doc-detective 4.41.6 → 4.42.1

package/dist/core/utils.d.ts

@@ -1,6 +1,36 @@
 import { type ChildProcess } from "node:child_process";
+import type { AxiosRequestConfig } from "axios";
 export declare function loadAxios(): Promise<typeof import("axios").default>;
-export { outputResults, loadEnvs, log, logLevelEnabled, timestamp, getOrInitRunTimestamp, getRunOutputDir, runArchivesArtifacts, replaceEnvs, spawnCommand, spawnBackgroundCommand, spawnPtyBackgroundCommand, resolveShellName, resolveShellExecutable, shellSpawnEnv, waitForReady, waitForPort, waitForHttp, waitForStdio, waitForOutputMatch, inContainer, cleanTemp, calculateFractionalDifference, serializeBrowserResult, matchesExpectedOutput, fetchFile, isRelativeUrl, appendQueryParams, isDeviceWebContext, computeSettleCeiling, redactUrlForOutput, assertUrlHostIsPublic, sanitizeFilesystemName, compileFilter, isRetryableSessionError, isSessionAlive, isPageBroken, isPageUnnavigated, isInitialBlankDocument, issueNavigation, probeStuckOnBlankDocument, guardBlankDocumentNavigation, classifyContextRetry, isTransientProcessInitError, matchesFilter, selectSpecsForRun, shouldFailRun, findFreePort, runConcurrent, createResourceRegistry, runResourceAware, rollUpResults, rollUpAssertions, createAppiumPool, evaluateContextRequirements, verifiedDate, shieldsBadge, resolveVerifiedId, applyVerifiedMarkers, applyBadgeAnchoredTests, };
+/**
+ * Browser and driver versions for a context's report (ADR 01163), read from
+ * the WebdriverIO session's capabilities, falling back to the detected app
+ * (`availableApps` entry) where the session is silent. appium-geckodriver
+ * echoes the requested capabilities rather than geckodriver's, so Firefox's
+ * versions come from the detected build ID (`nightly_161.0a1`) and the
+ * managed `geckodriver-<version>` binary name. Safari reports no driver
+ * version.
+ */
+export declare function sessionVersions({ capabilities, app, }: {
+    capabilities?: any;
+    app?: {
+        name?: string;
+        version?: string;
+        driver?: string;
+    };
+}): {
+    browserVersion?: string;
+    driver?: {
+        name: string;
+        version?: string;
+    };
+};
+declare const FETCH_TEXT_DEFAULTS: {
+    timeout: number;
+    maxContentLength: number;
+    maxBodyLength: number;
+    responseType: "text";
+};
+export { outputResults, loadEnvs, log, logLevelEnabled, timestamp, getOrInitRunTimestamp, getRunOutputDir, runArchivesArtifacts, replaceEnvs, spawnCommand, spawnBackgroundCommand, spawnPtyBackgroundCommand, resolveShellName, resolveShellExecutable, shellSpawnEnv, waitForReady, waitForPort, waitForHttp, waitForStdio, waitForOutputMatch, inContainer, cleanTemp, calculateFractionalDifference, serializeBrowserResult, matchesExpectedOutput, fetchFile, isRelativeUrl, appendQueryParams, isDeviceWebContext, computeSettleCeiling, redactUrlForOutput, privateAddressOf, localUrlPolicy, getGuarded, UrlGuardError, FETCH_TEXT_DEFAULTS, sanitizeFilesystemName, compileFilter, isRetryableSessionError, isSessionAlive, isPageBroken, isPageUnnavigated, isInitialBlankDocument, issueNavigation, probeStuckOnBlankDocument, guardBlankDocumentNavigation, classifyContextRetry, isTransientProcessInitError, matchesFilter, selectSpecsForRun, shouldFailRun, findFreePort, runConcurrent, createResourceRegistry, runResourceAware, rollUpResults, rollUpAssertions, createAppiumPool, evaluateContextRequirements, verifiedDate, shieldsBadge, resolveVerifiedId, applyVerifiedMarkers, applyBadgeAnchoredTests, };
 export type { BackgroundProcess, ResourceRegistry };
 declare function createAppiumPool(ports: number[]): {
     acquire(): Promise<number>;
@@ -78,7 +108,17 @@ declare function appendQueryParams(url: string, params: Record<string, unknown>
 declare function cleanTemp(): void;
 declare function sanitizeFilesystemName(name: string, fallback: string): string;
 declare function redactUrlForOutput(value: string): string;
-declare function assertUrlHostIsPublic(fileURL: string): Promise<void>;
+declare class UrlGuardError extends Error {
+}
+declare function localUrlPolicy(): "hops" | "allow" | "block";
+declare function privateAddressOf(fileURL: string, { every }?: {
+    every?: boolean;
+}): Promise<string | undefined>;
+declare function getGuarded(url: string, opts?: AxiosRequestConfig, refuseFirst?: (address: string) => Error, refuseRedirect?: (from: string, address: string) => Error): Promise<{
+    data: any;
+    url: string;
+    reachedPublic: boolean;
+}>;
 declare function fetchFile(fileURL: string, opts?: {
     binary?: boolean;
 }): Promise<{

package/dist/core/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/core/utils.ts"],"names":[],"mappings":"AAMA,OAAO,EAAS,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAkB9D,wBAAgB,SAAS,IAAI,OAAO,CAAC,cAAc,OAAO,EAAE,OAAO,CAAC,CAEnE;AAED,OAAO,EACL,aAAa,EACb,QAAQ,EACR,GAAG,EACH,eAAe,EACf,SAAS,EACT,qBAAqB,EACrB,eAAe,EACf,oBAAoB,EACpB,WAAW,EACX,YAAY,EACZ,sBAAsB,EACtB,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,aAAa,EACb,YAAY,EACZ,WAAW,EACX,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,WAAW,EACX,SAAS,EACT,6BAA6B,EAC7B,sBAAsB,EACtB,qBAAqB,EACrB,SAAS,EACT,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,sBAAsB,EACtB,eAAe,EACf,yBAAyB,EACzB,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,aAAa,EACb,sBAAsB,EACtB,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,2BAA2B,EAC3B,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,GACxB,CAAC;AAEF,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;AAQpD,iBAAS,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG;IAC1C,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3B,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAeA;AAYD,iBAAe,aAAa,CAAC,CAAC,EAC5B,KAAK,EAAE,CAAC,EAAE,EACV,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAC7B,OAAO,CAAC,IAAI,CAAC,CASf;AAOD,KAAK,gBAAgB,GAAG;IACtB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACrC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC/B,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAAC;AACF,iBAAS,sBAAsB,IAAI,gBAAgB,CAmBlD;AAkBD,iBAAe,gBAAgB,CAAC,CAAC,EAC/B,KAAK,EAAE,CAAC,EAAE,EACV,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,gBAAgB,EAC1B,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,EAC9B,WAAW,GAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,EACA,GAC/B,OAAO,CAAC,IAAI,CAAC,CAqCf;AAID,iBAAS,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,MAAM,CAKnE;AASD,iBAAS,gBAAgB,CACvB,UAAU,CAAC,EAAE,KAAK,CAAC;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,IAAI,GAC7C,MAAM,CAGR;AAMD,iBAAe,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAc7C;AAKD,UAAU,iBAAiB;IAIzB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,SAAS,IAAI,MAAM,CAAC;IACpB,SAAS,IAAI,MAAM,CAAC;IACpB,WAAW,IAAI,MAAM,CAAC;IAGtB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAE7B,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAG,QAAQ,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAG9E,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAI/B,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAG9B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAeD,iBAAS,sBAAsB,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,MAAM,EAAO,EACnB,OAAO,GAAE,GAAQ,GAChB,iBAAiB,CAqEnB;AA8DD,iBAAe,yBAAyB,CACtC,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,MAAM,EAAO,EACnB,OAAO,GAAE,GAAQ,GAChB,OAAO,CAAC,iBAAiB,CAAC,CA0J5B;AAyBD,iBAAe,WAAW,CACxB,IAAI,EAAE,MAAM,EACZ,EAAE,QAAQ,EAAE,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CAaf;AAID,iBAAe,WAAW,CACxB,GAAG,EAAE,MAAM,EACX,EAAE,QAAQ,EAAE,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CAmBf;AASD,iBAAS,YAAY,CACnB,EAAE,EAAE,iBAAiB,EACrB,QAAQ,EAAE,MAAM,EAChB,EAAE,QAAQ,EAAE,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CAmCf;AASD,iBAAS,kBAAkB,CACzB,EAAE,EAAE,iBAAiB,EACrB,QAAQ,EAAE,MAAM,EAChB,EAAE,QAAQ,EAAE,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GACjC,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAMD,iBAAe,YAAY,CACzB,EAAE,EAAE,iBAAiB,EACrB,SAAS,EAAE,GAAG,EACd,EAAE,SAAS,EAAE,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GACnC,OAAO,CAAC,IAAI,CAAC,CAwCf;AA8BD,iBAAS,uBAAuB,CAC9B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,cAAc,GAAE,MAAM,GAAG,SAAa,GACrC,OAAO,CAIT;AAmBD,iBAAe,cAAc,CAC3B,MAAM,EAAE,GAAG,EACX,cAAc,GAAE,MAAc,GAC7B,OAAO,CAAC,OAAO,CAAC,CA0BlB;AAeD,iBAAe,YAAY,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAQzD;AAsBD,iBAAe,iBAAiB,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAO9D;AAOD,iBAAS,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAErD;AASD,iBAAe,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAKzE;AAQD,iBAAe,yBAAyB,CACtC,MAAM,EAAE,GAAG,EACX,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASxB;AAYD,iBAAS,4BAA4B,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,CA2CpE;AAED,MAAM,MAAM,kBAAkB,GAAG,cAAc,GAAG,aAAa,GAAG,aAAa,CAAC;AAyBhF,iBAAe,oBAAoB,CACjC,YAAY,EAAE,GAAG,EAAE,EACnB,EAAE,SAAgB,EAAE,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GACjD,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAOpC;AAsBD,iBAAS,2BAA2B,CAClC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,QAAQ,GAAE,MAAyB,GAClC,OAAO,CAYT;AAED,iBAAS,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,GAAG,MAAM,EAAE,CAY9D;AAED,iBAAS,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAIzE;AAOD,iBAAS,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,GAAG,GAAG,EAAE,CAc3D;AAOD,iBAAS,aAAa,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO,CAG5C;AAED,iBAAS,aAAa,CAAC,GAAG,EAAE,MAAM,WASjC;AAeD,iBAAS,kBAAkB,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAKhD;AAQD;;;GAGG;AACH,iBAAS,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED,iBAAS,iBAAiB,CACxB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,IAAI,GACjD,MAAM,CA6CR;AAsBD,iBAAS,SAAS,SAkBjB;AAqBD,iBAAS,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAOtE;AAwBD,iBAAS,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAsBjD;AAqED,iBAAe,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA+CnE;AAED,iBAAe,SAAS,CACtB,OAAO,EAAE,MAAM,EACf,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO;;;;;;;;GA8ChC;AAED,iBAAe,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,iBAOnE;AAED;;;;;;;;GAQG;AACH,iBAAe,QAAQ,CAAC,QAAQ,EAAE,MAAM;;;GASvC;AAQD,iBAAS,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CA8B5D;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAKxC;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EAC1D,MAAM,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EACvD,SAAS,SAAI,GACZ,MAAM,GAAG,IAAI,CAgBf;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EAC1D,MAAM,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EACvD,SAAS,SAAwB,GAChC,OAAO,CAQT;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EAC1D,OAAO,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,GACvD;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAOnC;AAYD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,GAAG,EACX,SAAS,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,EAC9C,MAAM,GAAE,GAAQ,EAChB,KAAK,CAAC,EAAE,MAAM,EACd,KAAK,SAAY,GAChB,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAmD5C;AAED;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB;IAAK,KAAK;IAAQ,MAAM;CAAO,CAAC;AAE7D;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAgBF;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,GAAG,EACX,QAAQ,EACJ;IACE,QAAQ,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9C,GACD,SAAS,EACb,MAAM,GAAE,GAAQ,EAChB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC,CA0C/E;AAED,iBAAe,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,iBAkB3D;AASD,KAAK,eAAe,GAAG;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC5B,CAAC;AA6EF,iBAAS,2BAA2B,CAAC,EACnC,QAAQ,EACR,IAAS,GACV,EAAE;IACD,QAAQ,EAAE,GAAG,CAAC;IACd,IAAI,CAAC,EAAE,eAAe,CAAC;CACxB,GAAG;IAAE,GAAG,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAgCtC;AAcD,iBAAS,WAAW,CAAC,cAAc,EAAE,GAAG,GAAG,GAAG,CAyC7C;AAwCD,iBAAS,YAAY,CAAC,CAAC,GAAE,IAAiB,GAAG,MAAM,CAKlD;AAWD,iBAAS,YAAY,CACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,EAAE,KAAuB,EAAE,KAAqB,EAAE,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1F,MAAM,CAeR;AAgDD,iBAAS,iBAAiB,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASlE;AAcD,iBAAS,oBAAoB,CAAC,EAC5B,MAAM,EACN,OAAO,EACP,KAAK,EAAE,aAAkB,EACzB,IAAY,GACb,EAAE;IACD,MAAM,EAAE,GAAG,CAAC;IACZ,OAAO,EAAE,GAAG,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,GAAG,IAAI,CAqDP;AA6CD,iBAAS,uBAAuB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAY,EAAE,EAAE;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,OAAO,EAAE,GAAG,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CA2IvH;AAOD,iBAAS,SAAS,WAEjB;AAID,iBAAS,qBAAqB,CAAC,MAAM,EAAE,GAAG,GAAG,MAAM,CAMlD;AAmBD,iBAAS,eAAe,CACtB,MAAM,EAAE,GAAG,EACX,EAAE,MAAa,EAAE,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAC3C,MAAM,CA+CR;AAyBD,iBAAS,oBAAoB,CAAC,MAAM,GAAE,GAAQ,EAAE,KAAK,GAAE,GAAG,EAAO,GAAG,OAAO,CAgC1E;AAKD,KAAK,SAAS,GAAG,MAAM,GAAG,KAAK,GAAG,YAAY,CAAC;AAO/C,iBAAS,gBAAgB,CAAC,EACxB,MAAM,EACN,IAAI,GACL,GAAE;IAAE,MAAM,CAAC,EAAE,GAAG,CAAC;IAAC,IAAI,CAAC,EAAE,GAAG,CAAA;CAAO,GAAG,SAAS,CAE/C;AAID,UAAU,gBAAgB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1E,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CACzC;AA6BD,iBAAe,sBAAsB,CACnC,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,gBAAqB,GAC1B,OAAO,CAAC,MAAM,CAAC,CA4CjB;AASD,iBAAS,aAAa,CACpB,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,IAAI,GAAE;IACJ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACrC,GACL,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,CAyBhD;AAGD;;;;;;;;GAQG;AACH,iBAAe,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,EAAO,EAAE,OAAO,GAAE,GAAQ;;;;GA0D9E;AAED,iBAAe,WAAW,qBASzB;AAED;;;;;;;GAOG;AACH,iBAAS,6BAA6B,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,UAMlE;AAED;;;;;;;;;;;GAWG;AACH,iBAAS,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CActD;AAED;;;;;;;;;GASG;AACH,iBAAS,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAY5E"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/core/utils.ts"],"names":[],"mappings":"AAOA,OAAO,EAAS,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAY9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,OAAO,CAAC;AAOhD,wBAAgB,SAAS,IAAI,OAAO,CAAC,cAAc,OAAO,EAAE,OAAO,CAAC,CAEnE;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,EAC9B,YAAY,EACZ,GAAG,GACJ,EAAE;IACD,YAAY,CAAC,EAAE,GAAG,CAAC;IACnB,GAAG,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5D,GAAG;IAAE,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAqB3E;AAkBD,QAAA,MAAM,mBAAmB;;;;kBAA6C,MAAM;CAAW,CAAC;AAExF,OAAO,EACL,aAAa,EACb,QAAQ,EACR,GAAG,EACH,eAAe,EACf,SAAS,EACT,qBAAqB,EACrB,eAAe,EACf,oBAAoB,EACpB,WAAW,EACX,YAAY,EACZ,sBAAsB,EACtB,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,aAAa,EACb,YAAY,EACZ,WAAW,EACX,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,WAAW,EACX,SAAS,EACT,6BAA6B,EAC7B,sBAAsB,EACtB,qBAAqB,EACrB,SAAS,EACT,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACd,UAAU,EACV,aAAa,EACb,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,sBAAsB,EACtB,eAAe,EACf,yBAAyB,EACzB,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,aAAa,EACb,sBAAsB,EACtB,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,2BAA2B,EAC3B,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,GACxB,CAAC;AAEF,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;AAQpD,iBAAS,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG;IAC1C,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3B,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAeA;AAYD,iBAAe,aAAa,CAAC,CAAC,EAC5B,KAAK,EAAE,CAAC,EAAE,EACV,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAC7B,OAAO,CAAC,IAAI,CAAC,CASf;AAOD,KAAK,gBAAgB,GAAG;IACtB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACrC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC/B,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAAC;AACF,iBAAS,sBAAsB,IAAI,gBAAgB,CAmBlD;AAkBD,iBAAe,gBAAgB,CAAC,CAAC,EAC/B,KAAK,EAAE,CAAC,EAAE,EACV,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,gBAAgB,EAC1B,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,EAC9B,WAAW,GAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,EACA,GAC/B,OAAO,CAAC,IAAI,CAAC,CAqCf;AAID,iBAAS,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,MAAM,CAKnE;AASD,iBAAS,gBAAgB,CACvB,UAAU,CAAC,EAAE,KAAK,CAAC;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,IAAI,GAC7C,MAAM,CAGR;AAMD,iBAAe,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAc7C;AAKD,UAAU,iBAAiB;IAIzB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,SAAS,IAAI,MAAM,CAAC;IACpB,SAAS,IAAI,MAAM,CAAC;IACpB,WAAW,IAAI,MAAM,CAAC;IAGtB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAE7B,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAG,QAAQ,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAG9E,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAI/B,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAG9B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAeD,iBAAS,sBAAsB,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,MAAM,EAAO,EACnB,OAAO,GAAE,GAAQ,GAChB,iBAAiB,CAqEnB;AA8DD,iBAAe,yBAAyB,CACtC,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,MAAM,EAAO,EACnB,OAAO,GAAE,GAAQ,GAChB,OAAO,CAAC,iBAAiB,CAAC,CAwJ5B;AAyBD,iBAAe,WAAW,CACxB,IAAI,EAAE,MAAM,EACZ,EAAE,QAAQ,EAAE,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CAaf;AAID,iBAAe,WAAW,CACxB,GAAG,EAAE,MAAM,EACX,EAAE,QAAQ,EAAE,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CAmBf;AASD,iBAAS,YAAY,CACnB,EAAE,EAAE,iBAAiB,EACrB,QAAQ,EAAE,MAAM,EAChB,EAAE,QAAQ,EAAE,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CAmCf;AASD,iBAAS,kBAAkB,CACzB,EAAE,EAAE,iBAAiB,EACrB,QAAQ,EAAE,MAAM,EAChB,EAAE,QAAQ,EAAE,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GACjC,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAMD,iBAAe,YAAY,CACzB,EAAE,EAAE,iBAAiB,EACrB,SAAS,EAAE,GAAG,EACd,EAAE,SAAS,EAAE,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GACnC,OAAO,CAAC,IAAI,CAAC,CAwCf;AA8BD,iBAAS,uBAAuB,CAC9B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,cAAc,GAAE,MAAM,GAAG,SAAa,GACrC,OAAO,CAIT;AAmBD,iBAAe,cAAc,CAC3B,MAAM,EAAE,GAAG,EACX,cAAc,GAAE,MAAc,GAC7B,OAAO,CAAC,OAAO,CAAC,CA0BlB;AAeD,iBAAe,YAAY,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAQzD;AAsBD,iBAAe,iBAAiB,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAO9D;AAOD,iBAAS,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAErD;AASD,iBAAe,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAKzE;AAQD,iBAAe,yBAAyB,CACtC,MAAM,EAAE,GAAG,EACX,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASxB;AAYD,iBAAS,4BAA4B,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,CA2CpE;AAED,MAAM,MAAM,kBAAkB,GAAG,cAAc,GAAG,aAAa,GAAG,aAAa,CAAC;AAyBhF,iBAAe,oBAAoB,CACjC,YAAY,EAAE,GAAG,EAAE,EACnB,EAAE,SAAgB,EAAE,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GACjD,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAOpC;AAsBD,iBAAS,2BAA2B,CAClC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,QAAQ,GAAE,MAAyB,GAClC,OAAO,CAYT;AAED,iBAAS,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,GAAG,MAAM,EAAE,CAY9D;AAED,iBAAS,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAIzE;AAOD,iBAAS,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,GAAG,GAAG,EAAE,CAc3D;AAOD,iBAAS,aAAa,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO,CAG5C;AAED,iBAAS,aAAa,CAAC,GAAG,EAAE,MAAM,WASjC;AAeD,iBAAS,kBAAkB,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAKhD;AAQD;;;GAGG;AACH,iBAAS,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED,iBAAS,iBAAiB,CACxB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,IAAI,GACjD,MAAM,CA6CR;AAsBD,iBAAS,SAAS,SAkBjB;AAMD,iBAAS,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAOtE;AAwBD,iBAAS,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAsBjD;AA+ED,cAAM,aAAc,SAAQ,KAAK;CAAG;AAQpC,iBAAS,cAAc,IAAI,MAAM,GAAG,OAAO,GAAG,OAAO,CASpD;AAMD,iBAAe,gBAAgB,CAC7B,OAAO,EAAE,MAAM,EACf,EAAE,KAAa,EAAE,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAC1C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAqC7B;AA0CD,iBAAe,UAAU,CACvB,GAAG,EAAE,MAAM,EAEX,IAAI,GAAE,kBAA0C,EAChD,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,KAAK,EACxC,cAAc,GAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,KAAqB,GACvE,OAAO,CAAC;IAAE,IAAI,EAAE,GAAG,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,CAAC,CAiH7D;AAED,iBAAe,SAAS,CACtB,OAAO,EAAE,MAAM,EACf,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO;;;;;;;;GAyChC;AAED,iBAAe,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,iBAOnE;AAED;;;;;;;;GAQG;AACH,iBAAe,QAAQ,CAAC,QAAQ,EAAE,MAAM;;;GASvC;AAQD,iBAAS,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CA8B5D;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAKxC;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EAC1D,MAAM,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EACvD,SAAS,SAAI,GACZ,MAAM,GAAG,IAAI,CAgBf;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EAC1D,MAAM,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EACvD,SAAS,SAAwB,GAChC,OAAO,CAQT;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EAC1D,OAAO,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,GACvD;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAOnC;AAYD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,GAAG,EACX,SAAS,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,EAC9C,MAAM,GAAE,GAAQ,EAChB,KAAK,CAAC,EAAE,MAAM,EACd,KAAK,SAAY,GAChB,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAmD5C;AAED;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB;IAAK,KAAK;IAAQ,MAAM;CAAO,CAAC;AAE7D;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAgBF;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,GAAG,EACX,QAAQ,EACJ;IACE,QAAQ,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9C,GACD,SAAS,EACb,MAAM,GAAE,GAAQ,EAChB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC,CA0C/E;AAED,iBAAe,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,iBAkB3D;AASD,KAAK,eAAe,GAAG;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC5B,CAAC;AA6EF,iBAAS,2BAA2B,CAAC,EACnC,QAAQ,EACR,IAAS,GACV,EAAE;IACD,QAAQ,EAAE,GAAG,CAAC;IACd,IAAI,CAAC,EAAE,eAAe,CAAC;CACxB,GAAG;IAAE,GAAG,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAgCtC;AAcD,iBAAS,WAAW,CAAC,cAAc,EAAE,GAAG,GAAG,GAAG,CAyC7C;AAwCD,iBAAS,YAAY,CAAC,CAAC,GAAE,IAAiB,GAAG,MAAM,CAKlD;AAWD,iBAAS,YAAY,CACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,EAAE,KAAuB,EAAE,KAAqB,EAAE,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1F,MAAM,CAeR;AAgDD,iBAAS,iBAAiB,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASlE;AAcD,iBAAS,oBAAoB,CAAC,EAC5B,MAAM,EACN,OAAO,EACP,KAAK,EAAE,aAAkB,EACzB,IAAY,GACb,EAAE;IACD,MAAM,EAAE,GAAG,CAAC;IACZ,OAAO,EAAE,GAAG,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,GAAG,IAAI,CAqDP;AA6CD,iBAAS,uBAAuB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAY,EAAE,EAAE;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,OAAO,EAAE,GAAG,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CA2IvH;AAOD,iBAAS,SAAS,WAEjB;AAID,iBAAS,qBAAqB,CAAC,MAAM,EAAE,GAAG,GAAG,MAAM,CAMlD;AAmBD,iBAAS,eAAe,CACtB,MAAM,EAAE,GAAG,EACX,EAAE,MAAa,EAAE,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAC3C,MAAM,CA+CR;AAyBD,iBAAS,oBAAoB,CAAC,MAAM,GAAE,GAAQ,EAAE,KAAK,GAAE,GAAG,EAAO,GAAG,OAAO,CAgC1E;AAKD,KAAK,SAAS,GAAG,MAAM,GAAG,KAAK,GAAG,YAAY,CAAC;AAO/C,iBAAS,gBAAgB,CAAC,EACxB,MAAM,EACN,IAAI,GACL,GAAE;IAAE,MAAM,CAAC,EAAE,GAAG,CAAC;IAAC,IAAI,CAAC,EAAE,GAAG,CAAA;CAAO,GAAG,SAAS,CAE/C;AAID,UAAU,gBAAgB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1E,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CACzC;AA6BD,iBAAe,sBAAsB,CACnC,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,gBAAqB,GAC1B,OAAO,CAAC,MAAM,CAAC,CA4CjB;AASD,iBAAS,aAAa,CACpB,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,IAAI,GAAE;IACJ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACrC,GACL,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,CAyBhD;AAGD;;;;;;;;GAQG;AACH,iBAAe,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,EAAO,EAAE,OAAO,GAAE,GAAQ;;;;GA0D9E;AAED,iBAAe,WAAW,qBASzB;AAED;;;;;;;GAOG;AACH,iBAAS,6BAA6B,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,UAMlE;AAED;;;;;;;;;;;GAWG;AACH,iBAAS,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CActD;AAED;;;;;;;;;GASG;AACH,iBAAS,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAY5E"}

package/dist/core/utils.js

@@ -3,12 +3,13 @@ import os from "node:os";
 import path from "node:path";
 import crypto from "node:crypto";
 import dns from "node:dns/promises";
+import dnsCallback from "node:dns";
 import net from "node:net";
 import { spawn } from "node:child_process";
 import { loadHeavyDep, resolveHeavyDepPath, ensureRuntimeInstalled, } from "../runtime/loader.js";
 import { resolveWindowsBash as defaultResolveWindowsBash } from "../runtime/windowsBash.js";
+import { ownVersion } from "../runtime/heavyDeps.js";
 import { assertConptyAllocatable, ensurePtyBackendOnDisk, } from "./ptyWatchdog.js";
-import { createRequire } from "node:module";
 import { applyVerification, declarePage, VERIFIED_TOOL } from "./verification.js";
 // axios (~70 modules with its deps) loads on first use rather than at CLI
 // startup (see test/startup-modules.test.js). Cached, so hot paths pay the
@@ -17,7 +18,54 @@ let axiosModule;
 export function loadAxios() {
     return (axiosModule ??= import("axios").then((m) => m.default));
 }
-export { outputResults, loadEnvs, log, logLevelEnabled, timestamp, getOrInitRunTimestamp, getRunOutputDir, runArchivesArtifacts, replaceEnvs, spawnCommand, spawnBackgroundCommand, spawnPtyBackgroundCommand, resolveShellName, resolveShellExecutable, shellSpawnEnv, waitForReady, waitForPort, waitForHttp, waitForStdio, waitForOutputMatch, inContainer, cleanTemp, calculateFractionalDifference, serializeBrowserResult, matchesExpectedOutput, fetchFile, isRelativeUrl, appendQueryParams, isDeviceWebContext, computeSettleCeiling, redactUrlForOutput, assertUrlHostIsPublic, sanitizeFilesystemName, compileFilter, isRetryableSessionError, isSessionAlive, isPageBroken, isPageUnnavigated, isInitialBlankDocument, issueNavigation, probeStuckOnBlankDocument, guardBlankDocumentNavigation, classifyContextRetry, isTransientProcessInitError, matchesFilter, selectSpecsForRun, shouldFailRun, findFreePort, runConcurrent, createResourceRegistry, runResourceAware, rollUpResults, rollUpAssertions, createAppiumPool, evaluateContextRequirements, verifiedDate, shieldsBadge, resolveVerifiedId, applyVerifiedMarkers, applyBadgeAnchoredTests, };
+/**
+ * Browser and driver versions for a context's report (ADR 01163), read from
+ * the WebdriverIO session's capabilities, falling back to the detected app
+ * (`availableApps` entry) where the session is silent. appium-geckodriver
+ * echoes the requested capabilities rather than geckodriver's, so Firefox's
+ * versions come from the detected build ID (`nightly_161.0a1`) and the
+ * managed `geckodriver-<version>` binary name. Safari reports no driver
+ * version.
+ */
+export function sessionVersions({ capabilities, app, }) {
+    const result = {};
+    // Runs after the driver started, so odd values are ignored, never thrown on.
+    const str = (value) => typeof value === "string" && value ? value : undefined;
+    const caps = capabilities ?? {};
+    const browserVersion = str(caps.browserVersion) ?? str(app?.version)?.replace(/^[a-z]+_/, "");
+    if (browserVersion)
+        result.browserVersion = browserVersion;
+    const chromedriver = str(caps.chrome?.chromedriverVersion);
+    if (chromedriver) {
+        result.driver = { name: "chromedriver", version: chromedriver.split(" ")[0] };
+    }
+    else if (app?.name === "firefox") {
+        const version = str(caps["moz:geckodriverVersion"]) ??
+            /geckodriver-(\d+(?:\.\d+)*)/i.exec(path.basename(str(app.driver) ?? ""))?.[1];
+        result.driver = { name: "geckodriver", ...(version && { version }) };
+    }
+    else if (app?.name === "safari") {
+        result.driver = { name: "safaridriver" };
+    }
+    return result;
+}
+// Fetch a file from a URL and save to a temp directory.
+// With `{ binary: true }`, fetches as arraybuffer and preserves raw bytes —
+// required for images and other non-text payloads. Binary fetches also apply
+// hard limits (timeout, max body size; getGuarded caps redirects) so a
+// misbehaving server can't stall or OOM the run.
+// Otherwise, non-JSON responses are stringified (text pass-through).
+// Returns `{ result: "error", message }` on failure.
+const FETCH_BINARY_DEFAULTS = {
+    responseType: "arraybuffer",
+    timeout: 30_000,
+    maxContentLength: 50 * 1024 * 1024,
+    maxBodyLength: 50 * 1024 * 1024,
+};
+// The same limits for text bodies, such as OpenAPI descriptions and their
+// $refs. "text" also stops axios from parsing JSON on its own.
+const FETCH_TEXT_DEFAULTS = { ...FETCH_BINARY_DEFAULTS, responseType: "text" };
+export { outputResults, loadEnvs, log, logLevelEnabled, timestamp, getOrInitRunTimestamp, getRunOutputDir, runArchivesArtifacts, replaceEnvs, spawnCommand, spawnBackgroundCommand, spawnPtyBackgroundCommand, resolveShellName, resolveShellExecutable, shellSpawnEnv, waitForReady, waitForPort, waitForHttp, waitForStdio, waitForOutputMatch, inContainer, cleanTemp, calculateFractionalDifference, serializeBrowserResult, matchesExpectedOutput, fetchFile, isRelativeUrl, appendQueryParams, isDeviceWebContext, computeSettleCeiling, redactUrlForOutput, privateAddressOf, localUrlPolicy, getGuarded, UrlGuardError, FETCH_TEXT_DEFAULTS, sanitizeFilesystemName, compileFilter, isRetryableSessionError, isSessionAlive, isPageBroken, isPageUnnavigated, isInitialBlankDocument, issueNavigation, probeStuckOnBlankDocument, guardBlankDocumentNavigation, classifyContextRetry, isTransientProcessInitError, matchesFilter, selectSpecsForRun, shouldFailRun, findFreePort, runConcurrent, createResourceRegistry, runResourceAware, rollUpResults, rollUpAssertions, createAppiumPool, evaluateContextRequirements, verifiedDate, shieldsBadge, resolveVerifiedId, applyVerifiedMarkers, applyBadgeAnchoredTests, };
 // A fixed set of Appium server ports shared by concurrent runners. `acquire()`
 // hands out a free port, waiting if every port is checked out; `release()`
 // returns one, handing it straight to the next waiter. Single-threaded JS
@@ -385,11 +433,9 @@ async function spawnPtyBackgroundCommand(cmd, args = [], options = {}) {
     try {
         ptyProcess = pty.spawn(shell, shellArgs, {
             name: "xterm-color",
-            // TODO(phase): expose as `background.tty.cols` / `background.tty.rows` so
-            // layout-sensitive TUIs (Ink reads process.stdout.columns) can match an
-            // expected width when authoring `waitUntil.stdio` patterns.
-            cols: 120,
-            rows: 30,
+            // `tty: {cols, rows}`; Ajv skips defaults inside the schema's anyOf.
+            cols: options.cols ?? 120,
+            rows: options.rows ?? 30,
             cwd: options.cwd || process.cwd(),
             env: shellSpawnEnv(options.shell) ?? process.env,
         });
@@ -1078,20 +1124,6 @@ function cleanTemp() {
         }
     }
 }
-// Fetch a file from a URL and save to a temp directory.
-// With `{ binary: true }`, fetches as arraybuffer and preserves raw bytes —
-// required for images and other non-text payloads. Binary fetches also apply
-// hard limits (timeout, max body size, max redirects) so a misbehaving server
-// can't stall or OOM the run.
-// Otherwise, non-JSON responses are stringified (text pass-through).
-// Returns `{ result: "error", message }` on failure.
-const FETCH_BINARY_DEFAULTS = {
-    responseType: "arraybuffer",
-    timeout: 30_000,
-    maxContentLength: 50 * 1024 * 1024,
-    maxBodyLength: 50 * 1024 * 1024,
-    maxRedirects: 5,
-};
 // Replace characters that are invalid in filenames on Windows (and often
 // problematic on other platforms) with `_`. Keeps dots, hyphens, and
 // alphanumerics untouched so names stay recognizable. Also rejects leading
@@ -1152,7 +1184,9 @@ function redactUrlForOutput(value) {
 // Private/loopback/link-local IP ranges that binary URL fetches refuse to
 // reach by default. Covers IPv4 RFC1918, loopback, link-local (169.254/16),
 // carrier-grade NAT (100.64/10), and the cloud-metadata special cases
-// (169.254.169.254 is inside link-local and thus covered).
+// (169.254.169.254 is inside link-local and thus covered). Teredo
+// (2001:0::/32) isn't covered: routing HTTP through it needs Teredo relay
+// infrastructure, so it isn't a realistic SSRF path.
 function isPrivateOrLoopbackAddress(ip) {
     if (!ip)
         return false;
@@ -1175,61 +1209,84 @@ function isPrivateOrLoopbackAddress(ip) {
         return false;
     }
     if (net.isIPv6(ip)) {
-        const normalized = ip.toLowerCase();
-        if (normalized === "::1")
-            return true;
-        if (normalized === "::")
-            return true;
-        if (normalized.startsWith("fc") || normalized.startsWith("fd"))
-            return true; // unique local
-        if (normalized.startsWith("fe80:"))
-            return true; // link-local
-        if (normalized.startsWith("::ffff:")) {
-            // IPv4-mapped IPv6. The WHATWG URL parser normalizes the embedded v4 to
-            // hex (::ffff:10.0.0.1 → ::ffff:a00:1, and ::ffff:0.0.0.1 → ::ffff:0:1),
-            // so reconstruct the dotted v4 from the two hex groups and apply the v4
-            // ranges above; otherwise a mapped private address (e.g.
-            // http://[::ffff:a00:1]/x = 10.0.0.1) silently bypasses the guard.
-            const tail = normalized.slice("::ffff:".length);
-            // Defensive: a dotted-decimal tail (::ffff:10.0.0.1) is a valid IPv6
-            // literal but current callers pass URL-normalized hosts (always hex), so
-            // this path is unreachable in practice. Handle it anyway — fail CLOSED by
-            // classifying the embedded v4 rather than slipping past as "public".
-            /* c8 ignore start - URL normalization always yields the hex form below */
-            if (net.isIPv4(tail)) {
-                return isPrivateOrLoopbackAddress(tail);
-            }
-            /* c8 ignore stop */
-            // The genuine IPv4-mapped form the URL parser emits is two hex groups
-            // (::ffff:HHHH:LLLL = the embedded 32-bit v4); reconstruct and re-check.
-            const hexMatch = tail.match(/^([0-9a-f]{1,4}):([0-9a-f]{1,4})$/);
-            if (hexMatch) {
-                const hi = parseInt(hexMatch[1], 16);
-                const lo = parseInt(hexMatch[2], 16);
-                const dotted = `${(hi >> 8) & 0xff}.${hi & 0xff}.${(lo >> 8) & 0xff}.${lo & 0xff}`;
-                return isPrivateOrLoopbackAddress(dotted);
-            }
-            // Any other ::ffff: form (e.g. ::ffff:1) is a normal IPv6 address, not an
-            // IPv4-mapped one, and matches none of the private prefixes above → public.
-            return false;
+        const g = ipv6Groups(ip);
+        const zero = (from, to) => g.slice(from, to).every((x) => x === 0);
+        // The IPv4 address in the low 32 bits, for forms that embed one.
+        const v4 = `${g[6] >> 8}.${g[6] & 0xff}.${g[7] >> 8}.${g[7] & 0xff}`;
+        if ((g[0] & 0xfe00) === 0xfc00)
+            return true; // unique local fc00::/7
+        if ((g[0] & 0xffc0) === 0xfe80)
+            return true; // link-local fe80::/10
+        if ((g[0] & 0xffc0) === 0xfec0)
+            return true; // site-local fec0::/10 (deprecated)
+        // 6to4 2002::/16 carries an IPv4 address in its second and third groups.
+        if (g[0] === 0x2002) {
+            return isPrivateOrLoopbackAddress(`${g[1] >> 8}.${g[1] & 0xff}.${g[2] >> 8}.${g[2] & 0xff}`);
+        }
+        // IPv4-translated ::ffff:0:a.b.c.d.
+        if (zero(0, 4) && g[4] === 0xffff && g[5] === 0)
+            return isPrivateOrLoopbackAddress(v4);
+        // IPv4-compatible ::a.b.c.d (also covers :: and ::1, which embed 0.0.0.x).
+        if (zero(0, 6))
+            return isPrivateOrLoopbackAddress(v4);
+        // IPv4-mapped ::ffff:a.b.c.d. ADR 01010: the URL parser emits these as hex.
+        if (zero(0, 5) && g[5] === 0xffff)
+            return isPrivateOrLoopbackAddress(v4);
+        // NAT64 64:ff9b::/96.
+        if (g[0] === 0x64 && g[1] === 0xff9b && zero(2, 6)) {
+            return isPrivateOrLoopbackAddress(v4);
         }
         return false;
     }
     return false;
 }
-// Reject URLs whose host resolves to a loopback/private IP, unless the
-// caller explicitly opts in (DOC_DETECTIVE_ALLOW_LOCAL_URLS=true). Tests
-// and trusted internal integrations set the env var; normal doc-spec input
-// does not, so an untrusted spec can't pivot through doc-detective to hit
-// cloud metadata or intranet services.
-//
-// Note: this is a best-effort check. DNS rebinding and TOCTOU races are
-// possible between resolution and connect; for true SSRF-grade isolation,
-// wire in an agent that validates the actual remote address at connect
-// time. This guard covers the common misuse cases.
-async function assertUrlHostIsPublic(fileURL) {
-    if (process.env.DOC_DETECTIVE_ALLOW_LOCAL_URLS === "true")
-        return;
+// The eight 16-bit groups of a valid IPv6 address. Expands `::`, reads a
+// dotted IPv4 tail (DNS answers aren't URL-normalized), and drops a zone id.
+// It doesn't validate: callers check net.isIPv6 first, or get NaN groups.
+function ipv6Groups(ip) {
+    let text = ip.toLowerCase().split("%")[0];
+    const dotted = text.match(/(\d+)\.(\d+)\.(\d+)\.(\d+)$/);
+    if (dotted) {
+        const [a, b, c, d] = dotted.slice(1).map(Number);
+        text =
+            text.slice(0, dotted.index) +
+                `${((a << 8) | b).toString(16)}:${((c << 8) | d).toString(16)}`;
+    }
+    const [head, tail] = text.split("::");
+    const left = head ? head.split(":") : [];
+    const right = tail ? tail.split(":") : [];
+    const groups = tail === undefined
+        ? left
+        : [...left, ...Array(8 - left.length - right.length).fill("0"), ...right];
+    return groups.map((group) => parseInt(group, 16));
+}
+// On/off switches in the environment: 1, true, yes or on, in any case.
+function envFlag(name) {
+    return /^(1|true|yes|on)$/i.test((process.env[name] ?? "").trim());
+}
+// A guarded fetch's own error: a refusal, or conflicting switches. Its
+// message is complete, so callers report it as is.
+class UrlGuardError extends Error {
+}
+// What the guarded fetches (screenshot reference images, OpenAPI `$ref`s) may
+// reach (ADR 01162). Env only, so a repository's config can't loosen it.
+//   "hops"  (default) local URLs are fine; a public-to-private redirect or
+//           `$ref` is refused.
+//   "allow" DOC_DETECTIVE_ALLOW_LOCAL_URLS: no checks.
+//   "block" DOC_DETECTIVE_BLOCK_LOCAL_URLS: every private address is refused.
+function localUrlPolicy() {
+    const allow = envFlag("DOC_DETECTIVE_ALLOW_LOCAL_URLS");
+    const block = envFlag("DOC_DETECTIVE_BLOCK_LOCAL_URLS");
+    if (allow && block) {
+        throw new UrlGuardError("DOC_DETECTIVE_ALLOW_LOCAL_URLS and DOC_DETECTIVE_BLOCK_LOCAL_URLS can't both be set.");
+    }
+    return allow ? "allow" : block ? "block" : "hops";
+}
+// The private, loopback or link-local address a URL points at, or undefined
+// when it's public. A hostname counts as private when any of its addresses is,
+// or with `every`, only when all of them are. Names can resolve differently
+// at connect time; getGuarded checks again there.
+async function privateAddressOf(fileURL, { every = false } = {}) {
     let parsed;
     try {
         parsed = new URL(fileURL);
@@ -1243,38 +1300,175 @@ async function assertUrlHostIsPublic(fileURL) {
     const host = parsed.hostname.replace(/^\[|\]$/g, "");
     // Direct IP literals: check immediately.
     if (net.isIP(host)) {
-        if (isPrivateOrLoopbackAddress(host)) {
-            throw new Error(`Refusing to fetch private/loopback address (${host}). Set DOC_DETECTIVE_ALLOW_LOCAL_URLS=true to allow.`);
-        }
-        return;
+        return isPrivateOrLoopbackAddress(host) ? host : undefined;
     }
     // Hostnames: resolve and check every answer (A + AAAA).
     const lower = host.toLowerCase();
     if (lower === "localhost" || lower.endsWith(".localhost")) {
-        throw new Error(`Refusing to fetch localhost (${host}). Set DOC_DETECTIVE_ALLOW_LOCAL_URLS=true to allow.`);
+        return host;
     }
     let addresses;
     try {
         addresses = await dns.lookup(host, { all: true });
     }
     catch (error) {
-        throw new Error(`Couldn't resolve host ${host} for SSRF check: ${error.message}`);
-    }
-    for (const { address } of addresses) {
-        if (isPrivateOrLoopbackAddress(address)) {
-            throw new Error(`Host ${host} resolves to a private/loopback address (${address}); refusing to fetch. Set DOC_DETECTIVE_ALLOW_LOCAL_URLS=true to allow.`);
+        // `host` and `code` let callers word their own message.
+        throw Object.assign(new Error(`Couldn't resolve host ${host}: ${error.message}`), { host, code: error.code ?? error.message });
+    }
+    const privates = addresses.filter(({ address }) => isPrivateOrLoopbackAddress(address));
+    const isPrivate = every ? privates.length === addresses.length : privates.length > 0;
+    return isPrivate ? privates[0]?.address : undefined;
+}
+function strictModeError(url) {
+    return new UrlGuardError(`Couldn't fetch ${redactUrlForOutput(url)}: DOC_DETECTIVE_BLOCK_LOCAL_URLS refuses private and loopback addresses.\n` +
+        "Hint: Unset DOC_DETECTIVE_BLOCK_LOCAL_URLS to allow local URLs.");
+}
+function redirectError(from, address) {
+    return new UrlGuardError(`Couldn't follow the redirect from ${redactUrlForOutput(from)}: it leads to ${address}, a private address, from a public one.\n` +
+        "Hint: If you trust this redirect, set DOC_DETECTIVE_ALLOW_LOCAL_URLS=1.");
+}
+const REDIRECT_STATUSES = [301, 302, 303, 307, 308];
+// A hostname as a lookup sees it: no IPv6 brackets, no trailing dot, any case.
+function hostKey(hostname) {
+    return hostname.replace(/^\[|\]$/g, "").replace(/\.$/, "").toLowerCase();
+}
+// Whether an HTTP(S) proxy is configured in the environment, the variables
+// axios and Node read. Only then can a lookup be for a name other than the
+// request's own host. It doesn't read NO_PROXY, and needn't. A proxy-exempt
+// host connects directly, so the only lookup is its own, and that one counts.
+function proxyConfigured() {
+    return ["http_proxy", "https_proxy", "all_proxy"].some((key) => process.env[key] || process.env[key.toUpperCase()]);
+}
+// GET for the guarded fetches. Follows up to 5 redirects by hand so each hop
+// is checked against localUrlPolicy(), both before it's requested and again
+// when it connects: a name can answer public to privateAddressOf() and private
+// to the connection (DNS rebinding). `refuseFirst`, from a caller whose
+// referrer is public, makes the first request refuse a private address too.
+// `refuseRedirect` builds the refusal of a public-to-private redirect, so a
+// caller can word it its own way.
+// Returns the body, the final URL, and whether any hop reached a public
+// address.
+async function getGuarded(url, 
+// Binary by default (reference images); text callers pass FETCH_TEXT_DEFAULTS.
+opts = FETCH_BINARY_DEFAULTS, refuseFirst, refuseRedirect = redirectError) {
+    const policy = localUrlPolicy();
+    const axios = await loadAxios();
+    const [{ default: http }, { default: https }] = await Promise.all([
+        import("node:http"),
+        import("node:https"),
+    ]);
+    let current = url;
+    let refuse = policy === "hops" ? refuseFirst : undefined;
+    let reachedPublic = false;
+    for (let hops = 0;; hops++) {
+        if (policy === "block") {
+            // The pre-connect check. A second lookup fires at connect time through
+            // the agent's `lookup` below (ADR 01162).
+            if (await privateAddressOf(current))
+                throw strictModeError(current);
+            const hopUrl = current;
+            refuse = () => strictModeError(hopUrl);
         }
+        // Fresh agents per request, so no pooled socket skips the lookup. It
+        // notes whether the connection resolved to a private address, and
+        // refuses one when `refuse` is set.
+        const seen = {};
+        const refuseAtConnect = refuse;
+        const target = hostKey(new URL(current).hostname);
+        const lookup = (hostname, options, callback) => {
+            // With a proxy configured, a lookup of another name is the proxy's. It
+            // says nothing about the target, so it's neither refused nor counted;
+            // the pre-connect checks still apply (ADR 01162).
+            if (proxyConfigured() && hostKey(hostname) !== target) {
+                return dnsCallback.lookup(hostname, options, callback);
+            }
+            return dnsCallback.lookup(hostname, options, (error, address, family) => {
+                if (error)
+                    return callback(error, address, family);
+                const answers = Array.isArray(address) ? address : [{ address }];
+                seen.resolved = true;
+                seen.private = answers.find((a) => isPrivateOrLoopbackAddress(a.address))?.address;
+                seen.public = answers.some((a) => !isPrivateOrLoopbackAddress(a.address));
+                if (seen.private && refuseAtConnect)
+                    return callback(refuseAtConnect(seen.private));
+                callback(null, address, family);
+            });
+        };
+        const response = await axios.get(current, {
+            ...opts,
+            maxRedirects: 0,
+            httpAgent: new http.Agent({ lookup }),
+            httpsAgent: new https.Agent({ lookup }),
+            validateStatus: (status) => (status >= 200 && status < 300) || REDIRECT_STATUSES.includes(status),
+        }).catch((error) => {
+            // axios wraps a refusal at connect time; hand back the refusal itself.
+            throw error?.cause instanceof UrlGuardError ? error.cause : error;
+        });
+        // An IP literal skips the lookup, so classify it directly. A name the
+        // lookup never saw (a proxy) is public unless every address is private.
+        let hopPublic = seen.resolved
+            ? seen.public
+            : net.isIP(target)
+                ? !isPrivateOrLoopbackAddress(target)
+                : undefined;
+        // A fresh lookup of this hop's host, made at most once: a flapping
+        // resolver can't give the two checks below different answers. A failed
+        // lookup counts as public. `every: true` is deliberate: the host is
+        // private only when every address is, so in the `fromPublic` check a hop
+        // the connection saw as private still counts as public when the fresh
+        // lookup finds any public address. That's the guard failing closed.
+        // `fresh` resets every iteration, and `current` stays this hop's URL until
+        // `current = next` at the end of the loop.
+        let fresh;
+        const freshPublic = () => (fresh ??= privateAddressOf(current, { every: true }).then((a) => !a, () => true));
+        if (hopPublic === undefined && policy !== "allow")
+            hopPublic = await freshPublic();
+        if (hopPublic)
+            reachedPublic = true;
+        if (!REDIRECT_STATUSES.includes(response.status)) {
+            return { data: response.data, url: current, reachedPublic };
+        }
+        const location = response.headers?.location;
+        // `hops` counts redirects followed, so at 5 a sixth redirect arrived and
+        // "more than 5" is accurate.
+        if (!location || hops >= 5) {
+            // Names the original URL on purpose: it's the one the spec named. When
+            // the limit and a missing Location both apply, the limit wins on purpose.
+            throw new UrlGuardError(`Couldn't fetch ${redactUrlForOutput(url)}: ${hops >= 5 ? "it needs more than 5 redirects" : `the ${response.status} redirect has no Location header`}.`);
+        }
+        const next = new URL(location, current).toString();
+        const scheme = new URL(next).protocol;
+        if (scheme !== "http:" && scheme !== "https:") {
+            throw new UrlGuardError(`Couldn't fetch ${redactUrlForOutput(current)}: the redirect leads to an unsupported scheme (\`${scheme.slice(0, -1)}\`).`);
+        }
+        if (policy === "hops") {
+            // Fail closed: the hop comes from a public origin unless both the
+            // connection and a fresh lookup say every address is private. Through a
+            // proxy the connection looked up the proxy, not this host, so the fresh
+            // lookup is the only signal.
+            // The two `every` values differ on purpose, and both fail closed. This
+            // hop is public when any address is; the target is refused when any is
+            // private.
+            const fromPublic = hopPublic || (await freshPublic());
+            refuse = undefined;
+            if (fromPublic) {
+                const address = await privateAddressOf(next);
+                if (address)
+                    throw refuseRedirect(current, address);
+                const from = current;
+                refuse = (connectAddress) => refuseRedirect(from, connectAddress);
+            }
+        }
+        current = next;
     }
 }
 async function fetchFile(fileURL, opts = {}) {
     try {
-        if (opts.binary) {
-            // Only gate binary fetches for now — the text path is an internal
-            // loader used by the test-detection pipeline and pre-dates this
-            // change; expanding SSRF coverage there belongs in its own PR.
-            await assertUrlHostIsPublic(fileURL);
-        }
-        const response = await (await loadAxios()).get(fileURL, opts.binary ? FETCH_BINARY_DEFAULTS : undefined);
+        // Binary fetches (screenshot reference images) are guarded. The text
+        // path loads operator-chosen input; not gated by design (ADR 01162).
+        const response = opts.binary
+            ? await getGuarded(fileURL)
+            : await (await loadAxios()).get(fileURL);
         let data;
         if (opts.binary) {
             data = Buffer.from(response.data);
@@ -1898,7 +2092,7 @@ function applyVerifiedMarkers({ config, results, files: detectedFiles = [], init
         }
     }
     const today = verifiedDate();
-    const version = createRequire(import.meta.url)("../../package.json").version;
+    const version = ownVersion() ?? "unknown";
     for (const file of files) {
         try {
             if (!fs.existsSync(file))