insa-check-core 0.1.0

package/dist/content/en.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"en.js","sourceRoot":"","sources":["../../src/content/en.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AAEH,MAAM,OAAO,GAAG,iFAAiF,CAAC;AAElG,MAAM,CAAC,MAAM,EAAE,GAAoB;IACjC,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,SAAS;IACnB,EAAE,EAAE;QACF,iBAAiB,EAAE,eAAe;QAClC,oBAAoB,EAClB,kQAAkQ;QACpQ,QAAQ,EAAE,6CAA6C;QACvD,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,QAAQ,EAAE,UAAU,EAAE;QACjG,WAAW,EAAE,eAAe;QAC5B,SAAS,EAAE,aAAa;QACxB,gBAAgB,EAAE,oBAAoB;QACtC,KAAK,EAAE,iBAAiB;QACxB,UAAU,EAAE,mBAAmB;QAC/B,eAAe,EAAE,kBAAkB;QACnC,YAAY,EAAE,SAAS;QACvB,IAAI,EAAE,eAAe;QACrB,YAAY,EAAE,qCAAqC;QACnD,WAAW,EAAE,aAAa;QAC1B,aAAa,EAAE,gBAAgB;QAC/B,gBAAgB,EAAE,QAAQ;QAC1B,kBAAkB,EAAE,mDAAmD;QACvE,mBAAmB,EAAE,iEAAiE;QACtF,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,KAAK;QAChB,aAAa,EAAE,SAAS;QACxB,cAAc,EAAE,UAAU;QAC1B,YAAY,EAAE,gBAAgB;QAC9B,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,UAAU;QACtB,gBAAgB,EAAE,uBAAuB;QACzC,oBAAoB,EAAE,eAAe;QACrC,aAAa,EAAE,mDAAmD;QAClE,aAAa,EACX,sLAAsL;QACxL,mBAAmB,EAAE,2DAA2D;QAChF,eAAe,EAAE,wFAAwF;QACzG,iBAAiB,EAAE,iCAAiC;QACpD,cAAc,EAAE,kDAAkD;QAClE,oBAAoB,EAAE,gDAAgD;QACtE,oBAAoB,EAAE,yCAAyC;QAC/D,kBAAkB,EAAE,4EAA4E;QAChG,sBAAsB,EAAE,+FAA+F;QACvH,oBAAoB,EAAE,0EAA0E;QAChG,WAAW,EAAE,mCAAmC;QAChD,YAAY,EAAE,2BAA2B;QACzC,QAAQ,EAAE,yIAAyI;QACnJ,uBAAuB,EAAE,gDAAgD;QACzE,aAAa,EAAE,oCAAoC;QACnD,gBAAgB,EAAE,uEAAuE;QACzF,cAAc,EAAE,wBAAwB;QACxC,aAAa,EAAE,MAAM;QACrB,iBAAiB,EAAE,eAAe;QAClC,mBAAmB,EAAE,iCAAiC;QACtD,UAAU,EAAE,iBAAiB;QAC7B,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,yBAAyB;QACtC,kBAAkB,EAAE,mGAAmG;KACxH;IACD,KAAK,EAAE;QACL,mFAAmF;QACnF,GAAG,EAAE;YACH,QAAQ,EAAE,+IAA+I;YACzJ,SAAS,EAAE;gBACT,mHAAmH;gBACnH,2HAA2H;gBAC3H,iGAAiG;aAClG;YACD,cAAc,EAAE,6FAA6F;YAC7G,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;SAC9F;QACD,GAAG,EAAE;YACH,QAAQ,EAAE,0HAA0H;YACpI,SAAS,EAAE;gBACT,0GAA0G;gBAC1G,4FAA4F;gBAC5F,wHAAwH;aACzH;YACD,cAAc,EAAE,+EAA+E;SAChG;QACD,GAAG,EAAE;YACH,QAAQ,EAAE,qIAAqI;YAC/I,SAAS,EAAE;gBACT,8IAA8I;gBAC9I,4HAA4H;gBAC5H,oJAAoJ;aACrJ;YACD,cAAc,EAAE,oEAAoE;SACrF;QACD,GAAG,EAAE;YACH,QAAQ,EAAE,8JAA8J;YACxK,SAAS,EAAE;gBACT,mHAAmH;gBACnH,2DAA2D;gBAC3D,6GAA6G;gBAC7G,2GAA2G;aAC5G;YACD,cAAc,EAAE,iFAAiF;YACjG,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,0EAA0E,EAAE,CAAC;YACrH,UAAU,EAAE;gBACV,mGAAmG;aACpG;SACF;QACD,GAAG,EAAE;YACH,QAAQ,EAAE,+GAA+G;YACzH,SAAS,EAAE;gBACT,mBAAmB;gBACnB,uHAAuH;gBACvH,8EAA8E;aAC/E;YACD,cAAc,EAAE,iEAAiE;YACjF,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,mFAAmF,EAAE,CAAC;SAC9H;QACD,GAAG,EAAE;YACH,QAAQ,EAAE,iIAAiI;YAC3I,SAAS,EAAE;gBACT,0GAA0G;gBAC1G,gGAAgG;gBAChG,iFAAiF;aAClF;YACD,cAAc,EAAE,2EAA2E;YAC3F,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,4FAA4F,EAAE,CAAC;YACtI,UAAU,EAAE;gBACV,4HAA4H;gBAC5H,8KAA8K;aAC/K;SACF;QACD,GAAG,EAAE;YACH,QAAQ,EAAE,yGAAyG;YACnH,SAAS,EAAE;gBACT,sJAAsJ;gBACtJ,2DAA2D;gBAC3D,wHAAwH;aACzH;YACD,cAAc,EAAE,0DAA0D;YAC1E,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,gGAAgG,EAAE,CAAC;SACnJ;QAED,sFAAsF;QACtF,GAAG,EAAE;YACH,QAAQ,EAAE,+JAA+J;YACzK,SAAS,EAAE;gBACT,4JAA4J;gBAC5J,mHAAmH;gBACnH,kGAAkG;aACnG;YACD,cAAc,EAAE,yEAAyE;YACzF,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,uDAAuD,EAAE,CAAC;SACpG;QACD,GAAG,EAAE;YACH,QAAQ,EAAE,uIAAuI;YACjJ,SAAS,EAAE;gBACT,gFAAgF;gBAChF,gJAAgJ;gBAChJ,0DAA0D;aAC3D;YACD,cAAc,EAAE,2EAA2E;SAC5F;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,iHAAiH;YAC3H,SAAS,EAAE;gBACT,8GAA8G;gBAC9G,6FAA6F;gBAC7F,iFAAiF;aAClF;YACD,cAAc,EAAE,yDAAyD;SAC1E;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,qIAAqI;YAC/I,SAAS,EAAE;gBACT,yGAAyG;gBACzG,uEAAuE;gBACvE,uJAAuJ;aACxJ;YACD,cAAc,EAAE,gEAAgE;YAChF,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,OAAO,EAAE,qFAAqF,EAAE,CAAC;SACjJ;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,gIAAgI;YAC1I,SAAS,EAAE;gBACT,wGAAwG;gBACxG,mFAAmF;gBACnF,gGAAgG;aACjG;YACD,cAAc,EAAE,wEAAwE;SACzF;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,uHAAuH;YACjI,SAAS,EAAE;gBACT,+FAA+F;gBAC/F,uEAAuE;gBACvE,iGAAiG;aAClG;YACD,cAAc,EAAE,sDAAsD;SACvE;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,kFAAkF;YAC5F,SAAS,EAAE;gBACT,+EAA+E;gBAC/E,kEAAkE;gBAClE,uDAAuD;aACxD;YACD,cAAc,EAAE,qDAAqD;SACtE;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,yGAAyG;YACnH,SAAS,EAAE;gBACT,kHAAkH;gBAClH,mHAAmH;gBACnH,mCAAmC;aACpC;YACD,cAAc,EAAE,gDAAgD;YAChE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,mEAAmE,EAAE,CAAC;SACjH;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,sHAAsH;YAChI,SAAS,EAAE;gBACT,oFAAoF;gBACpF,qFAAqF;gBACrF,0DAA0D;aAC3D;YACD,cAAc,EAAE,yCAAyC;YACzD,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,kFAAkF,EAAE,CAAC;SACvH;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,kGAAkG;YAC5G,SAAS,EAAE;gBACT,oGAAoG;gBACpG,wGAAwG;gBACxG,oFAAoF;aACrF;YACD,cAAc,EAAE,yEAAyE;YACzF,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,yDAAyD,EAAE,CAAC;SACtG;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,6JAA6J;YACvK,SAAS,EAAE;gBACT,6FAA6F;gBAC7F,gJAAgJ;gBAChJ,0EAA0E;aAC3E;YACD,cAAc,EAAE,yCAAyC;YACzD,UAAU,EAAE;gBACV,2HAA2H;aAC5H;SACF;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,uHAAuH;YACjI,SAAS,EAAE;gBACT,8FAA8F;gBAC9F,0GAA0G;gBAC1G,qEAAqE;aACtE;YACD,cAAc,EAAE,2CAA2C;YAC3D,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,yEAAyE,EAAE,CAAC;YAC7G,UAAU,EAAE;gBACV,uHAAuH;gBACvH,6LAA6L;aAC9L;SACF;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,yHAAyH;YACnI,SAAS,EAAE;gBACT,qEAAqE;gBACrE,2JAA2J;gBAC3J,0EAA0E;gBAC1E,2FAA2F;aAC5F;YACD,cAAc,EAAE,sCAAsC;YACtD,KAAK,EAAE;gBACL,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,6DAA6D,EAAE;gBAC9G,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,4EAA4E,EAAE;aAC5G;YACD,UAAU,EAAE;gBACV,uHAAuH;gBACvH,6LAA6L;aAC9L;SACF;QAED,kFAAkF;QAClF,IAAI,EAAE;YACJ,QAAQ,EAAE,6HAA6H;YACvI,SAAS,EAAE;gBACT,mJAAmJ;gBACnJ,yFAAyF;gBACzF,oEAAoE;aACrE;YACD,cAAc,EAAE,2DAA2D;YAC3E,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,qFAAqF,EAAE,CAAC;YACvI,UAAU,EAAE;gBACV,oKAAoK;gBACpK,+IAA+I;aAChJ;SACF;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,yIAAyI;YACnJ,SAAS,EAAE;gBACT,6EAA6E;gBAC7E,2IAA2I;gBAC3I,0DAA0D;aAC3D;YACD,cAAc,EAAE,+DAA+D;YAC/E,UAAU,EAAE;gBACV,oKAAoK;gBACpK,+IAA+I;aAChJ;SACF;QAED,mFAAmF;QACnF,IAAI,EAAE;YACJ,QAAQ,EAAE,0HAA0H;YACpI,SAAS,EAAE;gBACT,wHAAwH;gBACxH,sFAAsF;gBACtF,mFAAmF;gBACnF,mEAAmE;aACpE;YACD,cAAc,EAAE,uDAAuD;YACvE,KAAK,EAAE;gBACL,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,mCAAmC,EAAE;gBACxE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,kDAAkD,EAAE;aACvF;YACD,UAAU,EAAE;gBACV,6IAA6I;gBAC7I,8HAA8H;gBAC9H,sKAAsK;gBACtK,6LAA6L;gBAC7L,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,4GAA4G;YACtH,SAAS,EAAE;gBACT,mGAAmG;gBACnG,oHAAoH;gBACpH,wEAAwE;aACzE;YACD,cAAc,EAAE,gDAAgD;YAChE,UAAU,EAAE;gBACV,6LAA6L;gBAC7L,wNAAwN;aACzN;SACF;QAED,8GAA8G;QAC9G,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,oHAAoH;gBACpH,gJAAgJ;gBAChJ,6LAA6L;gBAC7L,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,qKAAqK;gBACrK,0HAA0H;gBAC1H,6LAA6L;gBAC7L,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,2GAA2G;gBAC3G,2FAA2F;gBAC3F,8KAA8K;aAC/K;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,yGAAyG;gBACzG,6LAA6L;gBAC7L,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,gKAAgK;gBAChK,6GAA6G;aAC9G;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,kJAAkJ;gBAClJ,+JAA+J;gBAC/J,8IAA8I;gBAC9I,iOAAiO;gBACjO,uMAAuM;aACxM;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,iJAAiJ;gBACjJ,gKAAgK;aACjK;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,gKAAgK;gBAChK,oKAAoK;aACrK;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,8IAA8I;gBAC9I,kHAAkH;gBAClH,oKAAoK;gBACpK,6IAA6I;aAC9I;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,4IAA4I;gBAC5I,oHAAoH;aACrH;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,iHAAiH;gBACjH,6GAA6G;gBAC7G,iOAAiO;aAClO;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,6LAA6L;gBAC7L,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,6LAA6L;gBAC7L,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,6LAA6L;gBAC7L,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,6LAA6L;gBAC7L,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,6LAA6L;gBAC7L,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,6LAA6L;gBAC7L,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,6LAA6L;gBAC7L,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,6LAA6L;gBAC7L,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,6LAA6L;gBAC7L,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,6LAA6L;gBAC7L,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,6LAA6L;gBAC7L,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,6LAA6L;gBAC7L,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,6LAA6L;aAC9L;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,6LAA6L;aAC9L;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,6LAA6L;aAC9L;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,6LAA6L;aAC9L;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,6LAA6L;aAC9L;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,6LAA6L;aAC9L;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,6LAA6L;aAC9L;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,6LAA6L;aAC9L;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,6LAA6L;aAC9L;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,6LAA6L;aAC9L;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,6LAA6L;aAC9L;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,6LAA6L;aAC9L;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,6LAA6L;aAC9L;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,6LAA6L;aAC9L;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,6LAA6L;aAC9L;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,6LAA6L;aAC9L;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,6LAA6L;aAC9L;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,wHAAwH;aACzH;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,wNAAwN;aACzN;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE;gBACV,uFAAuF;gBACvF,wNAAwN;aACzN;SACF;QACD,KAAK,EAAE;YACL,UAAU,EAAE;gBACV,oKAAoK;gBACpK,+IAA+I;aAChJ;SACF;KACF;CACF,CAAC"}

package/dist/content/index.d.ts

@@ -0,0 +1,15 @@
+import type { AnnexItem } from "../types.js";
+import type { GuidanceCatalog, ItemGuidance } from "./types.js";
+export type { GuidanceCatalog, ItemGuidance, UiStrings } from "./types.js";
+/** Available catalogs. Add a translation (e.g. am.ts) and register it here. */
+export declare const CATALOGS: Readonly<Record<string, GuidanceCatalog>>;
+export declare const DEFAULT_LOCALE = "en";
+/** Catalog for a locale, falling back to English for unknown locales. */
+export declare function catalog(locale?: string): GuidanceCatalog;
+/** Guidance for an item in a locale; missing fields fall back to English. */
+export declare function guidanceFor(id: string, locale?: string): ItemGuidance;
+/** Item with its guided-review content applied for a locale. */
+export declare function localizeItem(item: AnnexItem, locale?: string): AnnexItem;
+/** Fills {name} placeholders. Unknown placeholders are left as-is. */
+export declare function formatText(template: string, vars: Record<string, string | number>): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/content/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/content/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAEhE,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE3E,+EAA+E;AAC/E,eAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAc,CAAC;AAC9E,eAAO,MAAM,cAAc,OAAO,CAAC;AAEnC,yEAAyE;AACzE,wBAAgB,OAAO,CAAC,MAAM,GAAE,MAAuB,GAAG,eAAe,CAExE;AAED,6EAA6E;AAC7E,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,GAAE,MAAuB,GAAG,YAAY,CAErF;AAED,gEAAgE;AAChE,wBAAgB,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,GAAE,MAAuB,GAAG,SAAS,CAExF;AAED,sEAAsE;AACtE,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,MAAM,CAE1F"}

package/dist/content/index.js

@@ -0,0 +1,21 @@
+import { EN } from "./en.js";
+/** Available catalogs. Add a translation (e.g. am.ts) and register it here. */
+export const CATALOGS = { en: EN };
+export const DEFAULT_LOCALE = "en";
+/** Catalog for a locale, falling back to English for unknown locales. */
+export function catalog(locale = DEFAULT_LOCALE) {
+    return CATALOGS[locale] ?? EN;
+}
+/** Guidance for an item in a locale; missing fields fall back to English. */
+export function guidanceFor(id, locale = DEFAULT_LOCALE) {
+    return { ...EN.items[id], ...catalog(locale).items[id] };
+}
+/** Item with its guided-review content applied for a locale. */
+export function localizeItem(item, locale = DEFAULT_LOCALE) {
+    return { ...item, ...guidanceFor(item.id, locale) };
+}
+/** Fills {name} placeholders. Unknown placeholders are left as-is. */
+export function formatText(template, vars) {
+    return template.replace(/\{(\w+)\}/g, (m, k) => (k in vars ? String(vars[k]) : m));
+}
+//# sourceMappingURL=index.js.map

package/dist/content/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/content/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAK7B,+EAA+E;AAC/E,MAAM,CAAC,MAAM,QAAQ,GAA8C,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;AAC9E,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC;AAEnC,yEAAyE;AACzE,MAAM,UAAU,OAAO,CAAC,MAAM,GAAW,cAAc;IACrD,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAChC,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,WAAW,CAAC,EAAU,EAAE,MAAM,GAAW,cAAc;IACrE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,YAAY,CAAC,IAAe,EAAE,MAAM,GAAW,cAAc;IAC3E,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,IAAqC;IAChF,OAAO,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7F,CAAC"}

package/dist/content/types.d.ts

@@ -0,0 +1,87 @@
+import type { ManualVerdict, TermExplanation } from "../types.js";
+/**
+ * Guided-review content for one Annex B item. Authored per item; never generated at runtime.
+ * Every field is optional: items without authored guidance fall back to the registry's manualNote.
+ */
+export interface ItemGuidance {
+    /** What to check and why it matters (1–3 sentences). */
+    guidance?: string;
+    /** 2–5 concrete test steps. */
+    howToTest?: string[];
+    /** What the reviewer should record. */
+    evidencePrompt?: string;
+    /** Plain-language explanations of technical terms used above. */
+    terms?: TermExplanation[];
+    /** Related requirements in INSA documents, cited by clause. */
+    references?: string[];
+}
+/**
+ * All user-facing strings for the manual-review flow (dashboard and CLI) and readiness summary.
+ * Placeholders use {name} and are filled with formatText().
+ */
+export interface UiStrings {
+    manualReviewTitle: string;
+    authorizationWarning: string;
+    progress: string;
+    verdict: Record<ManualVerdict, string>;
+    whatToCheck: string;
+    howToTest: string;
+    evidenceToRecord: string;
+    terms: string;
+    references: string;
+    automatedResult: string;
+    verdictLabel: string;
+    note: string;
+    evidenceText: string;
+    screenshots: string;
+    addScreenshot: string;
+    removeScreenshot: string;
+    screenshotTooLarge: string;
+    screenshotWrongType: string;
+    saved: string;
+    saving: string;
+    filterAll: string;
+    filterPending: string;
+    filterReviewed: string;
+    backToReport: string;
+    startReview: string;
+    reviewer: string;
+    reviewedAt: string;
+    evidenceAttached: string;
+    evidenceTextAttached: string;
+    noManualItems: string;
+    storageNotice: string;
+    readinessIncomplete: string;
+    readinessErrors: string;
+    readinessFailures: string;
+    readinessClean: string;
+    readinessPendingLine: string;
+    readinessNonePending: string;
+    readinessNeedsNote: string;
+    readinessNeedsNoteLine: string;
+    readinessCarriedLine: string;
+    carriedFrom: string;
+    historyCount: string;
+    cliIntro: string;
+    cliConfirmAuthorization: string;
+    cliItemHeader: string;
+    cliVerdictPrompt: string;
+    cliKeepCurrent: string;
+    cliNotePrompt: string;
+    cliEvidencePrompt: string;
+    cliScreenshotPrompt: string;
+    cliSavedTo: string;
+    cliStopped: string;
+    cliFinished: string;
+    cliNothingToReview: string;
+}
+export interface GuidanceCatalog {
+    /** BCP 47 tag, e.g. "en", "am". */
+    locale: string;
+    /** Name of the language in that language, e.g. "English", "አማርኛ". */
+    language: string;
+    /** Keyed by Annex B item number. */
+    items: Record<string, ItemGuidance>;
+    ui: UiStrings;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/content/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/content/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAElE;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,uCAAuC;IACvC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,KAAK,CAAC,EAAE,eAAe,EAAE,CAAC;IAC1B,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,uBAAuB,EAAE,MAAM,CAAC;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACpC,EAAE,EAAE,SAAS,CAAC;CACf"}

package/dist/content/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/content/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/content/types.ts"],"names":[],"mappings":""}

package/dist/engine.d.ts

@@ -0,0 +1,52 @@
+import type { AnnexItem, Check, CheckKind, CheckOutcome, CheckResult, Report, ScanContext } from "./types.js";
+import { TOOL_NAME, TOOL_VERSION } from "./meta.js";
+export { TOOL_NAME, TOOL_VERSION };
+export declare const USER_AGENT = "insa-check/0.1.0 (passive INSA Annex B audit; authorized testing only)";
+export interface ScanOptions {
+    /**
+     * Caller asserts the operator owns or is authorized to test the target.
+     * Required so that every wrapper (CLI, server, library user) must make this explicit.
+     */
+    permissionConfirmed: true;
+    /** Per-request timeout. Default 10 s. */
+    timeoutMs?: number;
+    /** Per-check time budget. Default 45 s. */
+    checkTimeoutMs?: number;
+    /** Max concurrent requests to the target. Default 4. */
+    concurrency?: number;
+    userAgent?: string;
+    /** Refuse loopback/private/reserved targets (SSRF protection). Default false; servers should enable it. */
+    blockPrivateNetworks?: boolean;
+    /** Overrides for tests / extensions. */
+    registry?: readonly AnnexItem[];
+    checks?: ReadonlyMap<string, Check>;
+    context?: ScanContext;
+    /** Called as each item completes, e.g. for progress output. */
+    onResult?: (result: CheckResult) => void;
+}
+export declare class TargetError extends Error {
+    name: string;
+}
+/** Accepts "example.com" or a full http(s) URL. Strips credentials and fragments. */
+export declare function normalizeTarget(input: string): URL;
+export declare function runScan(input: string, options: ScanOptions): Promise<Report>;
+/** Anything the engine can run against a context: a UrlCheck or a CodeCheck. */
+export interface RunnableCheck<C> {
+    key: string;
+    run(ctx: C): Promise<CheckOutcome>;
+}
+export interface EvaluateOptions<C> {
+    registry: readonly AnnexItem[];
+    kind: CheckKind;
+    ctx: C;
+    checkTimeoutMs: number;
+    /** The check deciding an item, a string to report the item as manual with that note, or undefined for its manualNote. */
+    resolve: (item: AnnexItem) => RunnableCheck<C> | string | undefined;
+    onResult?: (result: CheckResult) => void;
+}
+/**
+ * Shared engine loop for every scan kind: one row per registry item, in order.
+ * A check that decides several items runs once; failures become "error" rows.
+ */
+export declare function evaluateRegistry<C>(opts: EvaluateOptions<C>): Promise<CheckResult[]>;
+//# sourceMappingURL=engine.d.ts.map

package/dist/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAe,MAAM,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE3H,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;AACnC,eAAO,MAAM,UAAU,2EAAuF,CAAC;AAE/G,MAAM,WAAW,WAAW;IAC1B;;;OAGG;IACH,mBAAmB,EAAE,IAAI,CAAC;IAC1B,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2GAA2G;IAC3G,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,wCAAwC;IACxC,QAAQ,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IAChC,MAAM,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpC,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,CAAC;CAC1C;AAED,qBAAa,WAAY,SAAQ,KAAK;IAC3B,IAAI,SAAiB;CAC/B;AAED,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,CAelD;AAED,wBAAsB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAuClF;AAED,gFAAgF;AAChF,MAAM,WAAW,aAAa,CAAC,CAAC;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,QAAQ,EAAE,SAAS,SAAS,EAAE,CAAC;IAC/B,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,CAAC,CAAC;IACP,cAAc,EAAE,MAAM,CAAC;IACvB,yHAAyH;IACzH,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,aAAa,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,SAAS,CAAC;IACpE,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,CAAC;CAC1C;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAgC1F"}

package/dist/engine.js

@@ -0,0 +1,120 @@
+import { ANNEX_B, STANDARD } from "./annex-b.js";
+import { CHECKS } from "./checks/index.js";
+import { createScanContext } from "./net/context.js";
+import { summarize } from "./report/summary.js";
+import { TOOL_NAME, TOOL_VERSION } from "./meta.js";
+export { TOOL_NAME, TOOL_VERSION };
+export const USER_AGENT = `${TOOL_NAME}/${TOOL_VERSION} (passive INSA Annex B audit; authorized testing only)`;
+export class TargetError extends Error {
+    name = "TargetError";
+}
+/** Accepts "example.com" or a full http(s) URL. Strips credentials and fragments. */
+export function normalizeTarget(input) {
+    const trimmed = input.trim();
+    let url;
+    try {
+        url = new URL(/^[a-z][a-z0-9+.-]*:\/\//i.test(trimmed) ? trimmed : `https://${trimmed}`);
+    }
+    catch {
+        throw new TargetError(`Not a valid URL: ${input}`);
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+        throw new TargetError(`Only http and https URLs can be scanned (got ${url.protocol}).`);
+    }
+    url.username = "";
+    url.password = "";
+    url.hash = "";
+    return url;
+}
+export async function runScan(input, options) {
+    if (options.permissionConfirmed !== true) {
+        throw new Error("Refusing to scan: permission to test the target was not confirmed.");
+    }
+    const target = normalizeTarget(input);
+    const registry = options.registry ?? ANNEX_B;
+    const checks = options.checks ?? CHECKS;
+    const ctx = options.context ??
+        createScanContext(target, {
+            timeoutMs: options.timeoutMs ?? 10_000,
+            maxRedirects: 5,
+            maxBodyBytes: 1_000_000,
+            userAgent: options.userAgent ?? USER_AGENT,
+            concurrency: options.concurrency ?? 4,
+            blockPrivateNetworks: options.blockPrivateNetworks ?? false,
+        });
+    const checkTimeoutMs = options.checkTimeoutMs ?? 45_000;
+    const startedAt = new Date().toISOString();
+    const results = await evaluateRegistry({
+        registry,
+        kind: "url",
+        ctx,
+        checkTimeoutMs,
+        resolve: (item) => (item.checks?.url ? checks.get(item.checks.url) : undefined),
+        onResult: options.onResult,
+    });
+    return {
+        tool: { name: TOOL_NAME, version: TOOL_VERSION },
+        standard: STANDARD,
+        target: target.href,
+        sources: { url: target.href },
+        startedAt,
+        finishedAt: new Date().toISOString(),
+        summary: summarize(results),
+        results,
+    };
+}
+/**
+ * Shared engine loop for every scan kind: one row per registry item, in order.
+ * A check that decides several items runs once; failures become "error" rows.
+ */
+export async function evaluateRegistry(opts) {
+    const outcomes = new Map();
+    return Promise.all(opts.registry.map(async (item) => {
+        const check = opts.resolve(item);
+        let outcome;
+        let evaluatedBy = "manual";
+        if (check === undefined || typeof check === "string") {
+            outcome = { status: "manual", detail: check ?? item.manualNote };
+        }
+        else {
+            let pending = outcomes.get(check.key);
+            if (!pending) {
+                pending = runCheck(check, opts.ctx, opts.checkTimeoutMs);
+                outcomes.set(check.key, pending);
+            }
+            outcome = await pending;
+            evaluatedBy = opts.kind;
+        }
+        const { findings, ...rest } = outcome;
+        const result = {
+            id: item.id,
+            section: item.section,
+            title: item.title,
+            tier: item.tier,
+            evaluatedBy,
+            ...rest,
+            ...(findings?.length ? { findings: findings.map((f) => ({ ...f, item: item.id })) } : {}),
+        };
+        opts.onResult?.(result);
+        return result;
+    }));
+}
+async function runCheck(check, ctx, timeoutMs) {
+    let timer;
+    try {
+        return await Promise.race([
+            check.run(ctx),
+            new Promise((_, reject) => {
+                timer = setTimeout(() => reject(new Error(`Check timed out after ${timeoutMs / 1000}s`)), timeoutMs);
+            }),
+        ]);
+    }
+    catch (err) {
+        const e = err;
+        return { status: "error", detail: `Could not complete: ${e.message ?? String(err)}${e.code ? ` (${e.code})` : ""}` };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=engine.js.map

package/dist/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;AACnC,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,SAAS,IAAI,YAAY,wDAAwD,CAAC;AAyB/G,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,GAAG,aAAa,CAAC;CAC/B;AAED,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,oBAAoB,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,WAAW,CAAC,gDAAgD,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;IAC1F,CAAC;IACD,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;IAClB,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;IAClB,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;IACd,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAa,EAAE,OAAoB;IAC/D,IAAI,OAAO,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;IACxC,MAAM,GAAG,GACP,OAAO,CAAC,OAAO;QACf,iBAAiB,CAAC,MAAM,EAAE;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM;YACtC,YAAY,EAAE,CAAC;YACf,YAAY,EAAE,SAAS;YACvB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,UAAU;YAC1C,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,CAAC;YACrC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,IAAI,KAAK;SAC5D,CAAC,CAAC;IACL,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,MAAM,CAAC;IAExD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC;QACrC,QAAQ;QACR,IAAI,EAAE,KAAK;QACX,GAAG;QACH,cAAc;QACd,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/E,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE;QAChD,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,MAAM,CAAC,IAAI;QACnB,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE;QAC7B,SAAS;QACT,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC;QAC3B,OAAO;KACR,CAAC;AACJ,CAAC;AAkBD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAI,IAAwB;IAChE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC1D,OAAO,OAAO,CAAC,GAAG,CAChB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAwB,EAAE;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,OAAqB,CAAC;QAC1B,IAAI,WAAW,GAAgB,QAAQ,CAAC;QACxC,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,IAAI,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;gBACzD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,GAAG,MAAM,OAAO,CAAC;YACxB,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;QACtC,MAAM,MAAM,GAAgB;YAC1B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW;YACX,GAAG,IAAI;YACP,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1F,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;QACxB,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAI,KAAuB,EAAE,GAAM,EAAE,SAAiB;IAC3E,IAAI,KAAiC,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YACd,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACvG,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAA0C,CAAC;QACrD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,uBAAuB,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;IACvH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+export * from "./types.js";
+export { ANNEX_B, STANDARD } from "./annex-b.js";
+export { CHECKS } from "./checks/index.js";
+export { runScan, normalizeTarget, evaluateRegistry, TargetError, TOOL_NAME, TOOL_VERSION, USER_AGENT, type ScanOptions, type RunnableCheck, } from "./engine.js";
+export { validateRegistry } from "./validate.js";
+export { CODE_CHECKS } from "./code/checks/index.js";
+export { runCodeScan, CodeScanError, type CodeScanOptions } from "./code/scan.js";
+export { detectProject } from "./code/detect.js";
+export type * from "./code/types.js";
+export { isPrivateAddress, PrivateTargetError } from "./net/guard.js";
+export * from "./report/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EACL,OAAO,EACP,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,SAAS,EACT,YAAY,EACZ,UAAU,EACV,KAAK,WAAW,EAChB,KAAK,aAAa,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,mBAAmB,iBAAiB,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACtE,cAAc,mBAAmB,CAAC"}

package/dist/index.js

@@ -0,0 +1,11 @@
+export * from "./types.js";
+export { ANNEX_B, STANDARD } from "./annex-b.js";
+export { CHECKS } from "./checks/index.js";
+export { runScan, normalizeTarget, evaluateRegistry, TargetError, TOOL_NAME, TOOL_VERSION, USER_AGENT, } from "./engine.js";
+export { validateRegistry } from "./validate.js";
+export { CODE_CHECKS } from "./code/checks/index.js";
+export { runCodeScan, CodeScanError } from "./code/scan.js";
+export { detectProject } from "./code/detect.js";
+export { isPrivateAddress, PrivateTargetError } from "./net/guard.js";
+export * from "./report/index.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EACL,OAAO,EACP,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,SAAS,EACT,YAAY,EACZ,UAAU,GAGX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAwB,MAAM,gBAAgB,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACtE,cAAc,mBAAmB,CAAC"}

package/dist/meta.d.ts

@@ -0,0 +1,4 @@
+/** Tool identity. Kept free of Node APIs so browser code can import it. */
+export declare const TOOL_NAME = "insa-check";
+export declare const TOOL_VERSION = "0.1.0";
+//# sourceMappingURL=meta.d.ts.map

package/dist/meta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta.d.ts","sourceRoot":"","sources":["../src/meta.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,eAAO,MAAM,SAAS,eAAe,CAAC;AACtC,eAAO,MAAM,YAAY,UAAU,CAAC"}

package/dist/meta.js

@@ -0,0 +1,4 @@
+/** Tool identity. Kept free of Node APIs so browser code can import it. */
+export const TOOL_NAME = "insa-check";
+export const TOOL_VERSION = "0.1.0";
+//# sourceMappingURL=meta.js.map

package/dist/meta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta.js","sourceRoot":"","sources":["../src/meta.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,MAAM,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC;AACtC,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC"}

package/dist/net/context.d.ts

@@ -0,0 +1,9 @@
+import type { ScanContext } from "../types.js";
+import { type HttpClientOptions } from "./http.js";
+export interface ContextOptions extends HttpClientOptions {
+    /** Max requests in flight against the target at once. */
+    concurrency: number;
+}
+/** Real network-backed ScanContext with per-scan caching and a concurrency cap. */
+export declare function createScanContext(target: URL, options: ContextOptions): ScanContext;
+//# sourceMappingURL=context.d.ts.map

package/dist/net/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/net/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAkD,WAAW,EAAW,MAAM,aAAa,CAAC;AACxG,OAAO,EAAe,KAAK,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAGhE,MAAM,WAAW,cAAe,SAAQ,iBAAiB;IACvD,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,GAAG,WAAW,CAsCnF"}

package/dist/net/context.js

@@ -0,0 +1,62 @@
+import { httpRequest } from "./http.js";
+import { getTlsInfo, probeLegacyTls } from "./tls.js";
+/** Real network-backed ScanContext with per-scan caching and a concurrency cap. */
+export function createScanContext(target, options) {
+    const responses = new Map();
+    const legacy = new Map();
+    let tlsInfo;
+    const limit = createLimiter(options.concurrency);
+    const tlsTarget = {
+        host: target.hostname.replace(/^\[|\]$/g, ""),
+        port: target.protocol === "https:" && target.port ? Number(target.port) : 443,
+        timeoutMs: options.timeoutMs,
+        blockPrivateNetworks: options.blockPrivateNetworks,
+    };
+    return {
+        target,
+        request(pathOrUrl, opts = {}) {
+            const url = new URL(pathOrUrl, target).href;
+            const key = `${opts.method ?? "GET"} ${url} ${opts.followRedirects ?? true} ${JSON.stringify(opts.headers ?? {})}`;
+            let pending = responses.get(key);
+            if (!pending) {
+                pending = limit(() => httpRequest(url, opts, options));
+                responses.set(key, pending);
+            }
+            return pending;
+        },
+        tlsInfo() {
+            tlsInfo ??= limit(() => getTlsInfo(tlsTarget));
+            return tlsInfo;
+        },
+        probeTls(version) {
+            let pending = legacy.get(version);
+            if (!pending) {
+                pending = limit(() => probeLegacyTls(tlsTarget, version));
+                legacy.set(version, pending);
+            }
+            return pending;
+        },
+    };
+}
+function createLimiter(max) {
+    let active = 0;
+    const queue = [];
+    return function limit(task) {
+        return new Promise((resolve, reject) => {
+            const run = () => {
+                active++;
+                task()
+                    .then(resolve, reject)
+                    .finally(() => {
+                    active--;
+                    queue.shift()?.();
+                });
+            };
+            if (active < max)
+                run();
+            else
+                queue.push(run);
+        });
+    };
+}
+//# sourceMappingURL=context.js.map

package/dist/net/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/net/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAA0B,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAOtD,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,MAAW,EAAE,OAAuB;IACpE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsC,CAAC;IAC7D,IAAI,OAAqC,CAAC;IAC1C,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAEjD,MAAM,SAAS,GAAG;QAChB,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;QAC7C,IAAI,EAAE,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG;QAC7E,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;KACnD,CAAC;IAEF,OAAO;QACL,MAAM;QACN,OAAO,CAAC,SAAiB,EAAE,IAAI,GAAmB,EAAE;YAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC;YAC5C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,IAAI,GAAG,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YACnH,IAAI,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;gBACvD,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC9B,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO;YACL,OAAO,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;YAC/C,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,QAAQ,CAAC,OAAyB;YAChC,IAAI,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC1D,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/B,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,OAAO,SAAS,KAAK,CAAI,IAAsB;QAC7C,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,GAAG,GAAG,GAAG,EAAE;gBACf,MAAM,EAAE,CAAC;gBACT,IAAI,EAAE;qBACH,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;qBACrB,OAAO,CAAC,GAAG,EAAE;oBACZ,MAAM,EAAE,CAAC;oBACT,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC;gBACpB,CAAC,CAAC,CAAC;YACP,CAAC,CAAC;YACF,IAAI,MAAM,GAAG,GAAG;gBAAE,GAAG,EAAE,CAAC;;gBACnB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/net/guard.d.ts

@@ -0,0 +1,16 @@
+import dns from "node:dns";
+export declare function isPrivateAddress(ip: string): boolean;
+export declare class PrivateTargetError extends Error {
+    readonly code = "EPRIVATETARGET";
+    constructor(host: string, ip: string);
+}
+/** Node skips `lookup` for IP-literal hosts, so those must be checked up front. */
+export declare function assertAllowedLiteral(host: string): void;
+type LookupCallback = (err: NodeJS.ErrnoException | null, address: string | dns.LookupAddress[], family?: number) => void;
+/**
+ * dns.lookup replacement for http/tls `lookup` options. Validates the address
+ * actually connected to, so DNS rebinding cannot bypass the check.
+ */
+export declare function guardedLookup(hostname: string, options: dns.LookupOptions, callback: LookupCallback): void;
+export {};
+//# sourceMappingURL=guard.d.ts.map

package/dist/net/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/net/guard.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,UAAU,CAAC;AA8B3B,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAMpD;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,oBAAoB;IACjC,YAAY,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAGnC;CACF;AAED,mFAAmF;AACnF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAGvD;AAED,KAAK,cAAc,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,cAAc,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC,aAAa,EAAE,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;AAE1H;;;GAGG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAE,cAAc,GAAG,IAAI,CAU1G"}

package/dist/net/guard.js

@@ -0,0 +1,70 @@
+import dns from "node:dns";
+import net from "node:net";
+/** Loopback, private, link-local, CGNAT, multicast and reserved ranges. */
+const BLOCKED = new net.BlockList();
+for (const [addr, prefix] of [
+    ["0.0.0.0", 8],
+    ["10.0.0.0", 8],
+    ["100.64.0.0", 10],
+    ["127.0.0.0", 8],
+    ["169.254.0.0", 16],
+    ["172.16.0.0", 12],
+    ["192.0.0.0", 24],
+    ["192.168.0.0", 16],
+    ["198.18.0.0", 15],
+    ["224.0.0.0", 4],
+    ["240.0.0.0", 4],
+]) {
+    BLOCKED.addSubnet(addr, prefix, "ipv4");
+}
+for (const [addr, prefix] of [
+    ["::", 128],
+    ["::1", 128],
+    ["fc00::", 7],
+    ["fe80::", 10],
+    ["ff00::", 8],
+]) {
+    BLOCKED.addSubnet(addr, prefix, "ipv6");
+}
+export function isPrivateAddress(ip) {
+    const mapped = /^::ffff:(\d+\.\d+\.\d+\.\d+)$/i.exec(ip);
+    if (mapped)
+        return BLOCKED.check(mapped[1], "ipv4");
+    const family = net.isIP(ip);
+    if (family === 0)
+        return true;
+    return BLOCKED.check(ip, family === 4 ? "ipv4" : "ipv6");
+}
+export class PrivateTargetError extends Error {
+    code = "EPRIVATETARGET";
+    constructor(host, ip) {
+        super(`${host} resolves to a private or reserved address (${ip}); scanning it is disabled on this server`);
+        this.name = "PrivateTargetError";
+    }
+}
+/** Node skips `lookup` for IP-literal hosts, so those must be checked up front. */
+export function assertAllowedLiteral(host) {
+    const bare = host.replace(/^\[|\]$/g, "");
+    if (net.isIP(bare) !== 0 && isPrivateAddress(bare))
+        throw new PrivateTargetError(host, bare);
+}
+/**
+ * dns.lookup replacement for http/tls `lookup` options. Validates the address
+ * actually connected to, so DNS rebinding cannot bypass the check.
+ */
+export function guardedLookup(hostname, options, callback) {
+    dns.lookup(hostname, { ...options, all: true }, (err, addresses) => {
+        if (err)
+            return callback(err, []);
+        const blocked = addresses.find((a) => isPrivateAddress(a.address));
+        if (blocked)
+            return callback(new PrivateTargetError(hostname, blocked.address), []);
+        if (options.all)
+            return callback(null, addresses);
+        const first = addresses[0];
+        if (!first)
+            return callback(Object.assign(new Error(`No address for ${hostname}`), { code: "ENOTFOUND" }), []);
+        callback(null, first.address, first.family);
+    });
+}
+//# sourceMappingURL=guard.js.map

package/dist/net/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/net/guard.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,GAAG,MAAM,UAAU,CAAC;AAE3B,2EAA2E;AAC3E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;AACpC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI;IAC3B,CAAC,SAAS,EAAE,CAAC,CAAC;IACd,CAAC,UAAU,EAAE,CAAC,CAAC;IACf,CAAC,YAAY,EAAE,EAAE,CAAC;IAClB,CAAC,WAAW,EAAE,CAAC,CAAC;IAChB,CAAC,aAAa,EAAE,EAAE,CAAC;IACnB,CAAC,YAAY,EAAE,EAAE,CAAC;IAClB,CAAC,WAAW,EAAE,EAAE,CAAC;IACjB,CAAC,aAAa,EAAE,EAAE,CAAC;IACnB,CAAC,YAAY,EAAE,EAAE,CAAC;IAClB,CAAC,WAAW,EAAE,CAAC,CAAC;IAChB,CAAC,WAAW,EAAE,CAAC,CAAC;CACR,EAAE,CAAC;IACX,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AACD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI;IAC3B,CAAC,IAAI,EAAE,GAAG,CAAC;IACX,CAAC,KAAK,EAAE,GAAG,CAAC;IACZ,CAAC,QAAQ,EAAE,CAAC,CAAC;IACb,CAAC,QAAQ,EAAE,EAAE,CAAC;IACd,CAAC,QAAQ,EAAE,CAAC,CAAC;CACL,EAAE,CAAC;IACX,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAU;IACzC,MAAM,MAAM,GAAG,gCAAgC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,IAAI,MAAM;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,IAAI,GAAG,gBAAgB,CAAC;IACjC,YAAY,IAAY,EAAE,EAAU;QAClC,KAAK,CAAC,GAAG,IAAI,+CAA+C,EAAE,2CAA2C,CAAC,CAAC;QAC3G,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC/F,CAAC;AAID;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,OAA0B,EAAE,QAAwB;IAClG,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE;QACjE,IAAI,GAAG;YAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACnE,IAAI,OAAO;YAAE,OAAO,QAAQ,CAAC,IAAI,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACpF,IAAI,OAAO,CAAC,GAAG;YAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK;YAAE,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,QAAQ,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/G,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/net/http.d.ts

@@ -0,0 +1,22 @@
+import type { HttpResponse, RequestOptions } from "../types.js";
+export interface HttpClientOptions {
+    timeoutMs: number;
+    maxRedirects: number;
+    maxBodyBytes: number;
+    userAgent: string;
+    /** Refuse to connect to loopback/private/reserved addresses (SSRF protection). */
+    blockPrivateNetworks: boolean;
+}
+export declare class HttpError extends Error {
+    readonly code: string | undefined;
+    readonly url: string;
+    constructor(message: string, code: string | undefined, url: string);
+}
+/**
+ * Minimal HTTP(S) client on node:http. We avoid fetch() because it refuses
+ * TRACE/TRACK and hides TLS details. Certificate errors are deliberately not
+ * fatal here: the certificate check reports them; other checks still need a
+ * response from misconfigured hosts.
+ */
+export declare function httpRequest(url: string, opts: RequestOptions, client: HttpClientOptions): Promise<HttpResponse>;
+//# sourceMappingURL=http.d.ts.map

package/dist/net/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/net/http.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGhE,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED,qBAAa,SAAU,SAAQ,KAAK;IAGhC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM;IAHtB,YACE,OAAO,EAAE,MAAM,EACN,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,GAAG,EAAE,MAAM,EAIrB;CACF;AAID;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAAC,YAAY,CAAC,CAqBvB"}