${httpsSource.origin}\\n${httpsSource.pathPrefix}` };\n}\n\n/** Returns declared IDs only after the whole schema registry satisfies its closed authoring invariant. */\nfunction validatedSchemaRegistryIds(schemas: readonly unknown[]): ReadonlySet<string> | undefined {\n  const declaredSchemaIds = new Set<string>();\n  const schemaPaths = new Set<string>();\n  for (const schemaCandidate of schemas) {\n    const schemaRecord = exactRecord(schemaCandidate, [\"id\", \"path\"]);\n    if (\n      schemaRecord === undefined ||\n      !safeAbsoluteIdentifier(schemaRecord.id) ||\n      !normalizedProjectJsonPath(schemaRecord.path) ||\n      declaredSchemaIds.has(schemaRecord.id) ||\n      schemaPaths.has(schemaRecord.path)\n    ) {\n      return undefined;\n    }\n    declaredSchemaIds.add(schemaRecord.id);\n    schemaPaths.add(schemaRecord.path);\n  }\n  return declaredSchemaIds;\n}\n\nfunction validJsonSchemaBindings(\n  bindings: readonly unknown[],\n  declaredSchemaIds: ReadonlySet<string>\n): boolean {\n  const bindingIds = new Set<string>();\n  const bindingTargets = new Set<string>();\n  for (const bindingCandidate of bindings) {\n    const bindingRecord = exactRecord(bindingCandidate, [\"id\", \"instancePath\", \"schemaId\"]);\n    if (\n      bindingRecord === undefined ||\n      !safeBindingId(bindingRecord.id) ||\n      !normalizedProjectJsonPath(bindingRecord.instancePath) ||\n      typeof bindingRecord.schemaId !== \"string\" ||\n      !declaredSchemaIds.has(bindingRecord.schemaId) ||\n      bindingIds.has(bindingRecord.id)\n    ) {\n      return false;\n    }\n    const bindingTarget = `${bindingRecord.instancePath}\\n${bindingRecord.schemaId}`;\n    if (bindingTargets.has(bindingTarget)) return false;\n    bindingIds.add(bindingRecord.id);\n    bindingTargets.add(bindingTarget);\n  }\n  return true;\n}\n\nfunction safeAbsoluteIdentifier(identifier: unknown): identifier is string {\n  if (!boundedNonEmptyString(identifier, 256)) return false;\n  try {\n    const url = new URL(identifier);\n    return safeIdentifierUrl(url, identifier);\n  } catch {\n    return false;\n  }\n}\n\nfunction safeIdentifierUrl(url: URL, identifier: string): boolean {\n  return (\n    (url.protocol === \"https:\" || url.protocol === \"urn:\") &&\n    url.username.length === 0 &&\n    url.password.length === 0 &&\n    url.search.length === 0 &&\n    url.hash.length === 0 &&\n    url.href === identifier\n  );\n}\n\nfunction safeHttpsOrigin(origin: unknown): origin is string {\n  if (!boundedNonEmptyString(origin, 200)) return false;\n  try {\n    const url = new URL(origin);\n    return safeHttpsOriginUrl(url, origin);\n  } catch {\n    return false;\n  }\n}\n\nfunction safeHttpsOriginUrl(url: URL, origin: string): boolean {\n  return (\n    url.protocol === \"https:\" &&\n    url.hostname.length > 0 &&\n    url.username.length === 0 &&\n    url.password.length === 0 &&\n    url.search.length === 0 &&\n    url.hash.length === 0 &&\n    url.pathname === \"/\" &&\n    url.origin === origin\n  );\n}\n\nfunction safePathPrefix(pathPrefix: unknown): pathPrefix is string {\n  if (!validPathPrefixSyntax(pathPrefix)) return false;\n  const segments = pathPrefix.split(\"/\");\n  return segments.every(\n    (segment, index) => index === 0 || segment === \"\" || (segment !== \".\" && segment !== \"..\")\n  );\n}\n\nfunction validPathPrefixSyntax(pathPrefix: unknown): pathPrefix is string {\n  return (\n    boundedNonEmptyString(pathPrefix, 256) &&\n    pathPrefix.startsWith(\"/\") &&\n    (pathPrefix === \"/\" || pathPrefix.endsWith(\"/\")) &&\n    !pathPrefix.includes(\"\\\\\") &&\n    !pathPrefix.includes(\"?\") &&\n    !pathPrefix.includes(\"#\") &&\n    !pathPrefix.includes(\"//\")\n  );\n}\n\nfunction boundedNonEmptyString(value: unknown, maximumLength: number): value is string {\n  return typeof value === \"string\" && value.length > 0 && value.length <= maximumLength;\n}\n\nfunction normalizedProjectJsonPath(projectPath: unknown): projectPath is string {\n  if (\n    typeof projectPath !== \"string\" ||\n    projectPath.length === 0 ||\n    projectPath.length > 512 ||\n    !projectPath.endsWith(\".json\") ||\n    projectPath.startsWith(\"/\") ||\n    projectPath.includes(\"\\\\\") ||\n    projectPath.includes(\"\\u0000\")\n  ) {\n    return false;\n  }\n  return projectPath\n    .split(\"/\")\n    .every((segment) => segment.length > 0 && segment !== \".\" && segment !== \"..\");\n}\n\nfunction safeBindingId(bindingId: unknown): bindingId is string {\n  return typeof bindingId === \"string\" && /^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/u.test(bindingId);\n}\n"]}

package/dist/esm/package-checks/json-schema-validation/options.mjs

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=options.mjs.map

package/dist/esm/package-checks/json-schema-validation/options.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.mjs","sourceRoot":"","sources":["../../../../src/package-checks/json-schema-validation/options.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ProjectFileSelection,\n  ProjectFileSelectionOptions\n} from \"../project-files/configuration.ts\";\n\nexport type JsonSchemaIdentityMode =\n  | \"require-match\"\n  | \"configuration-authoritative\"\n  | \"document-authoritative\";\n\nexport interface JsonSchemaIdentity {\n  readonly mode: JsonSchemaIdentityMode;\n}\n\nexport type JsonSchemaReferenceSource =\n  | Readonly<{ readonly kind: \"bundled\"; readonly catalog: \"json-schema-2020-12\" }>\n  | Readonly<{\n      readonly kind: \"https\";\n      readonly id: string;\n      readonly origin: string;\n      readonly pathPrefix: string;\n    }>;\n\nexport type JsonSchemaReferenceResolution =\n  | Readonly<{ readonly mode: \"offline\" }>\n  | Readonly<{\n      readonly mode: \"allowlisted\";\n      readonly sources: readonly JsonSchemaReferenceSource[];\n    }>;\n\nexport interface RegisteredJsonSchema {\n  readonly id: string;\n  readonly path: string;\n}\n\nexport interface JsonSchemaInstanceBinding {\n  readonly id: string;\n  readonly instancePath: string;\n  readonly schemaId: string;\n}\n\n/** `jsonSchemaValidation(options?)` 接受的可省略 authoring policy。 */\nexport interface JsonSchemaValidationOptions {\n  /** schema/instance declarations 必须属于的 repository-file selection。 */\n  readonly files?: ProjectFileSelectionOptions;\n  /** 每个 local schema/instance document 允许的最大 raw byte 数；省略时为 1 MiB。 */\n  readonly maximumBytes?: number;\n  /** 整个 Check 共用的 schema root identity 规则；不得按 schema 混用。 */\n  readonly schemaIdentity?: JsonSchemaIdentity;\n  /** 默认离线；额外 schema source 必须显式 allowlist。 */\n  readonly referenceResolution?: JsonSchemaReferenceResolution;\n  /** 显式注册的 schema resources；ID 是 binding 和 public fact 使用的安全 authoring identity。 */\n  readonly schemas?: readonly RegisteredJsonSchema[];\n  /** 明确把一个由本 Check file selection 批准的 instance path 绑定到已声明 schema。 */\n  readonly bindings?: readonly JsonSchemaInstanceBinding[];\n}\n\n/** `json-schema-validation` execution 消费的完整、冻结 options。 */\nexport interface ResolvedJsonSchemaValidationOptions {\n  readonly files: ProjectFileSelection;\n  readonly maximumBytes: number;\n  readonly schemaIdentity: JsonSchemaIdentity;\n  readonly referenceResolution: JsonSchemaReferenceResolution;\n  readonly schemas: readonly RegisteredJsonSchema[];\n  readonly bindings: readonly JsonSchemaInstanceBinding[];\n}\n"]}

package/dist/esm/package-checks/json-schema-validation/reference-resolver.mjs

@@ -0,0 +1,128 @@
+import { inspectSchemaPolicy, isJsonObject } from "./schema-policy.mjs";
+import { inspectStrictJsonBytes } from "../json-document/strict-document.mjs";
+import { normalizeRemoteReference, readBoundedResponse } from "./remote-response.mjs";
+const MAX_REMOTE_RESPONSE_BYTES = 1_048_576;
+const REMOTE_TIMEOUT_MS = 5_000;
+export class ControlledReferenceResolver {
+    #cache = new Map();
+    #loadQueue = Promise.resolve();
+    #allowedHttpsSources;
+    #resolverInput;
+    constructor(input) {
+        this.#resolverInput = input;
+        this.#allowedHttpsSources =
+            input.referenceResolution.mode === "allowlisted"
+                ? Object.freeze(input.referenceResolution.sources.flatMap((source) => source.kind === "https"
+                    ? [Object.freeze({ origin: source.origin, pathPrefix: source.pathPrefix })]
+                    : []))
+                : Object.freeze([]);
+    }
+    load(referenceUri) {
+        let normalizedReferenceUri;
+        try {
+            normalizedReferenceUri = normalizeRemoteReference(referenceUri);
+        }
+        catch {
+            return Promise.reject(new ReferenceResolutionFailure("unapproved-reference"));
+        }
+        const cached = this.#cache.get(normalizedReferenceUri);
+        if (cached !== undefined)
+            return cached;
+        const loading = this.queueLoad(normalizedReferenceUri);
+        this.#cache.set(normalizedReferenceUri, loading);
+        return loading;
+    }
+    queueLoad(referenceUri) {
+        const loading = this.#loadQueue.then(() => this.loadUncached(referenceUri), () => this.loadUncached(referenceUri));
+        this.#loadQueue = loading.then(() => undefined, () => undefined);
+        return loading;
+    }
+    async loadUncached(referenceUri) {
+        if (!this.isAllowedReference(referenceUri))
+            throw new ReferenceResolutionFailure("unapproved-reference");
+        if (this.#resolverInput.signal.aborted)
+            throw new ReferenceTransportFailure();
+        const controller = new AbortController();
+        const abortForCaller = () => controller.abort();
+        this.#resolverInput.signal.addEventListener("abort", abortForCaller, { once: true });
+        const timeout = setTimeout(() => controller.abort(), REMOTE_TIMEOUT_MS);
+        try {
+            return await this.loadWithController(referenceUri, controller);
+        }
+        catch (error) {
+            if (error instanceof ReferenceResolutionFailure ||
+                error instanceof ReferenceTransportFailure) {
+                throw error;
+            }
+            throw new ReferenceTransportFailure();
+        }
+        finally {
+            clearTimeout(timeout);
+            this.#resolverInput.signal.removeEventListener("abort", abortForCaller);
+        }
+    }
+    async loadWithController(referenceUri, controller) {
+        const response = await fetchSchemaResponse(referenceUri, controller.signal);
+        assertAllowedResponse(response);
+        if (this.#resolverInput.signal.aborted)
+            throw new ReferenceTransportFailure();
+        const bytes = await readBoundedResponse(response, MAX_REMOTE_RESPONSE_BYTES, this.#resolverInput.signal);
+        return schemaFromRemoteBytes(bytes, referenceUri);
+    }
+    isAllowedReference(referenceUri) {
+        let url;
+        try {
+            url = new URL(referenceUri);
+        }
+        catch {
+            return false;
+        }
+        return this.#allowedHttpsSources.some((source) => url.origin === source.origin &&
+            (source.pathPrefix === "/" || url.pathname.startsWith(source.pathPrefix)));
+    }
+}
+async function fetchSchemaResponse(referenceUri, signal) {
+    if (typeof globalThis.fetch !== "function")
+        throw new ReferenceTransportFailure();
+    return globalThis.fetch(referenceUri, {
+        credentials: "omit",
+        method: "GET",
+        redirect: "manual",
+        signal
+    });
+}
+function assertAllowedResponse(response) {
+    if (response.redirected || (response.status >= 300 && response.status < 400)) {
+        throw new ReferenceResolutionFailure("unapproved-reference");
+    }
+    if (response.ok)
+        return;
+    if (response.status >= 500)
+        throw new ReferenceTransportFailure();
+    throw new ReferenceResolutionFailure("unapproved-reference");
+}
+function schemaFromRemoteBytes(bytes, referenceUri) {
+    if (bytes === "too-large")
+        throw new ReferenceResolutionFailure("remote-document-invalid");
+    const document = inspectStrictJsonBytes(bytes);
+    if (document.kind !== "valid" || !isJsonObject(document.jsonValue)) {
+        throw new ReferenceResolutionFailure("remote-document-invalid");
+    }
+    if (document.jsonValue.$id !== referenceUri) {
+        throw new ReferenceResolutionFailure("remote-schema-id-mismatch");
+    }
+    const referenceReason = inspectSchemaPolicy(document.jsonValue);
+    if (referenceReason !== undefined)
+        throw new ReferenceResolutionFailure(referenceReason);
+    return document.jsonValue;
+}
+export class ReferenceResolutionFailure extends Error {
+    reason;
+    constructor(reason) {
+        super(reason);
+        this.reason = reason;
+    }
+}
+export class ReferenceTransportFailure extends Error {
+}
+//# sourceMappingURL=reference-resolver.mjs.map

package/dist/esm/package-checks/json-schema-validation/reference-resolver.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"reference-resolver.mjs","sourceRoot":"","sources":["../../../../src/package-checks/json-schema-validation/reference-resolver.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAOrF,MAAM,yBAAyB,GAAG,SAAS,CAAC;AAC5C,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC,MAAM,OAAO,2BAA2B;IAC7B,MAAM,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC9D,UAAU,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IACrC,oBAAoB,CAGxB;IACI,cAAc,CAA0B;IAEjD,YAAY,KAA8B;QACxC,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC,oBAAoB;YACvB,KAAK,CAAC,mBAAmB,CAAC,IAAI,KAAK,aAAa;gBAC9C,CAAC,CAAC,MAAM,CAAC,MAAM,CACX,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACnD,MAAM,CAAC,IAAI,KAAK,OAAO;oBACrB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;oBAC3E,CAAC,CAAC,EAAE,CACP,CACF;gBACH,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,CAAC,YAAoB;QACvB,IAAI,sBAA8B,CAAC;QACnC,IAAI,CAAC;YACH,sBAAsB,GAAG,wBAAwB,CAAC,YAAY,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,0BAA0B,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACvD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,SAAS,CAAC,YAAoB;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAClC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,EACrC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CACtC,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAC5B,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,YAAoB;QAC7C,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC;YACxC,MAAM,IAAI,0BAA0B,CAAC,sBAAsB,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,yBAAyB,EAAE,CAAC;QAC9E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,cAAc,GAAG,GAAS,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACxE,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK,YAAY,0BAA0B;gBAC3C,KAAK,YAAY,yBAAyB,EAC1C,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,yBAAyB,EAAE,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,YAAoB,EACpB,UAA2B;QAE3B,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5E,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,yBAAyB,EAAE,CAAC;QAC9E,MAAM,KAAK,GAAG,MAAM,mBAAmB,CACrC,QAAQ,EACR,yBAAyB,EACzB,IAAI,CAAC,cAAc,CAAC,MAAM,CAC3B,CAAC;QACF,OAAO,qBAAqB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACpD,CAAC;IAEO,kBAAkB,CAAC,YAAoB;QAC7C,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,CACnC,CAAC,MAAM,EAAE,EAAE,CACT,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YAC5B,CAAC,MAAM,CAAC,UAAU,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAC5E,CAAC;IACJ,CAAC;CACF;AAED,KAAK,UAAU,mBAAmB,CAAC,YAAoB,EAAE,MAAmB;IAC1E,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,UAAU;QAAE,MAAM,IAAI,yBAAyB,EAAE,CAAC;IAClF,OAAO,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE;QACpC,WAAW,EAAE,MAAM;QACnB,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,QAAQ;QAClB,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAkB;IAC/C,IAAI,QAAQ,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,0BAA0B,CAAC,sBAAsB,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,QAAQ,CAAC,EAAE;QAAE,OAAO;IACxB,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;QAAE,MAAM,IAAI,yBAAyB,EAAE,CAAC;IAClE,MAAM,IAAI,0BAA0B,CAAC,sBAAsB,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAA+B,EAC/B,YAAoB;IAEpB,IAAI,KAAK,KAAK,WAAW;QAAE,MAAM,IAAI,0BAA0B,CAAC,yBAAyB,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,0BAA0B,CAAC,yBAAyB,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,CAAC,GAAG,KAAK,YAAY,EAAE,CAAC;QAC5C,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,eAAe,GAAG,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,eAAe,KAAK,SAAS;QAAE,MAAM,IAAI,0BAA0B,CAAC,eAAe,CAAC,CAAC;IACzF,OAAO,QAAQ,CAAC,SAAS,CAAC;AAC5B,CAAC;AAED,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC1C,MAAM,CAAsB;IAErC,YAAY,MAA2B;QACrC,KAAK,CAAC,MAAM,CAAC,CAAC;QACd,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,OAAO,yBAA0B,SAAQ,KAAK;CAAG","sourcesContent":["import type { AnySchemaObject } from \"ajv\";\n\nimport type { ResolvedJsonSchemaValidationOptions } from \"./options.ts\";\nimport type { SchemaCompileReason } from \"./schema-engine.ts\";\nimport { inspectSchemaPolicy, isJsonObject } from \"./schema-policy.ts\";\nimport { inspectStrictJsonBytes } from \"../json-document/strict-document.ts\";\nimport { normalizeRemoteReference, readBoundedResponse } from \"./remote-response.ts\";\n\ninterface ControlledResolverInput {\n  readonly referenceResolution: ResolvedJsonSchemaValidationOptions[\"referenceResolution\"];\n  readonly signal: AbortSignal;\n}\n\nconst MAX_REMOTE_RESPONSE_BYTES = 1_048_576;\nconst REMOTE_TIMEOUT_MS = 5_000;\n\nexport class ControlledReferenceResolver {\n  readonly #cache = new Map<string, Promise<AnySchemaObject>>();\n  #loadQueue: Promise<void> = Promise.resolve();\n  readonly #allowedHttpsSources: readonly Readonly<{\n    readonly origin: string;\n    readonly pathPrefix: string;\n  }>[];\n  readonly #resolverInput: ControlledResolverInput;\n\n  constructor(input: ControlledResolverInput) {\n    this.#resolverInput = input;\n    this.#allowedHttpsSources =\n      input.referenceResolution.mode === \"allowlisted\"\n        ? Object.freeze(\n            input.referenceResolution.sources.flatMap((source) =>\n              source.kind === \"https\"\n                ? [Object.freeze({ origin: source.origin, pathPrefix: source.pathPrefix })]\n                : []\n            )\n          )\n        : Object.freeze([]);\n  }\n\n  load(referenceUri: string): Promise<AnySchemaObject> {\n    let normalizedReferenceUri: string;\n    try {\n      normalizedReferenceUri = normalizeRemoteReference(referenceUri);\n    } catch {\n      return Promise.reject(new ReferenceResolutionFailure(\"unapproved-reference\"));\n    }\n    const cached = this.#cache.get(normalizedReferenceUri);\n    if (cached !== undefined) return cached;\n    const loading = this.queueLoad(normalizedReferenceUri);\n    this.#cache.set(normalizedReferenceUri, loading);\n    return loading;\n  }\n\n  private queueLoad(referenceUri: string): Promise<AnySchemaObject> {\n    const loading = this.#loadQueue.then(\n      () => this.loadUncached(referenceUri),\n      () => this.loadUncached(referenceUri)\n    );\n    this.#loadQueue = loading.then(\n      () => undefined,\n      () => undefined\n    );\n    return loading;\n  }\n\n  private async loadUncached(referenceUri: string): Promise<AnySchemaObject> {\n    if (!this.isAllowedReference(referenceUri))\n      throw new ReferenceResolutionFailure(\"unapproved-reference\");\n    if (this.#resolverInput.signal.aborted) throw new ReferenceTransportFailure();\n    const controller = new AbortController();\n    const abortForCaller = (): void => controller.abort();\n    this.#resolverInput.signal.addEventListener(\"abort\", abortForCaller, { once: true });\n    const timeout = setTimeout(() => controller.abort(), REMOTE_TIMEOUT_MS);\n    try {\n      return await this.loadWithController(referenceUri, controller);\n    } catch (error) {\n      if (\n        error instanceof ReferenceResolutionFailure ||\n        error instanceof ReferenceTransportFailure\n      ) {\n        throw error;\n      }\n      throw new ReferenceTransportFailure();\n    } finally {\n      clearTimeout(timeout);\n      this.#resolverInput.signal.removeEventListener(\"abort\", abortForCaller);\n    }\n  }\n\n  private async loadWithController(\n    referenceUri: string,\n    controller: AbortController\n  ): Promise<AnySchemaObject> {\n    const response = await fetchSchemaResponse(referenceUri, controller.signal);\n    assertAllowedResponse(response);\n    if (this.#resolverInput.signal.aborted) throw new ReferenceTransportFailure();\n    const bytes = await readBoundedResponse(\n      response,\n      MAX_REMOTE_RESPONSE_BYTES,\n      this.#resolverInput.signal\n    );\n    return schemaFromRemoteBytes(bytes, referenceUri);\n  }\n\n  private isAllowedReference(referenceUri: string): boolean {\n    let url: URL;\n    try {\n      url = new URL(referenceUri);\n    } catch {\n      return false;\n    }\n    return this.#allowedHttpsSources.some(\n      (source) =>\n        url.origin === source.origin &&\n        (source.pathPrefix === \"/\" || url.pathname.startsWith(source.pathPrefix))\n    );\n  }\n}\n\nasync function fetchSchemaResponse(referenceUri: string, signal: AbortSignal): Promise<Response> {\n  if (typeof globalThis.fetch !== \"function\") throw new ReferenceTransportFailure();\n  return globalThis.fetch(referenceUri, {\n    credentials: \"omit\",\n    method: \"GET\",\n    redirect: \"manual\",\n    signal\n  });\n}\n\nfunction assertAllowedResponse(response: Response): void {\n  if (response.redirected || (response.status >= 300 && response.status < 400)) {\n    throw new ReferenceResolutionFailure(\"unapproved-reference\");\n  }\n  if (response.ok) return;\n  if (response.status >= 500) throw new ReferenceTransportFailure();\n  throw new ReferenceResolutionFailure(\"unapproved-reference\");\n}\n\nfunction schemaFromRemoteBytes(\n  bytes: Uint8Array | \"too-large\",\n  referenceUri: string\n): AnySchemaObject {\n  if (bytes === \"too-large\") throw new ReferenceResolutionFailure(\"remote-document-invalid\");\n  const document = inspectStrictJsonBytes(bytes);\n  if (document.kind !== \"valid\" || !isJsonObject(document.jsonValue)) {\n    throw new ReferenceResolutionFailure(\"remote-document-invalid\");\n  }\n  if (document.jsonValue.$id !== referenceUri) {\n    throw new ReferenceResolutionFailure(\"remote-schema-id-mismatch\");\n  }\n  const referenceReason = inspectSchemaPolicy(document.jsonValue);\n  if (referenceReason !== undefined) throw new ReferenceResolutionFailure(referenceReason);\n  return document.jsonValue;\n}\n\nexport class ReferenceResolutionFailure extends Error {\n  readonly reason: SchemaCompileReason;\n\n  constructor(reason: SchemaCompileReason) {\n    super(reason);\n    this.reason = reason;\n  }\n}\n\nexport class ReferenceTransportFailure extends Error {}\n"]}

package/dist/esm/package-checks/json-schema-validation/remote-response.mjs

@@ -0,0 +1,71 @@
+export async function readBoundedResponse(response, maximumBytes, signal) {
+    if (declaredResponseIsTooLarge(response, maximumBytes))
+        return "too-large";
+    const reader = response.body?.getReader();
+    if (reader === undefined)
+        return new Uint8Array();
+    const chunks = await readResponseChunks(reader, maximumBytes, signal);
+    return chunks === "too-large" ? chunks : assembleResponseBytes(chunks);
+}
+function declaredResponseIsTooLarge(response, maximumBytes) {
+    const length = response.headers.get("content-length");
+    return length !== null && /^\d+$/u.test(length) && Number(length) > maximumBytes;
+}
+async function readResponseChunks(reader, maximumBytes, signal) {
+    const chunks = [];
+    let total = 0;
+    try {
+        while (true) {
+            if (signal.aborted)
+                throw transportFailure();
+            const chunk = await reader.read();
+            if (chunk.done)
+                break;
+            total += chunk.value.byteLength;
+            if (total > maximumBytes) {
+                await cancelRejectedReader(reader);
+                return "too-large";
+            }
+            chunks.push(chunk.value);
+        }
+        return chunks;
+    }
+    catch {
+        throw transportFailure();
+    }
+    finally {
+        reader.releaseLock();
+    }
+}
+async function cancelRejectedReader(reader) {
+    try {
+        await reader.cancel();
+    }
+    catch {
+        // The bounded response has already been rejected; cancellation detail is not a transport fact.
+    }
+}
+function assembleResponseBytes(chunks) {
+    const responseBytes = new Uint8Array(chunks.reduce((total, chunk) => total + chunk.byteLength, 0));
+    let offset = 0;
+    for (const chunk of chunks) {
+        responseBytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return responseBytes;
+}
+function transportFailure() {
+    return new Error("remote response transport failed");
+}
+export function normalizeRemoteReference(referenceUri) {
+    const url = new URL(referenceUri);
+    if (url.protocol !== "https:" ||
+        url.username.length > 0 ||
+        url.password.length > 0 ||
+        url.search.length > 0 ||
+        url.hash.length > 0) {
+        throw new TypeError("unapproved remote reference");
+    }
+    return url.href;
+}
+//# sourceMappingURL=remote-response.mjs.map

package/dist/esm/package-checks/json-schema-validation/remote-response.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-response.mjs","sourceRoot":"","sources":["../../../../src/package-checks/json-schema-validation/remote-response.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAkB,EAClB,YAAoB,EACpB,MAAmB;IAEnB,IAAI,0BAA0B,CAAC,QAAQ,EAAE,YAAY,CAAC;QAAE,OAAO,WAAW,CAAC;IAC3E,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,UAAU,EAAE,CAAC;IAElD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACtE,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAkB,EAAE,YAAoB;IAC1E,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACtD,OAAO,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,YAAY,CAAC;AACnF,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,MAA+C,EAC/C,YAAoB,EACpB,MAAmB;IAEnB,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,gBAAgB,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,IAAI;gBAAE,MAAM;YACtB,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;YAChC,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC;gBACzB,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;gBACnC,OAAO,WAAW,CAAC;YACrB,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,gBAAgB,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,MAA+C;IAE/C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,+FAA+F;IACjG,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,MAA6B;IAC1D,MAAM,aAAa,GAAG,IAAI,UAAU,CAClC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAC7D,CAAC;IACF,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,YAAoB;IAC3D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IAClC,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QACvB,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QACvB,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EACnB,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC;AAClB,CAAC","sourcesContent":["export async function readBoundedResponse(\n  response: Response,\n  maximumBytes: number,\n  signal: AbortSignal\n): Promise<Uint8Array | \"too-large\"> {\n  if (declaredResponseIsTooLarge(response, maximumBytes)) return \"too-large\";\n  const reader = response.body?.getReader();\n  if (reader === undefined) return new Uint8Array();\n\n  const chunks = await readResponseChunks(reader, maximumBytes, signal);\n  return chunks === \"too-large\" ? chunks : assembleResponseBytes(chunks);\n}\n\nfunction declaredResponseIsTooLarge(response: Response, maximumBytes: number): boolean {\n  const length = response.headers.get(\"content-length\");\n  return length !== null && /^\\d+$/u.test(length) && Number(length) > maximumBytes;\n}\n\nasync function readResponseChunks(\n  reader: ReadableStreamDefaultReader<Uint8Array>,\n  maximumBytes: number,\n  signal: AbortSignal\n): Promise<readonly Uint8Array[] | \"too-large\"> {\n  const chunks: Uint8Array[] = [];\n  let total = 0;\n  try {\n    while (true) {\n      if (signal.aborted) throw transportFailure();\n      const chunk = await reader.read();\n      if (chunk.done) break;\n      total += chunk.value.byteLength;\n      if (total > maximumBytes) {\n        await cancelRejectedReader(reader);\n        return \"too-large\";\n      }\n      chunks.push(chunk.value);\n    }\n    return chunks;\n  } catch {\n    throw transportFailure();\n  } finally {\n    reader.releaseLock();\n  }\n}\n\nasync function cancelRejectedReader(\n  reader: ReadableStreamDefaultReader<Uint8Array>\n): Promise<void> {\n  try {\n    await reader.cancel();\n  } catch {\n    // The bounded response has already been rejected; cancellation detail is not a transport fact.\n  }\n}\n\nfunction assembleResponseBytes(chunks: readonly Uint8Array[]): Uint8Array {\n  const responseBytes = new Uint8Array(\n    chunks.reduce((total, chunk) => total + chunk.byteLength, 0)\n  );\n  let offset = 0;\n  for (const chunk of chunks) {\n    responseBytes.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n  return responseBytes;\n}\n\nfunction transportFailure(): Error {\n  return new Error(\"remote response transport failed\");\n}\n\nexport function normalizeRemoteReference(referenceUri: string): string {\n  const url = new URL(referenceUri);\n  if (\n    url.protocol !== \"https:\" ||\n    url.username.length > 0 ||\n    url.password.length > 0 ||\n    url.search.length > 0 ||\n    url.hash.length > 0\n  ) {\n    throw new TypeError(\"unapproved remote reference\");\n  }\n  return url.href;\n}\n"]}