mcp-web-validator 1.3.4 → 1.3.6

package/CHANGELOG.md

@@ -4,6 +4,19 @@ All notable changes to this project are documented here. The project follows [Se
 
 ## [Unreleased]
 
+## [1.3.6] - 2026-09-21
+
+### Fixed
+
+- Pinned each public HTTP(S) fetch hop to the DNS addresses already validated as public, closing a DNS-rebinding/TOCTOU gap between URL validation and connection establishment while preserving hostname-based TLS/SNI and redirect revalidation.
+
+## [1.3.5] - 2026-09-20
+
+### Fixed
+
+- Rejected malformed Nu HTML Checker message objects instead of silently dropping them from local validation results.
+- Withheld the validation report SEO score when JSON-LD/schema analysis is unavailable, preventing partial reports from treating missing schema evidence as clean.
+
 ## [1.3.4] - 2026-09-20
 
 ### Fixed

package/dist/network.d.ts

@@ -22,10 +22,6 @@ export declare class PublicUrlError extends Error {
     readonly name = "PublicUrlError";
 }
 export declare function getErrorMessage(error: unknown): string;
-/**
- * Parses an HTTP(S) URL and rejects hostnames that resolve to local, private,
- * documentation, multicast, or otherwise non-public address space.
- */
 export declare function assertPublicHttpUrl(input: string | URL): Promise<URL>;
 export declare function cancelResponseBody(response: Response): Promise<void>;
 export declare function readResponseText(response: Response, maxBytes: number): Promise<string>;

package/dist/network.js

@@ -2,6 +2,7 @@ import { lookup } from "node:dns/promises";
 import * as fs from "node:fs/promises";
 import { BlockList, isIP } from "node:net";
 import * as path from "node:path";
+import { Agent } from "undici";
 const DEFAULT_TIMEOUT_MS = 10_000;
 const DEFAULT_MAX_REDIRECTS = 5;
 const DNS_TIMEOUT_MS = 5_000;
@@ -111,7 +112,7 @@ async function withTimeout(promise, timeoutMs, label) {
  * Parses an HTTP(S) URL and rejects hostnames that resolve to local, private,
  * documentation, multicast, or otherwise non-public address space.
  */
-export async function assertPublicHttpUrl(input) {
+async function resolvePublicHttpUrl(input) {
     const rawUrl = input instanceof URL ? input.href : input;
     if (typeof rawUrl !== "string" || rawUrl.length === 0 || rawUrl.length > MAX_URL_LENGTH) {
         throw new PublicUrlError(`URL must contain between 1 and ${MAX_URL_LENGTH} characters`);
@@ -157,7 +158,10 @@ export async function assertPublicHttpUrl(input) {
             throw new PublicUrlError(`URL hostname resolves to non-public address ${record.address}`);
         }
     }
-    return parsed;
+    return { url: parsed, addresses: resolvedAddresses };
+}
+export async function assertPublicHttpUrl(input) {
+    return (await resolvePublicHttpUrl(input)).url;
 }
 export async function cancelResponseBody(response) {
     if (!response.body) {
@@ -204,6 +208,34 @@ export async function readResponseText(response, maxBytes) {
         reader.releaseLock();
     }
 }
+function createPinnedDispatcher(resolvedAddresses) {
+    const addresses = resolvedAddresses.map((record) => ({ ...record }));
+    return new Agent({
+        // Every validated request gets its own non-reused connection so a later DNS
+        // answer cannot replace the address set approved for this hop.
+        pipelining: 0,
+        connect: {
+            lookup: (_hostname, options, callback) => {
+                const requestedFamily = options.family === 4 || options.family === 6 ? options.family : 0;
+                const candidates = requestedFamily
+                    ? addresses.filter((record) => record.family === requestedFamily)
+                    : addresses;
+                if (candidates.length === 0) {
+                    const error = new Error("No validated address is available for the requested IP family");
+                    error.code = "ENOTFOUND";
+                    callback(error, []);
+                    return;
+                }
+                if (options.all) {
+                    callback(null, candidates);
+                    return;
+                }
+                const selected = candidates[0];
+                callback(null, selected.address, selected.family);
+            },
+        },
+    });
+}
 /** Fetches a public HTTP(S) URL while validating every redirect target. */
 export async function fetchPublicHttp(input, options = {}) {
     const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
@@ -212,33 +244,43 @@ export async function fetchPublicHttp(input, options = {}) {
     if (!Number.isSafeInteger(maxRedirects) || maxRedirects < 0 || maxRedirects > 10) {
         throw new Error("maxRedirects must be an integer between 0 and 10");
     }
-    let currentUrl = await assertPublicHttpUrl(input);
+    let currentTarget = await resolvePublicHttpUrl(input);
     for (let redirectCount = 0;; redirectCount += 1) {
-        const response = await fetch(currentUrl, {
-            method: options.method ?? "GET",
-            headers: options.headers,
-            redirect: "manual",
-            signal: AbortSignal.timeout(timeoutMs),
-        });
+        const dispatcher = createPinnedDispatcher(currentTarget.addresses);
+        let response;
+        try {
+            response = await fetch(currentTarget.url, {
+                method: options.method ?? "GET",
+                headers: options.headers,
+                redirect: "manual",
+                signal: AbortSignal.timeout(timeoutMs),
+                dispatcher,
+            });
+        }
+        catch (error) {
+            await dispatcher.close();
+            throw error;
+        }
         if (!redirectStatuses.has(response.status)) {
-            return { response, url: currentUrl };
+            return { response, url: currentTarget.url };
         }
         const location = response.headers.get("location");
         if (!location) {
-            return { response, url: currentUrl };
+            return { response, url: currentTarget.url };
         }
         if (redirectCount >= maxRedirects) {
-            return { response, url: currentUrl };
+            return { response, url: currentTarget.url };
         }
         await cancelResponseBody(response);
+        await dispatcher.close();
         let redirectUrl;
         try {
-            redirectUrl = new URL(location, currentUrl);
+            redirectUrl = new URL(location, currentTarget.url);
         }
         catch {
             throw new PublicUrlError("Redirect target is not a valid URL");
         }
-        currentUrl = await assertPublicHttpUrl(redirectUrl);
+        currentTarget = await resolvePublicHttpUrl(redirectUrl);
     }
 }
 /** Fetches bounded text from a public URL and rejects non-success responses. */

package/dist/network.js.map

@@ -1 +1 @@
-{"version":3,"file":"network.js","sourceRoot":"","sources":["../src/network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,cAAc,GAAG,KAAK,CAAC;AAE7B,MAAM,gBAAgB,GAAG,IAAI,SAAS,EAAE,CAAC;AACzC,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI;IAC9B,CAAC,SAAS,EAAE,CAAC,CAAC;IACd,CAAC,UAAU,EAAE,CAAC,CAAC;IACf,CAAC,YAAY,EAAE,EAAE,CAAC;IAClB,CAAC,WAAW,EAAE,CAAC,CAAC;IAChB,CAAC,aAAa,EAAE,EAAE,CAAC;IACnB,CAAC,YAAY,EAAE,EAAE,CAAC;IAClB,CAAC,WAAW,EAAE,EAAE,CAAC;IACjB,CAAC,WAAW,EAAE,EAAE,CAAC;IACjB,CAAC,aAAa,EAAE,EAAE,CAAC;IACnB,CAAC,aAAa,EAAE,EAAE,CAAC;IACnB,CAAC,YAAY,EAAE,EAAE,CAAC;IAClB,CAAC,cAAc,EAAE,EAAE,CAAC;IACpB,CAAC,aAAa,EAAE,EAAE,CAAC;IACnB,CAAC,WAAW,EAAE,CAAC,CAAC;IAChB,CAAC,WAAW,EAAE,CAAC,CAAC;CACR,EAAE,CAAC;IACX,gBAAgB,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI;IAC9B,CAAC,IAAI,EAAE,EAAE,CAAC;IACV,CAAC,QAAQ,EAAE,CAAC,CAAC;IACb,CAAC,QAAQ,EAAE,EAAE,CAAC;IACd,CAAC,QAAQ,EAAE,CAAC,CAAC;IACb,CAAC,QAAQ,EAAE,EAAE,CAAC;IACd,CAAC,UAAU,EAAE,EAAE,CAAC;IAChB,CAAC,WAAW,EAAE,EAAE,CAAC;IACjB,CAAC,YAAY,EAAE,EAAE,CAAC;IAClB,CAAC,QAAQ,EAAE,EAAE,CAAC;CACN,EAAE,CAAC;IACX,gBAAgB,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,mBAAmB,GAAG,IAAI,SAAS,EAAE,CAAC;AAC5C,mBAAmB,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AAEnD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,WAAW;IACX,uBAAuB;IACvB,eAAe;IACf,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG;IAC9B,YAAY;IACZ,QAAQ;IACR,WAAW;IACX,YAAY;IACZ,OAAO;IACP,UAAU;IACV,UAAU;IACV,QAAQ;CACT,CAAC;AAEF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AA0B5D,MAAM,OAAO,cAAe,SAAQ,KAAK;IACrB,IAAI,GAAG,gBAAgB,CAAC;CAC3C;AAED,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACjE,OAAO,mBAAmB,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC;IACrC,CAAC;IAED,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC;AAC7E,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAE,KAAa;IACzD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,MAAM,eAAe,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QACxE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvB,CAAC,CAAC,QAAQ,CAAC;IACb,OAAO,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,MAAc;IACtD,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,OAAO,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;eAC5C,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,WAAW,CAAI,OAAmB,EAAE,SAAiB,EAAE,KAAa;IACjF,IAAI,OAAmC,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,OAAO;YACP,IAAI,OAAO,CAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC3B,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACjF,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,OAAO,EAAE,CAAC;YACZ,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAmB;IAC3D,MAAM,MAAM,GAAG,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IACzD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACxF,MAAM,IAAI,cAAc,CAAC,kCAAkC,cAAc,aAAa,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,2CAA2C,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,cAAc,CAAC,sCAAsC,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,cAAc,CAAC,6CAA6C,CAAC,CAAC;IAC1E,CAAC;IACD,6EAA6E;IAC7E,iFAAiF;IACjF,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,IAAI,cAAc,CAAC,+CAA+C,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IACjB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,cAAc,CAAC,0BAA0B,CAAC,CAAC;IACvD,CAAC;IACD,IACE,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC;WAC3B,uBAAuB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EACtE,CAAC;QACD,MAAM,IAAI,cAAc,CAAC,iBAAiB,QAAQ,iBAAiB,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,iBAAiB,GAAG,aAAa;QACrC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAChD,CAAC,CAAC,MAAM,WAAW,CACjB,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAC/C,cAAc,EACd,YAAY,CACb,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACzB,MAAM,IAAI,cAAc,CAAC,mCAAmC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;IAEL,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,cAAc,CAAC,4CAA4C,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACvC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,cAAc,CAAC,+CAA+C,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAkB;IACzD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,kFAAkF;IACpF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAkB,EAAE,QAAgB;IACzE,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAE5C,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,QAAQ,EAAE,CAAC;QACjE,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,aAAa,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,IAAI,GAAG,EAAE,CAAC;IAEd,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM;YACR,CAAC;YAED,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,UAAU,GAAG,QAAQ,EAAE,CAAC;gBAC1B,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,aAAa,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAmB,EACnB,OAAO,GAAuB,EAAE;IAEhC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,qBAAqB,CAAC;IACnE,qBAAqB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,IAAI,YAAY,GAAG,EAAE,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,UAAU,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAClD,KAAK,IAAI,aAAa,GAAG,CAAC,GAAI,aAAa,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;YACvC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;YAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;QAEH,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;QACvC,CAAC;QAED,IAAI,aAAa,IAAI,YAAY,EAAE,CAAC;YAClC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,WAAgB,CAAC;QACrB,IAAI,CAAC;YACH,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,cAAc,CAAC,oCAAoC,CAAC,CAAC;QACjE,CAAC;QACD,UAAU,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAmB,EACnB,OAAO,GAAsB,EAAE;IAE/B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC;IAC/C,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAE5C,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE;QACrD,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,iBAAiB,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC;IACtF,IACE,OAAO,CAAC,oBAAoB;WACzB,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,EAClG,CAAC;QACD,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,yCAAyC,WAAW,IAAI,SAAS,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,OAAO;QACL,IAAI,EAAE,MAAM,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAChD,GAAG,EAAE,GAAG,CAAC,IAAI;QACb,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,WAAW,EAAE,iBAAiB;KAC/B,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,QAAgB;IACnE,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,+BAA+B,YAAY,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,gBAAgB,YAAY,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACjD,IAAI,QAAQ,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,gBAAgB,YAAY,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC","sourcesContent":["import { lookup } from \"node:dns/promises\";\nimport * as fs from \"node:fs/promises\";\nimport { BlockList, isIP } from \"node:net\";\nimport * as path from \"node:path\";\n\nconst DEFAULT_TIMEOUT_MS = 10_000;\nconst DEFAULT_MAX_REDIRECTS = 5;\nconst DNS_TIMEOUT_MS = 5_000;\nconst MAX_URL_LENGTH = 8_192;\n\nconst blockedAddresses = new BlockList();\nfor (const [network, prefix] of [\n  [\"0.0.0.0\", 8],\n  [\"10.0.0.0\", 8],\n  [\"100.64.0.0\", 10],\n  [\"127.0.0.0\", 8],\n  [\"169.254.0.0\", 16],\n  [\"172.16.0.0\", 12],\n  [\"192.0.0.0\", 24],\n  [\"192.0.2.0\", 24],\n  [\"192.88.99.0\", 24],\n  [\"192.168.0.0\", 16],\n  [\"198.18.0.0\", 15],\n  [\"198.51.100.0\", 24],\n  [\"203.0.113.0\", 24],\n  [\"224.0.0.0\", 4],\n  [\"240.0.0.0\", 4],\n] as const) {\n  blockedAddresses.addSubnet(network, prefix, \"ipv4\");\n}\n\nfor (const [network, prefix] of [\n  [\"::\", 96],\n  [\"fc00::\", 7],\n  [\"fe80::\", 10],\n  [\"ff00::\", 8],\n  [\"2001::\", 32],\n  [\"2001:2::\", 48],\n  [\"2001:10::\", 28],\n  [\"2001:db8::\", 32],\n  [\"2002::\", 16],\n] as const) {\n  blockedAddresses.addSubnet(network, prefix, \"ipv6\");\n}\n\nconst publicIpv6Addresses = new BlockList();\npublicIpv6Addresses.addSubnet(\"2000::\", 3, \"ipv6\");\n\nconst blockedHostnames = new Set([\n  \"localhost\",\n  \"localhost.localdomain\",\n  \"ip6-localhost\",\n  \"ip6-loopback\",\n]);\n\nconst blockedHostnameSuffixes = [\n  \".localhost\",\n  \".local\",\n  \".internal\",\n  \".home.arpa\",\n  \".test\",\n  \".invalid\",\n  \".example\",\n  \".onion\",\n];\n\nconst redirectStatuses = new Set([301, 302, 303, 307, 308]);\n\nexport interface PublicFetchOptions {\n  method?: \"GET\" | \"HEAD\";\n  headers?: Record<string, string>;\n  timeoutMs?: number;\n  maxRedirects?: number;\n}\n\nexport interface PublicTextOptions extends PublicFetchOptions {\n  maxBytes?: number;\n  acceptedContentTypes?: readonly string[];\n}\n\nexport interface PublicTextResult {\n  text: string;\n  url: string;\n  status: number;\n  contentType: string | null;\n}\n\nexport interface PublicHttpResult {\n  response: Response;\n  url: URL;\n}\n\nexport class PublicUrlError extends Error {\n  override readonly name = \"PublicUrlError\";\n}\n\nexport function getErrorMessage(error: unknown): string {\n  if (error instanceof Error) {\n    if (error.name === \"TimeoutError\" || error.name === \"AbortError\") {\n      return \"Request timed out\";\n    }\n    return error.message || error.name;\n  }\n\n  return typeof error === \"string\" && error.trim() ? error : \"Unknown error\";\n}\n\nfunction assertPositiveInteger(value: number, label: string): void {\n  if (!Number.isSafeInteger(value) || value <= 0) {\n    throw new Error(`${label} must be a positive integer`);\n  }\n}\n\nfunction normalizeHostname(hostname: string): string {\n  const withoutBrackets = hostname.startsWith(\"[\") && hostname.endsWith(\"]\")\n    ? hostname.slice(1, -1)\n    : hostname;\n  return withoutBrackets.replace(/\\.$/, \"\").toLowerCase();\n}\n\nfunction isPublicAddress(address: string, family: number): boolean {\n  if (family === 4) {\n    return !blockedAddresses.check(address, \"ipv4\");\n  }\n\n  if (family === 6) {\n    return publicIpv6Addresses.check(address, \"ipv6\")\n      && !blockedAddresses.check(address, \"ipv6\");\n  }\n\n  return false;\n}\n\nasync function withTimeout<T>(promise: Promise<T>, timeoutMs: number, label: string): Promise<T> {\n  let timeout: NodeJS.Timeout | undefined;\n  try {\n    return await Promise.race([\n      promise,\n      new Promise<T>((_, reject) => {\n        timeout = setTimeout(() => reject(new Error(`${label} timed out`)), timeoutMs);\n      }),\n    ]);\n  } finally {\n    if (timeout) {\n      clearTimeout(timeout);\n    }\n  }\n}\n\n/**\n * Parses an HTTP(S) URL and rejects hostnames that resolve to local, private,\n * documentation, multicast, or otherwise non-public address space.\n */\nexport async function assertPublicHttpUrl(input: string | URL): Promise<URL> {\n  const rawUrl = input instanceof URL ? input.href : input;\n  if (typeof rawUrl !== \"string\" || rawUrl.length === 0 || rawUrl.length > MAX_URL_LENGTH) {\n    throw new PublicUrlError(`URL must contain between 1 and ${MAX_URL_LENGTH} characters`);\n  }\n\n  let parsed: URL;\n  try {\n    parsed = new URL(rawUrl);\n  } catch {\n    throw new PublicUrlError(\"URL must be an absolute HTTP or HTTPS URL\");\n  }\n\n  if (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") {\n    throw new PublicUrlError(\"Only HTTP and HTTPS URLs are allowed\");\n  }\n  if (parsed.username || parsed.password) {\n    throw new PublicUrlError(\"URLs containing credentials are not allowed\");\n  }\n  // URL normalizes matching defaults (HTTP :80 / HTTPS :443) to an empty port.\n  // Any remaining port is custom or mismatched to the scheme and must be rejected.\n  if (parsed.port) {\n    throw new PublicUrlError(\"Only default HTTP and HTTPS ports are allowed\");\n  }\n\n  parsed.hash = \"\";\n  const hostname = normalizeHostname(parsed.hostname);\n  if (!hostname) {\n    throw new PublicUrlError(\"URL hostname is required\");\n  }\n  if (\n    blockedHostnames.has(hostname)\n    || blockedHostnameSuffixes.some((suffix) => hostname.endsWith(suffix))\n  ) {\n    throw new PublicUrlError(`URL hostname \"${hostname}\" is not public`);\n  }\n\n  const literalFamily = isIP(hostname);\n  const resolvedAddresses = literalFamily\n    ? [{ address: hostname, family: literalFamily }]\n    : await withTimeout(\n      lookup(hostname, { all: true, verbatim: true }),\n      DNS_TIMEOUT_MS,\n      \"DNS lookup\",\n    ).catch((error: unknown) => {\n      throw new PublicUrlError(`Unable to resolve URL hostname: ${getErrorMessage(error)}`);\n    });\n\n  if (resolvedAddresses.length === 0) {\n    throw new PublicUrlError(\"URL hostname did not resolve to an address\");\n  }\n\n  for (const record of resolvedAddresses) {\n    if (!isPublicAddress(record.address, record.family)) {\n      throw new PublicUrlError(`URL hostname resolves to non-public address ${record.address}`);\n    }\n  }\n\n  return parsed;\n}\n\nexport async function cancelResponseBody(response: Response): Promise<void> {\n  if (!response.body) {\n    return;\n  }\n\n  try {\n    await response.body.cancel();\n  } catch {\n    // The stream may already be closed or consumed; there is nothing left to release.\n  }\n}\n\nexport async function readResponseText(response: Response, maxBytes: number): Promise<string> {\n  assertPositiveInteger(maxBytes, \"maxBytes\");\n\n  const declaredLength = Number(response.headers.get(\"content-length\"));\n  if (Number.isFinite(declaredLength) && declaredLength > maxBytes) {\n    await cancelResponseBody(response);\n    throw new Error(`Response exceeds the ${maxBytes}-byte limit`);\n  }\n\n  if (!response.body) {\n    return \"\";\n  }\n\n  const reader = response.body.getReader();\n  const decoder = new TextDecoder();\n  let totalBytes = 0;\n  let text = \"\";\n\n  try {\n    while (true) {\n      const { done, value } = await reader.read();\n      if (done) {\n        break;\n      }\n\n      totalBytes += value.byteLength;\n      if (totalBytes > maxBytes) {\n        await reader.cancel();\n        throw new Error(`Response exceeds the ${maxBytes}-byte limit`);\n      }\n      text += decoder.decode(value, { stream: true });\n    }\n    text += decoder.decode();\n    return text;\n  } finally {\n    reader.releaseLock();\n  }\n}\n\n/** Fetches a public HTTP(S) URL while validating every redirect target. */\nexport async function fetchPublicHttp(\n  input: string | URL,\n  options: PublicFetchOptions = {},\n): Promise<PublicHttpResult> {\n  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n  const maxRedirects = options.maxRedirects ?? DEFAULT_MAX_REDIRECTS;\n  assertPositiveInteger(timeoutMs, \"timeoutMs\");\n  if (!Number.isSafeInteger(maxRedirects) || maxRedirects < 0 || maxRedirects > 10) {\n    throw new Error(\"maxRedirects must be an integer between 0 and 10\");\n  }\n\n  let currentUrl = await assertPublicHttpUrl(input);\n  for (let redirectCount = 0; ; redirectCount += 1) {\n    const response = await fetch(currentUrl, {\n      method: options.method ?? \"GET\",\n      headers: options.headers,\n      redirect: \"manual\",\n      signal: AbortSignal.timeout(timeoutMs),\n    });\n\n    if (!redirectStatuses.has(response.status)) {\n      return { response, url: currentUrl };\n    }\n\n    const location = response.headers.get(\"location\");\n    if (!location) {\n      return { response, url: currentUrl };\n    }\n\n    if (redirectCount >= maxRedirects) {\n      return { response, url: currentUrl };\n    }\n\n    await cancelResponseBody(response);\n    let redirectUrl: URL;\n    try {\n      redirectUrl = new URL(location, currentUrl);\n    } catch {\n      throw new PublicUrlError(\"Redirect target is not a valid URL\");\n    }\n    currentUrl = await assertPublicHttpUrl(redirectUrl);\n  }\n}\n\n/** Fetches bounded text from a public URL and rejects non-success responses. */\nexport async function fetchPublicText(\n  input: string | URL,\n  options: PublicTextOptions = {},\n): Promise<PublicTextResult> {\n  const maxBytes = options.maxBytes ?? 2_000_000;\n  assertPositiveInteger(maxBytes, \"maxBytes\");\n\n  const { response, url } = await fetchPublicHttp(input, {\n    method: \"GET\",\n    headers: options.headers,\n    timeoutMs: options.timeoutMs,\n    maxRedirects: options.maxRedirects,\n  });\n\n  if (!response.ok) {\n    const status = response.status;\n    await cancelResponseBody(response);\n    throw new Error(`URL returned HTTP status ${status}`);\n  }\n\n  const contentTypeHeader = response.headers.get(\"content-type\");\n  const contentType = contentTypeHeader?.split(\";\", 1)[0]?.trim().toLowerCase() || null;\n  if (\n    options.acceptedContentTypes\n    && !options.acceptedContentTypes.some((accepted) => accepted.trim().toLowerCase() === contentType)\n  ) {\n    await cancelResponseBody(response);\n    throw new Error(`URL returned unsupported content type ${contentType ?? \"missing\"}`);\n  }\n\n  return {\n    text: await readResponseText(response, maxBytes),\n    url: url.href,\n    status: response.status,\n    contentType: contentTypeHeader,\n  };\n}\n\n/** Reads a UTF-8 file only when it is a regular file within the requested cap. */\nexport async function readTextFile(filePath: string, maxBytes: number): Promise<string> {\n  assertPositiveInteger(maxBytes, \"maxBytes\");\n  const resolvedPath = path.resolve(filePath);\n  const stats = await fs.stat(resolvedPath);\n  if (!stats.isFile()) {\n    throw new Error(`Path is not a regular file: ${resolvedPath}`);\n  }\n  if (stats.size > maxBytes) {\n    throw new Error(`File exceeds the ${maxBytes}-byte limit: ${resolvedPath}`);\n  }\n\n  const contents = await fs.readFile(resolvedPath);\n  if (contents.byteLength > maxBytes) {\n    throw new Error(`File exceeds the ${maxBytes}-byte limit: ${resolvedPath}`);\n  }\n  return contents.toString(\"utf8\");\n}\n"]}
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../src/network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAE/B,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,cAAc,GAAG,KAAK,CAAC;AAE7B,MAAM,gBAAgB,GAAG,IAAI,SAAS,EAAE,CAAC;AACzC,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI;IAC9B,CAAC,SAAS,EAAE,CAAC,CAAC;IACd,CAAC,UAAU,EAAE,CAAC,CAAC;IACf,CAAC,YAAY,EAAE,EAAE,CAAC;IAClB,CAAC,WAAW,EAAE,CAAC,CAAC;IAChB,CAAC,aAAa,EAAE,EAAE,CAAC;IACnB,CAAC,YAAY,EAAE,EAAE,CAAC;IAClB,CAAC,WAAW,EAAE,EAAE,CAAC;IACjB,CAAC,WAAW,EAAE,EAAE,CAAC;IACjB,CAAC,aAAa,EAAE,EAAE,CAAC;IACnB,CAAC,aAAa,EAAE,EAAE,CAAC;IACnB,CAAC,YAAY,EAAE,EAAE,CAAC;IAClB,CAAC,cAAc,EAAE,EAAE,CAAC;IACpB,CAAC,aAAa,EAAE,EAAE,CAAC;IACnB,CAAC,WAAW,EAAE,CAAC,CAAC;IAChB,CAAC,WAAW,EAAE,CAAC,CAAC;CACR,EAAE,CAAC;IACX,gBAAgB,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI;IAC9B,CAAC,IAAI,EAAE,EAAE,CAAC;IACV,CAAC,QAAQ,EAAE,CAAC,CAAC;IACb,CAAC,QAAQ,EAAE,EAAE,CAAC;IACd,CAAC,QAAQ,EAAE,CAAC,CAAC;IACb,CAAC,QAAQ,EAAE,EAAE,CAAC;IACd,CAAC,UAAU,EAAE,EAAE,CAAC;IAChB,CAAC,WAAW,EAAE,EAAE,CAAC;IACjB,CAAC,YAAY,EAAE,EAAE,CAAC;IAClB,CAAC,QAAQ,EAAE,EAAE,CAAC;CACN,EAAE,CAAC;IACX,gBAAgB,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,mBAAmB,GAAG,IAAI,SAAS,EAAE,CAAC;AAC5C,mBAAmB,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AAEnD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,WAAW;IACX,uBAAuB;IACvB,eAAe;IACf,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG;IAC9B,YAAY;IACZ,QAAQ;IACR,WAAW;IACX,YAAY;IACZ,OAAO;IACP,UAAU;IACV,UAAU;IACV,QAAQ;CACT,CAAC;AAEF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AA+B5D,MAAM,OAAO,cAAe,SAAQ,KAAK;IACrB,IAAI,GAAG,gBAAgB,CAAC;CAC3C;AAED,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACjE,OAAO,mBAAmB,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC;IACrC,CAAC;IAED,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC;AAC7E,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAE,KAAa;IACzD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,MAAM,eAAe,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QACxE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvB,CAAC,CAAC,QAAQ,CAAC;IACb,OAAO,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,MAAc;IACtD,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,OAAO,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;eAC5C,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,WAAW,CAAI,OAAmB,EAAE,SAAiB,EAAE,KAAa;IACjF,IAAI,OAAmC,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,OAAO;YACP,IAAI,OAAO,CAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC3B,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACjF,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,OAAO,EAAE,CAAC;YACZ,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,oBAAoB,CAAC,KAAmB;IACrD,MAAM,MAAM,GAAG,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IACzD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACxF,MAAM,IAAI,cAAc,CAAC,kCAAkC,cAAc,aAAa,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,2CAA2C,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,cAAc,CAAC,sCAAsC,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,cAAc,CAAC,6CAA6C,CAAC,CAAC;IAC1E,CAAC;IACD,6EAA6E;IAC7E,iFAAiF;IACjF,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,IAAI,cAAc,CAAC,+CAA+C,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IACjB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,cAAc,CAAC,0BAA0B,CAAC,CAAC;IACvD,CAAC;IACD,IACE,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC;WAC3B,uBAAuB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EACtE,CAAC;QACD,MAAM,IAAI,cAAc,CAAC,iBAAiB,QAAQ,iBAAiB,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,iBAAiB,GAAG,aAAa;QACrC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAChD,CAAC,CAAC,MAAM,WAAW,CACjB,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAC/C,cAAc,EACd,YAAY,CACb,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACzB,MAAM,IAAI,cAAc,CAAC,mCAAmC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;IAEL,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,cAAc,CAAC,4CAA4C,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACvC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,cAAc,CAAC,+CAA+C,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAmB;IAC3D,OAAO,CAAC,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;AACjD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAkB;IACzD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,kFAAkF;IACpF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAkB,EAAE,QAAgB;IACzE,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAE5C,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,QAAQ,EAAE,CAAC;QACjE,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,aAAa,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,IAAI,GAAG,EAAE,CAAC;IAEd,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM;YACR,CAAC;YAED,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,UAAU,GAAG,QAAQ,EAAE,CAAC;gBAC1B,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,aAAa,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,iBAAqE;IAErE,MAAM,SAAS,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;IAErE,OAAO,IAAI,KAAK,CAAC;QACf,4EAA4E;QAC5E,+DAA+D;QAC/D,UAAU,EAAE,CAAC;QACb,OAAO,EAAE;YACP,MAAM,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;gBACvC,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1F,MAAM,UAAU,GAAG,eAAe;oBAChC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,eAAe,CAAC;oBACjE,CAAC,CAAC,SAAS,CAAC;gBAEd,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC5B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,+DAA+D,CAA0B,CAAC;oBAClH,KAAK,CAAC,IAAI,GAAG,WAAW,CAAC;oBACzB,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBACpB,OAAO;gBACT,CAAC;gBAED,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;oBAChB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;oBAC3B,OAAO;gBACT,CAAC;gBAED,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;gBAC/B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpD,CAAC;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAmB,EACnB,OAAO,GAAuB,EAAE;IAEhC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,qBAAqB,CAAC;IACnE,qBAAqB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,IAAI,YAAY,GAAG,EAAE,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,aAAa,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACtD,KAAK,IAAI,aAAa,GAAG,CAAC,GAAI,aAAa,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,sBAAsB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE;gBACxC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;gBAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;gBACtC,UAAU;aAC4B,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,aAAa,CAAC,GAAG,EAAE,CAAC;QAC9C,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,aAAa,CAAC,GAAG,EAAE,CAAC;QAC9C,CAAC;QAED,IAAI,aAAa,IAAI,YAAY,EAAE,CAAC;YAClC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,aAAa,CAAC,GAAG,EAAE,CAAC;QAC9C,CAAC;QAED,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,WAAgB,CAAC;QACrB,IAAI,CAAC;YACH,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,cAAc,CAAC,oCAAoC,CAAC,CAAC;QACjE,CAAC;QACD,aAAa,GAAG,MAAM,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAmB,EACnB,OAAO,GAAsB,EAAE;IAE/B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC;IAC/C,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAE5C,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE;QACrD,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,iBAAiB,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC;IACtF,IACE,OAAO,CAAC,oBAAoB;WACzB,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,EAClG,CAAC;QACD,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,yCAAyC,WAAW,IAAI,SAAS,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,OAAO;QACL,IAAI,EAAE,MAAM,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAChD,GAAG,EAAE,GAAG,CAAC,IAAI;QACb,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,WAAW,EAAE,iBAAiB;KAC/B,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,QAAgB;IACnE,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,+BAA+B,YAAY,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,gBAAgB,YAAY,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACjD,IAAI,QAAQ,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,gBAAgB,YAAY,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC","sourcesContent":["import { lookup } from \"node:dns/promises\";\nimport * as fs from \"node:fs/promises\";\nimport { BlockList, isIP } from \"node:net\";\nimport * as path from \"node:path\";\nimport { Agent } from \"undici\";\n\nconst DEFAULT_TIMEOUT_MS = 10_000;\nconst DEFAULT_MAX_REDIRECTS = 5;\nconst DNS_TIMEOUT_MS = 5_000;\nconst MAX_URL_LENGTH = 8_192;\n\nconst blockedAddresses = new BlockList();\nfor (const [network, prefix] of [\n  [\"0.0.0.0\", 8],\n  [\"10.0.0.0\", 8],\n  [\"100.64.0.0\", 10],\n  [\"127.0.0.0\", 8],\n  [\"169.254.0.0\", 16],\n  [\"172.16.0.0\", 12],\n  [\"192.0.0.0\", 24],\n  [\"192.0.2.0\", 24],\n  [\"192.88.99.0\", 24],\n  [\"192.168.0.0\", 16],\n  [\"198.18.0.0\", 15],\n  [\"198.51.100.0\", 24],\n  [\"203.0.113.0\", 24],\n  [\"224.0.0.0\", 4],\n  [\"240.0.0.0\", 4],\n] as const) {\n  blockedAddresses.addSubnet(network, prefix, \"ipv4\");\n}\n\nfor (const [network, prefix] of [\n  [\"::\", 96],\n  [\"fc00::\", 7],\n  [\"fe80::\", 10],\n  [\"ff00::\", 8],\n  [\"2001::\", 32],\n  [\"2001:2::\", 48],\n  [\"2001:10::\", 28],\n  [\"2001:db8::\", 32],\n  [\"2002::\", 16],\n] as const) {\n  blockedAddresses.addSubnet(network, prefix, \"ipv6\");\n}\n\nconst publicIpv6Addresses = new BlockList();\npublicIpv6Addresses.addSubnet(\"2000::\", 3, \"ipv6\");\n\nconst blockedHostnames = new Set([\n  \"localhost\",\n  \"localhost.localdomain\",\n  \"ip6-localhost\",\n  \"ip6-loopback\",\n]);\n\nconst blockedHostnameSuffixes = [\n  \".localhost\",\n  \".local\",\n  \".internal\",\n  \".home.arpa\",\n  \".test\",\n  \".invalid\",\n  \".example\",\n  \".onion\",\n];\n\nconst redirectStatuses = new Set([301, 302, 303, 307, 308]);\n\nexport interface PublicFetchOptions {\n  method?: \"GET\" | \"HEAD\";\n  headers?: Record<string, string>;\n  timeoutMs?: number;\n  maxRedirects?: number;\n}\n\nexport interface PublicTextOptions extends PublicFetchOptions {\n  maxBytes?: number;\n  acceptedContentTypes?: readonly string[];\n}\n\nexport interface PublicTextResult {\n  text: string;\n  url: string;\n  status: number;\n  contentType: string | null;\n}\n\nexport interface PublicHttpResult {\n  response: Response;\n  url: URL;\n}\n\ninterface ResolvedPublicHttpUrl {\n  url: URL;\n  addresses: Array<{ address: string; family: number }>;\n}\n\nexport class PublicUrlError extends Error {\n  override readonly name = \"PublicUrlError\";\n}\n\nexport function getErrorMessage(error: unknown): string {\n  if (error instanceof Error) {\n    if (error.name === \"TimeoutError\" || error.name === \"AbortError\") {\n      return \"Request timed out\";\n    }\n    return error.message || error.name;\n  }\n\n  return typeof error === \"string\" && error.trim() ? error : \"Unknown error\";\n}\n\nfunction assertPositiveInteger(value: number, label: string): void {\n  if (!Number.isSafeInteger(value) || value <= 0) {\n    throw new Error(`${label} must be a positive integer`);\n  }\n}\n\nfunction normalizeHostname(hostname: string): string {\n  const withoutBrackets = hostname.startsWith(\"[\") && hostname.endsWith(\"]\")\n    ? hostname.slice(1, -1)\n    : hostname;\n  return withoutBrackets.replace(/\\.$/, \"\").toLowerCase();\n}\n\nfunction isPublicAddress(address: string, family: number): boolean {\n  if (family === 4) {\n    return !blockedAddresses.check(address, \"ipv4\");\n  }\n\n  if (family === 6) {\n    return publicIpv6Addresses.check(address, \"ipv6\")\n      && !blockedAddresses.check(address, \"ipv6\");\n  }\n\n  return false;\n}\n\nasync function withTimeout<T>(promise: Promise<T>, timeoutMs: number, label: string): Promise<T> {\n  let timeout: NodeJS.Timeout | undefined;\n  try {\n    return await Promise.race([\n      promise,\n      new Promise<T>((_, reject) => {\n        timeout = setTimeout(() => reject(new Error(`${label} timed out`)), timeoutMs);\n      }),\n    ]);\n  } finally {\n    if (timeout) {\n      clearTimeout(timeout);\n    }\n  }\n}\n\n/**\n * Parses an HTTP(S) URL and rejects hostnames that resolve to local, private,\n * documentation, multicast, or otherwise non-public address space.\n */\nasync function resolvePublicHttpUrl(input: string | URL): Promise<ResolvedPublicHttpUrl> {\n  const rawUrl = input instanceof URL ? input.href : input;\n  if (typeof rawUrl !== \"string\" || rawUrl.length === 0 || rawUrl.length > MAX_URL_LENGTH) {\n    throw new PublicUrlError(`URL must contain between 1 and ${MAX_URL_LENGTH} characters`);\n  }\n\n  let parsed: URL;\n  try {\n    parsed = new URL(rawUrl);\n  } catch {\n    throw new PublicUrlError(\"URL must be an absolute HTTP or HTTPS URL\");\n  }\n\n  if (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") {\n    throw new PublicUrlError(\"Only HTTP and HTTPS URLs are allowed\");\n  }\n  if (parsed.username || parsed.password) {\n    throw new PublicUrlError(\"URLs containing credentials are not allowed\");\n  }\n  // URL normalizes matching defaults (HTTP :80 / HTTPS :443) to an empty port.\n  // Any remaining port is custom or mismatched to the scheme and must be rejected.\n  if (parsed.port) {\n    throw new PublicUrlError(\"Only default HTTP and HTTPS ports are allowed\");\n  }\n\n  parsed.hash = \"\";\n  const hostname = normalizeHostname(parsed.hostname);\n  if (!hostname) {\n    throw new PublicUrlError(\"URL hostname is required\");\n  }\n  if (\n    blockedHostnames.has(hostname)\n    || blockedHostnameSuffixes.some((suffix) => hostname.endsWith(suffix))\n  ) {\n    throw new PublicUrlError(`URL hostname \"${hostname}\" is not public`);\n  }\n\n  const literalFamily = isIP(hostname);\n  const resolvedAddresses = literalFamily\n    ? [{ address: hostname, family: literalFamily }]\n    : await withTimeout(\n      lookup(hostname, { all: true, verbatim: true }),\n      DNS_TIMEOUT_MS,\n      \"DNS lookup\",\n    ).catch((error: unknown) => {\n      throw new PublicUrlError(`Unable to resolve URL hostname: ${getErrorMessage(error)}`);\n    });\n\n  if (resolvedAddresses.length === 0) {\n    throw new PublicUrlError(\"URL hostname did not resolve to an address\");\n  }\n\n  for (const record of resolvedAddresses) {\n    if (!isPublicAddress(record.address, record.family)) {\n      throw new PublicUrlError(`URL hostname resolves to non-public address ${record.address}`);\n    }\n  }\n\n  return { url: parsed, addresses: resolvedAddresses };\n}\n\nexport async function assertPublicHttpUrl(input: string | URL): Promise<URL> {\n  return (await resolvePublicHttpUrl(input)).url;\n}\n\nexport async function cancelResponseBody(response: Response): Promise<void> {\n  if (!response.body) {\n    return;\n  }\n\n  try {\n    await response.body.cancel();\n  } catch {\n    // The stream may already be closed or consumed; there is nothing left to release.\n  }\n}\n\nexport async function readResponseText(response: Response, maxBytes: number): Promise<string> {\n  assertPositiveInteger(maxBytes, \"maxBytes\");\n\n  const declaredLength = Number(response.headers.get(\"content-length\"));\n  if (Number.isFinite(declaredLength) && declaredLength > maxBytes) {\n    await cancelResponseBody(response);\n    throw new Error(`Response exceeds the ${maxBytes}-byte limit`);\n  }\n\n  if (!response.body) {\n    return \"\";\n  }\n\n  const reader = response.body.getReader();\n  const decoder = new TextDecoder();\n  let totalBytes = 0;\n  let text = \"\";\n\n  try {\n    while (true) {\n      const { done, value } = await reader.read();\n      if (done) {\n        break;\n      }\n\n      totalBytes += value.byteLength;\n      if (totalBytes > maxBytes) {\n        await reader.cancel();\n        throw new Error(`Response exceeds the ${maxBytes}-byte limit`);\n      }\n      text += decoder.decode(value, { stream: true });\n    }\n    text += decoder.decode();\n    return text;\n  } finally {\n    reader.releaseLock();\n  }\n}\n\nfunction createPinnedDispatcher(\n  resolvedAddresses: ReadonlyArray<{ address: string; family: number }>,\n): Agent {\n  const addresses = resolvedAddresses.map((record) => ({ ...record }));\n\n  return new Agent({\n    // Every validated request gets its own non-reused connection so a later DNS\n    // answer cannot replace the address set approved for this hop.\n    pipelining: 0,\n    connect: {\n      lookup: (_hostname, options, callback) => {\n        const requestedFamily = options.family === 4 || options.family === 6 ? options.family : 0;\n        const candidates = requestedFamily\n          ? addresses.filter((record) => record.family === requestedFamily)\n          : addresses;\n\n        if (candidates.length === 0) {\n          const error = new Error(\"No validated address is available for the requested IP family\") as NodeJS.ErrnoException;\n          error.code = \"ENOTFOUND\";\n          callback(error, []);\n          return;\n        }\n\n        if (options.all) {\n          callback(null, candidates);\n          return;\n        }\n\n        const selected = candidates[0];\n        callback(null, selected.address, selected.family);\n      },\n    },\n  });\n}\n\n/** Fetches a public HTTP(S) URL while validating every redirect target. */\nexport async function fetchPublicHttp(\n  input: string | URL,\n  options: PublicFetchOptions = {},\n): Promise<PublicHttpResult> {\n  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n  const maxRedirects = options.maxRedirects ?? DEFAULT_MAX_REDIRECTS;\n  assertPositiveInteger(timeoutMs, \"timeoutMs\");\n  if (!Number.isSafeInteger(maxRedirects) || maxRedirects < 0 || maxRedirects > 10) {\n    throw new Error(\"maxRedirects must be an integer between 0 and 10\");\n  }\n\n  let currentTarget = await resolvePublicHttpUrl(input);\n  for (let redirectCount = 0; ; redirectCount += 1) {\n    const dispatcher = createPinnedDispatcher(currentTarget.addresses);\n    let response: Response;\n    try {\n      response = await fetch(currentTarget.url, {\n        method: options.method ?? \"GET\",\n        headers: options.headers,\n        redirect: \"manual\",\n        signal: AbortSignal.timeout(timeoutMs),\n        dispatcher,\n      } as RequestInit & { dispatcher: Agent });\n    } catch (error) {\n      await dispatcher.close();\n      throw error;\n    }\n\n    if (!redirectStatuses.has(response.status)) {\n      return { response, url: currentTarget.url };\n    }\n\n    const location = response.headers.get(\"location\");\n    if (!location) {\n      return { response, url: currentTarget.url };\n    }\n\n    if (redirectCount >= maxRedirects) {\n      return { response, url: currentTarget.url };\n    }\n\n    await cancelResponseBody(response);\n    await dispatcher.close();\n    let redirectUrl: URL;\n    try {\n      redirectUrl = new URL(location, currentTarget.url);\n    } catch {\n      throw new PublicUrlError(\"Redirect target is not a valid URL\");\n    }\n    currentTarget = await resolvePublicHttpUrl(redirectUrl);\n  }\n}\n\n/** Fetches bounded text from a public URL and rejects non-success responses. */\nexport async function fetchPublicText(\n  input: string | URL,\n  options: PublicTextOptions = {},\n): Promise<PublicTextResult> {\n  const maxBytes = options.maxBytes ?? 2_000_000;\n  assertPositiveInteger(maxBytes, \"maxBytes\");\n\n  const { response, url } = await fetchPublicHttp(input, {\n    method: \"GET\",\n    headers: options.headers,\n    timeoutMs: options.timeoutMs,\n    maxRedirects: options.maxRedirects,\n  });\n\n  if (!response.ok) {\n    const status = response.status;\n    await cancelResponseBody(response);\n    throw new Error(`URL returned HTTP status ${status}`);\n  }\n\n  const contentTypeHeader = response.headers.get(\"content-type\");\n  const contentType = contentTypeHeader?.split(\";\", 1)[0]?.trim().toLowerCase() || null;\n  if (\n    options.acceptedContentTypes\n    && !options.acceptedContentTypes.some((accepted) => accepted.trim().toLowerCase() === contentType)\n  ) {\n    await cancelResponseBody(response);\n    throw new Error(`URL returned unsupported content type ${contentType ?? \"missing\"}`);\n  }\n\n  return {\n    text: await readResponseText(response, maxBytes),\n    url: url.href,\n    status: response.status,\n    contentType: contentTypeHeader,\n  };\n}\n\n/** Reads a UTF-8 file only when it is a regular file within the requested cap. */\nexport async function readTextFile(filePath: string, maxBytes: number): Promise<string> {\n  assertPositiveInteger(maxBytes, \"maxBytes\");\n  const resolvedPath = path.resolve(filePath);\n  const stats = await fs.stat(resolvedPath);\n  if (!stats.isFile()) {\n    throw new Error(`Path is not a regular file: ${resolvedPath}`);\n  }\n  if (stats.size > maxBytes) {\n    throw new Error(`File exceeds the ${maxBytes}-byte limit: ${resolvedPath}`);\n  }\n\n  const contents = await fs.readFile(resolvedPath);\n  if (contents.byteLength > maxBytes) {\n    throw new Error(`File exceeds the ${maxBytes}-byte limit: ${resolvedPath}`);\n  }\n  return contents.toString(\"utf8\");\n}\n"]}

package/dist/report.js

@@ -40,7 +40,9 @@ export function createValidationReport(input) {
     const cssScore = checkFailed("css") || !input.cssAudited || cssCompatibilityLimitations > 0
         ? null
         : clampScore(100 - cssErrors * 20);
-    const seoScore = checkFailed("seo") ? null : clampScore(100 - seoErrors * 15 - seoWarnings * 4 - schemaErrors * 15);
+    const seoScore = checkFailed("seo") || checkFailed("schema")
+        ? null
+        : clampScore(100 - seoErrors * 15 - seoWarnings * 4 - schemaErrors * 15);
     const linkScore = checkFailed("links") || input.links.length === 0
         ? null
         : clampScore(100 - brokenLinks * 25);

package/dist/report.js.map

@@ -1 +1 @@
-{"version":3,"file":"report.js","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAIlC,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;AA4ClG,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,cAAc,CAAC,KAAoB;IAC1C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,aAAa,CAAC;IACzC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;SACvB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB;IAClC,OAAO,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;AACpF,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,sBAAsB,CAAC,KAA4B;IACjE,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAG,CAAC,KAA4B,EAAW,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5F,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IAC3F,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,UAAU,CAAC;IAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;IAC3C,MAAM,2BAA2B,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAC1D,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,KAAK,4BAA4B,CACpE,CAAC,MAAM,CAAC;IACT,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IACvF,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAC3F,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IAC7F,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;IAClE,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;IAE5D,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,UAAU,GAAG,EAAE,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC;IACpG,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,2BAA2B,GAAG,CAAC;QACzF,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,SAAS,GAAG,EAAE,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,SAAS,GAAG,EAAE,GAAG,WAAW,GAAG,CAAC,GAAG,YAAY,GAAG,EAAE,CAAC,CAAC;IACpH,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAChE,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,WAAW,GAAG,EAAE,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,MAAM,CACrE,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,IAAI,CAC3C,CAAC;IACF,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,2BAA2B,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAC3G,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAEhG,MAAM,OAAO,GAA4B;QACvC,YAAY;QACZ,SAAS;QACT,QAAQ;QACR,QAAQ;QACR,SAAS;QACT,UAAU;QACV,YAAY;QACZ,SAAS;QACT,2BAA2B;QAC3B,SAAS;QACT,WAAW;QACX,YAAY;QACZ,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;QAChC,WAAW;KACZ,CAAC;IAEF,MAAM,MAAM,GAAa;QACvB,yCAAyC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,YAAY,CAAC,MAAM,YAAY,QAAQ,EAAE;QACxI,qBAAqB,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK;QACzE,EAAE;QACF,uBAAuB;QACvB,EAAE;QACF,4BAA4B;QAC5B,0BAA0B;QAC1B,2BAA2B,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,MAAM,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,UAAU,IAAI;QACxJ,sBAAsB,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,2BAA2B,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,UAAU,IAAI;QAClP,6BAA6B,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,UAAU,IAAI;QACtJ,sBAAsB,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,MAAM,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,UAAU,IAAI;QACjM,EAAE;QACF,YAAY;QACZ,EAAE;QACF,WAAW,UAAU,cAAc,YAAY,sBAAsB;QACrE,UAAU,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,SAAS,YAAY,2BAA2B,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,2BAA2B,gCAAgC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE;QAChL,4BAA4B,SAAS,cAAc,WAAW,aAAa;QAC3E,qBAAqB,YAAY,WAAW;QAC5C,YAAY,WAAW,2BAA2B,aAAa,YAAY,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,iBAAiB,KAAK,CAAC,KAAK,CAAC,MAAM,UAAU;QACtJ,EAAE;QACF,wBAAwB,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG;KACrD,CAAC;IAEF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,8BAA8B,EAAE,yCAAyC,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,+BAA+B,CAAC,CAAC;IACjK,CAAC;IAED,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,kDAAkD,EAAE,wCAAwC,CAAC,CAAC;QAC9G,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CACT,KAAK,OAAO,CAAC,QAAQ,IAAI,KAAK,MAAM,OAAO,CAAC,UAAU,IAAI,KAAK,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CACnL,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,uBAAuB,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;QACpE,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,8BAA8B,EAAE,yBAAyB,CAAC,CAAC;YAC3E,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,CACT,KAAK,OAAO,CAAC,IAAI,MAAM,YAAY,CAAC,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CACrG,CAAC;YACJ,CAAC;YACD,IAAI,2BAA2B,GAAG,CAAC,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,CACT,EAAE,EACF,GAAG,2BAA2B,+QAA+Q,CAC9S,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;IACnE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,gDAAgD,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1F,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IAClF,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,6CAA6C,EAAE,+BAA+B,CAAC,CAAC;QAChG,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CACT,KAAK,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CACnJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,mBAAmB,KAAK,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,wCAAwC,EAAE,iCAAiC,CAAC,CAAC;QAC7F,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CACT,KAAK,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC,IAAI,CAC3I,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACzB,OAAO;QACP,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY;QACZ,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7E,CAAC;AACJ,CAAC","sourcesContent":["import * as path from \"node:path\";\nimport type { CSSMessage, W3CMessage } from \"./w3c-validator.js\";\nimport type { LinkStatus, SEOIssue } from \"./seo-auditor.js\";\n\nexport const validationReportChecks = [\"input\", \"html\", \"css\", \"seo\", \"schema\", \"links\"] as const;\nexport type ValidationReportCheck = (typeof validationReportChecks)[number];\n\nexport interface ValidationReportSummary {\n  overallScore: number | null;\n  htmlScore: number | null;\n  cssScore: number | null;\n  seoScore: number | null;\n  linkScore: number | null;\n  htmlErrors: number;\n  htmlWarnings: number;\n  cssErrors: number;\n  cssCompatibilityLimitations: number;\n  seoErrors: number;\n  seoWarnings: number;\n  schemaErrors: number;\n  linksChecked: number;\n  brokenLinks: number;\n}\n\nexport interface ValidationReport {\n  report: string;\n  summary: ValidationReportSummary;\n  htmlMessages: W3CMessage[];\n  cssMessages: CSSMessage[];\n  seoIssues: SEOIssue[];\n  schemaIssues: SEOIssue[];\n  links: LinkStatus[];\n  failedChecks: ValidationReportCheck[];\n  errors?: string[];\n}\n\nexport interface ValidationReportInput {\n  htmlFilePath: string;\n  cssAudited: boolean;\n  htmlMessages: W3CMessage[];\n  cssMessages: CSSMessage[];\n  seoIssues: SEOIssue[];\n  schemaIssues: SEOIssue[];\n  links: LinkStatus[];\n  failedChecks?: ValidationReportCheck[];\n  errors?: string[];\n}\n\nfunction clampScore(score: number): number {\n  return Math.max(0, Math.min(100, score));\n}\n\nfunction scoreIndicator(score: number | null): string {\n  if (score === null) return \"Unavailable\";\n  if (score >= 90) return \"🟢\";\n  if (score >= 50) return \"🟠\";\n  return \"🔴\";\n}\n\nfunction markdownCell(value: unknown): string {\n  return String(value ?? \"\")\n    .replace(/\\\\/g, \"\\\\\\\\\")\n    .replace(/\\|/g, \"\\\\|\")\n    .replace(/`/g, \"\\\\`\")\n    .replace(/[\\r\\n]+/g, \" \")\n    .trim();\n}\n\nfunction isRedirect(link: LinkStatus): boolean {\n  return typeof link.status === \"number\" && link.status >= 300 && link.status < 400;\n}\n\n/** Builds the human-readable report and its machine-readable equivalent. */\nexport function createValidationReport(input: ValidationReportInput): ValidationReport {\n  const failedChecks = input.failedChecks ?? [];\n  const checkFailed = (check: ValidationReportCheck): boolean => failedChecks.includes(check);\n  const htmlErrors = input.htmlMessages.filter((message) => message.type === \"error\").length;\n  const htmlWarnings = input.htmlMessages.length - htmlErrors;\n  const cssErrors = input.cssMessages.length;\n  const cssCompatibilityLimitations = input.cssMessages.filter(\n    (message) => message.compatibility === \"known-validator-limitation\",\n  ).length;\n  const seoErrors = input.seoIssues.filter((issue) => issue.severity === \"error\").length;\n  const seoWarnings = input.seoIssues.filter((issue) => issue.severity === \"warning\").length;\n  const schemaErrors = input.schemaIssues.filter((issue) => issue.severity === \"error\").length;\n  const brokenLinks = input.links.filter((link) => !link.ok).length;\n  const redirectLinks = input.links.filter(isRedirect).length;\n\n  const htmlScore = checkFailed(\"html\") ? null : clampScore(100 - htmlErrors * 15 - htmlWarnings * 2);\n  const cssScore = checkFailed(\"css\") || !input.cssAudited || cssCompatibilityLimitations > 0\n    ? null\n    : clampScore(100 - cssErrors * 20);\n  const seoScore = checkFailed(\"seo\") ? null : clampScore(100 - seoErrors * 15 - seoWarnings * 4 - schemaErrors * 15);\n  const linkScore = checkFailed(\"links\") || input.links.length === 0\n    ? null\n    : clampScore(100 - brokenLinks * 25);\n  const auditedScores = [htmlScore, seoScore, cssScore, linkScore].filter(\n    (score): score is number => score !== null,\n  );\n  const overallScore = failedChecks.length > 0 || cssCompatibilityLimitations > 0 || auditedScores.length === 0\n    ? null\n    : Math.round(auditedScores.reduce((total, score) => total + score, 0) / auditedScores.length);\n\n  const summary: ValidationReportSummary = {\n    overallScore,\n    htmlScore,\n    cssScore,\n    seoScore,\n    linkScore,\n    htmlErrors,\n    htmlWarnings,\n    cssErrors,\n    cssCompatibilityLimitations,\n    seoErrors,\n    seoWarnings,\n    schemaErrors,\n    linksChecked: input.links.length,\n    brokenLinks,\n  };\n\n  const report: string[] = [\n    `# Web Validation & SEO Audit Report — ${overallScore === null ? \"Partial\" : `${scoreIndicator(overallScore)} **${overallScore}**/100`}`,\n    `*Generated for: \\`${markdownCell(path.basename(input.htmlFilePath))}\\`*`,\n    \"\",\n    \"## Page health scores\",\n    \"\",\n    \"| Audit | Status | Score |\",\n    \"| :--- | :---: | :---: |\",\n    `| W3C HTML validation | ${htmlScore === null ? \"Unavailable\" : scoreIndicator(htmlScore)} | ${htmlScore === null ? \"N/A\" : `**${htmlScore}** / 100`} |`,\n    `| CSS validation | ${cssScore === null ? (checkFailed(\"css\") ? \"Unavailable\" : cssCompatibilityLimitations > 0 ? \"Compatibility-limited\" : \"Not audited\") : scoreIndicator(cssScore)} | ${cssScore === null ? \"N/A\" : `**${cssScore}** / 100`} |`,\n    `| SEO and accessibility | ${seoScore === null ? \"Unavailable\" : scoreIndicator(seoScore)} | ${seoScore === null ? \"N/A\" : `**${seoScore}** / 100`} |`,\n    `| Link integrity | ${linkScore === null ? (checkFailed(\"links\") ? \"Unavailable\" : \"No links checked\") : scoreIndicator(linkScore)} | ${linkScore === null ? \"N/A\" : `**${linkScore}** / 100`} |`,\n    \"\",\n    \"## Summary\",\n    \"\",\n    `- HTML: ${htmlErrors} error(s), ${htmlWarnings} other diagnostic(s)` ,\n    `- CSS: ${input.cssAudited ? `${cssErrors} error(s)${cssCompatibilityLimitations > 0 ? `, ${cssCompatibilityLimitations} known validator limitation(s)` : \"\"}` : \"not audited\"}`,\n    `- SEO and accessibility: ${seoErrors} error(s), ${seoWarnings} warning(s)`,\n    `- JSON-LD syntax: ${schemaErrors} error(s)`,\n    `- Links: ${brokenLinks} broken or unreachable, ${redirectLinks} redirect${redirectLinks === 1 ? \"\" : \"s\"} to review of ${input.links.length} checked`,\n    \"\",\n    `## HTML diagnostics (${input.htmlMessages.length})`,\n  ];\n\n  if (failedChecks.length > 0) {\n    report.splice(2, 0, \"\", \"## Partial validation report\", \"The following checks were unavailable: \" + failedChecks.join(\", \") + \". Remaining checks completed.\");\n  }\n\n  if (input.htmlMessages.length === 0) {\n    report.push(\"No HTML validation diagnostics were returned.\");\n  } else {\n    report.push(\"\", \"| Line | Column | Severity | Message | Extract |\", \"| :---: | :---: | :--- | :--- | :--- |\");\n    for (const message of input.htmlMessages) {\n      report.push(\n        `| ${message.lastLine ?? \"N/A\"} | ${message.lastColumn ?? \"N/A\"} | ${markdownCell(message.type)} | ${markdownCell(message.message)} | ${markdownCell(message.extract ?? \"N/A\")} |`,\n      );\n    }\n  }\n\n  if (input.cssAudited) {\n    report.push(\"\", `## CSS diagnostics (${input.cssMessages.length})`);\n    if (input.cssMessages.length === 0) {\n      report.push(\"No CSS validation errors were returned.\");\n    } else {\n      report.push(\"\", \"| Line | Context | Message |\", \"| :---: | :--- | :--- |\");\n      for (const message of input.cssMessages) {\n        report.push(\n          `| ${message.line} | ${markdownCell(message.context ?? \"N/A\")} | ${markdownCell(message.message)} |`,\n        );\n      }\n      if (cssCompatibilityLimitations > 0) {\n        report.push(\n          \"\",\n          `${cssCompatibilityLimitations} known validator limitation(s) match Jigsaw's current parser gap for the standards-defined \\`@container\\` rule. The original Jigsaw diagnostic is preserved, but CSS and overall scores are withheld because this upstream limitation can report valid modern CSS as invalid.`,\n        );\n      }\n    }\n  }\n\n  const combinedIssues = [...input.seoIssues, ...input.schemaIssues];\n  report.push(\"\", `## SEO, accessibility, and JSON-LD findings (${combinedIssues.length})`);\n  if (combinedIssues.length === 0) {\n    report.push(\"No SEO, accessibility, or JSON-LD syntax findings were returned.\");\n  } else {\n    report.push(\"\", \"| Category | Severity | Message | Element |\", \"| :--- | :--- | :--- | :--- |\");\n    for (const issue of combinedIssues) {\n      report.push(\n        `| ${markdownCell(issue.category)} | ${markdownCell(issue.severity)} | ${markdownCell(issue.message)} | ${markdownCell(issue.element ?? \"N/A\")} |`,\n      );\n    }\n  }\n\n  report.push(\"\", `## Link health (${input.links.length} checked)`);\n  if (input.links.length === 0) {\n    report.push(\"No public HTTP(S) links were checked.\");\n  } else {\n    report.push(\"\", \"| URL | Status | Reachable | Details |\", \"| :--- | :---: | :---: | :--- |\");\n    for (const link of input.links) {\n      report.push(\n        `| ${markdownCell(link.url)} | ${markdownCell(link.status)} | ${link.ok ? \"Yes\" : \"No\"} | ${markdownCell(link.message ?? \"Accessible\")} |`,\n      );\n    }\n  }\n\n  return {\n    report: report.join(\"\\n\"),\n    summary,\n    htmlMessages: input.htmlMessages,\n    cssMessages: input.cssMessages,\n    seoIssues: input.seoIssues,\n    schemaIssues: input.schemaIssues,\n    links: input.links,\n    failedChecks,\n    ...(input.errors && input.errors.length > 0 ? { errors: input.errors } : {}),\n  };\n}\n"]}
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAIlC,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;AA4ClG,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,cAAc,CAAC,KAAoB;IAC1C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,aAAa,CAAC;IACzC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;SACvB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB;IAClC,OAAO,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;AACpF,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,sBAAsB,CAAC,KAA4B;IACjE,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAG,CAAC,KAA4B,EAAW,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5F,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IAC3F,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,UAAU,CAAC;IAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;IAC3C,MAAM,2BAA2B,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAC1D,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,KAAK,4BAA4B,CACpE,CAAC,MAAM,CAAC;IACT,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IACvF,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAC3F,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IAC7F,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;IAClE,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;IAE5D,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,UAAU,GAAG,EAAE,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC;IACpG,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,2BAA2B,GAAG,CAAC;QACzF,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,SAAS,GAAG,EAAE,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC;QAC1D,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,SAAS,GAAG,EAAE,GAAG,WAAW,GAAG,CAAC,GAAG,YAAY,GAAG,EAAE,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAChE,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,WAAW,GAAG,EAAE,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,MAAM,CACrE,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,IAAI,CAC3C,CAAC;IACF,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,2BAA2B,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAC3G,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAEhG,MAAM,OAAO,GAA4B;QACvC,YAAY;QACZ,SAAS;QACT,QAAQ;QACR,QAAQ;QACR,SAAS;QACT,UAAU;QACV,YAAY;QACZ,SAAS;QACT,2BAA2B;QAC3B,SAAS;QACT,WAAW;QACX,YAAY;QACZ,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;QAChC,WAAW;KACZ,CAAC;IAEF,MAAM,MAAM,GAAa;QACvB,yCAAyC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,YAAY,CAAC,MAAM,YAAY,QAAQ,EAAE;QACxI,qBAAqB,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK;QACzE,EAAE;QACF,uBAAuB;QACvB,EAAE;QACF,4BAA4B;QAC5B,0BAA0B;QAC1B,2BAA2B,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,MAAM,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,UAAU,IAAI;QACxJ,sBAAsB,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,2BAA2B,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,UAAU,IAAI;QAClP,6BAA6B,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,UAAU,IAAI;QACtJ,sBAAsB,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,MAAM,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,UAAU,IAAI;QACjM,EAAE;QACF,YAAY;QACZ,EAAE;QACF,WAAW,UAAU,cAAc,YAAY,sBAAsB;QACrE,UAAU,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,SAAS,YAAY,2BAA2B,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,2BAA2B,gCAAgC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE;QAChL,4BAA4B,SAAS,cAAc,WAAW,aAAa;QAC3E,qBAAqB,YAAY,WAAW;QAC5C,YAAY,WAAW,2BAA2B,aAAa,YAAY,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,iBAAiB,KAAK,CAAC,KAAK,CAAC,MAAM,UAAU;QACtJ,EAAE;QACF,wBAAwB,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG;KACrD,CAAC;IAEF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,8BAA8B,EAAE,yCAAyC,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,+BAA+B,CAAC,CAAC;IACjK,CAAC;IAED,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,kDAAkD,EAAE,wCAAwC,CAAC,CAAC;QAC9G,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CACT,KAAK,OAAO,CAAC,QAAQ,IAAI,KAAK,MAAM,OAAO,CAAC,UAAU,IAAI,KAAK,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CACnL,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,uBAAuB,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;QACpE,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,8BAA8B,EAAE,yBAAyB,CAAC,CAAC;YAC3E,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,CACT,KAAK,OAAO,CAAC,IAAI,MAAM,YAAY,CAAC,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CACrG,CAAC;YACJ,CAAC;YACD,IAAI,2BAA2B,GAAG,CAAC,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,CACT,EAAE,EACF,GAAG,2BAA2B,+QAA+Q,CAC9S,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;IACnE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,gDAAgD,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1F,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IAClF,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,6CAA6C,EAAE,+BAA+B,CAAC,CAAC;QAChG,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CACT,KAAK,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CACnJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,mBAAmB,KAAK,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,wCAAwC,EAAE,iCAAiC,CAAC,CAAC;QAC7F,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CACT,KAAK,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC,IAAI,CAC3I,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACzB,OAAO;QACP,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY;QACZ,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7E,CAAC;AACJ,CAAC","sourcesContent":["import * as path from \"node:path\";\nimport type { CSSMessage, W3CMessage } from \"./w3c-validator.js\";\nimport type { LinkStatus, SEOIssue } from \"./seo-auditor.js\";\n\nexport const validationReportChecks = [\"input\", \"html\", \"css\", \"seo\", \"schema\", \"links\"] as const;\nexport type ValidationReportCheck = (typeof validationReportChecks)[number];\n\nexport interface ValidationReportSummary {\n  overallScore: number | null;\n  htmlScore: number | null;\n  cssScore: number | null;\n  seoScore: number | null;\n  linkScore: number | null;\n  htmlErrors: number;\n  htmlWarnings: number;\n  cssErrors: number;\n  cssCompatibilityLimitations: number;\n  seoErrors: number;\n  seoWarnings: number;\n  schemaErrors: number;\n  linksChecked: number;\n  brokenLinks: number;\n}\n\nexport interface ValidationReport {\n  report: string;\n  summary: ValidationReportSummary;\n  htmlMessages: W3CMessage[];\n  cssMessages: CSSMessage[];\n  seoIssues: SEOIssue[];\n  schemaIssues: SEOIssue[];\n  links: LinkStatus[];\n  failedChecks: ValidationReportCheck[];\n  errors?: string[];\n}\n\nexport interface ValidationReportInput {\n  htmlFilePath: string;\n  cssAudited: boolean;\n  htmlMessages: W3CMessage[];\n  cssMessages: CSSMessage[];\n  seoIssues: SEOIssue[];\n  schemaIssues: SEOIssue[];\n  links: LinkStatus[];\n  failedChecks?: ValidationReportCheck[];\n  errors?: string[];\n}\n\nfunction clampScore(score: number): number {\n  return Math.max(0, Math.min(100, score));\n}\n\nfunction scoreIndicator(score: number | null): string {\n  if (score === null) return \"Unavailable\";\n  if (score >= 90) return \"🟢\";\n  if (score >= 50) return \"🟠\";\n  return \"🔴\";\n}\n\nfunction markdownCell(value: unknown): string {\n  return String(value ?? \"\")\n    .replace(/\\\\/g, \"\\\\\\\\\")\n    .replace(/\\|/g, \"\\\\|\")\n    .replace(/`/g, \"\\\\`\")\n    .replace(/[\\r\\n]+/g, \" \")\n    .trim();\n}\n\nfunction isRedirect(link: LinkStatus): boolean {\n  return typeof link.status === \"number\" && link.status >= 300 && link.status < 400;\n}\n\n/** Builds the human-readable report and its machine-readable equivalent. */\nexport function createValidationReport(input: ValidationReportInput): ValidationReport {\n  const failedChecks = input.failedChecks ?? [];\n  const checkFailed = (check: ValidationReportCheck): boolean => failedChecks.includes(check);\n  const htmlErrors = input.htmlMessages.filter((message) => message.type === \"error\").length;\n  const htmlWarnings = input.htmlMessages.length - htmlErrors;\n  const cssErrors = input.cssMessages.length;\n  const cssCompatibilityLimitations = input.cssMessages.filter(\n    (message) => message.compatibility === \"known-validator-limitation\",\n  ).length;\n  const seoErrors = input.seoIssues.filter((issue) => issue.severity === \"error\").length;\n  const seoWarnings = input.seoIssues.filter((issue) => issue.severity === \"warning\").length;\n  const schemaErrors = input.schemaIssues.filter((issue) => issue.severity === \"error\").length;\n  const brokenLinks = input.links.filter((link) => !link.ok).length;\n  const redirectLinks = input.links.filter(isRedirect).length;\n\n  const htmlScore = checkFailed(\"html\") ? null : clampScore(100 - htmlErrors * 15 - htmlWarnings * 2);\n  const cssScore = checkFailed(\"css\") || !input.cssAudited || cssCompatibilityLimitations > 0\n    ? null\n    : clampScore(100 - cssErrors * 20);\n  const seoScore = checkFailed(\"seo\") || checkFailed(\"schema\")\n    ? null\n    : clampScore(100 - seoErrors * 15 - seoWarnings * 4 - schemaErrors * 15);\n  const linkScore = checkFailed(\"links\") || input.links.length === 0\n    ? null\n    : clampScore(100 - brokenLinks * 25);\n  const auditedScores = [htmlScore, seoScore, cssScore, linkScore].filter(\n    (score): score is number => score !== null,\n  );\n  const overallScore = failedChecks.length > 0 || cssCompatibilityLimitations > 0 || auditedScores.length === 0\n    ? null\n    : Math.round(auditedScores.reduce((total, score) => total + score, 0) / auditedScores.length);\n\n  const summary: ValidationReportSummary = {\n    overallScore,\n    htmlScore,\n    cssScore,\n    seoScore,\n    linkScore,\n    htmlErrors,\n    htmlWarnings,\n    cssErrors,\n    cssCompatibilityLimitations,\n    seoErrors,\n    seoWarnings,\n    schemaErrors,\n    linksChecked: input.links.length,\n    brokenLinks,\n  };\n\n  const report: string[] = [\n    `# Web Validation & SEO Audit Report — ${overallScore === null ? \"Partial\" : `${scoreIndicator(overallScore)} **${overallScore}**/100`}`,\n    `*Generated for: \\`${markdownCell(path.basename(input.htmlFilePath))}\\`*`,\n    \"\",\n    \"## Page health scores\",\n    \"\",\n    \"| Audit | Status | Score |\",\n    \"| :--- | :---: | :---: |\",\n    `| W3C HTML validation | ${htmlScore === null ? \"Unavailable\" : scoreIndicator(htmlScore)} | ${htmlScore === null ? \"N/A\" : `**${htmlScore}** / 100`} |`,\n    `| CSS validation | ${cssScore === null ? (checkFailed(\"css\") ? \"Unavailable\" : cssCompatibilityLimitations > 0 ? \"Compatibility-limited\" : \"Not audited\") : scoreIndicator(cssScore)} | ${cssScore === null ? \"N/A\" : `**${cssScore}** / 100`} |`,\n    `| SEO and accessibility | ${seoScore === null ? \"Unavailable\" : scoreIndicator(seoScore)} | ${seoScore === null ? \"N/A\" : `**${seoScore}** / 100`} |`,\n    `| Link integrity | ${linkScore === null ? (checkFailed(\"links\") ? \"Unavailable\" : \"No links checked\") : scoreIndicator(linkScore)} | ${linkScore === null ? \"N/A\" : `**${linkScore}** / 100`} |`,\n    \"\",\n    \"## Summary\",\n    \"\",\n    `- HTML: ${htmlErrors} error(s), ${htmlWarnings} other diagnostic(s)` ,\n    `- CSS: ${input.cssAudited ? `${cssErrors} error(s)${cssCompatibilityLimitations > 0 ? `, ${cssCompatibilityLimitations} known validator limitation(s)` : \"\"}` : \"not audited\"}`,\n    `- SEO and accessibility: ${seoErrors} error(s), ${seoWarnings} warning(s)`,\n    `- JSON-LD syntax: ${schemaErrors} error(s)`,\n    `- Links: ${brokenLinks} broken or unreachable, ${redirectLinks} redirect${redirectLinks === 1 ? \"\" : \"s\"} to review of ${input.links.length} checked`,\n    \"\",\n    `## HTML diagnostics (${input.htmlMessages.length})`,\n  ];\n\n  if (failedChecks.length > 0) {\n    report.splice(2, 0, \"\", \"## Partial validation report\", \"The following checks were unavailable: \" + failedChecks.join(\", \") + \". Remaining checks completed.\");\n  }\n\n  if (input.htmlMessages.length === 0) {\n    report.push(\"No HTML validation diagnostics were returned.\");\n  } else {\n    report.push(\"\", \"| Line | Column | Severity | Message | Extract |\", \"| :---: | :---: | :--- | :--- | :--- |\");\n    for (const message of input.htmlMessages) {\n      report.push(\n        `| ${message.lastLine ?? \"N/A\"} | ${message.lastColumn ?? \"N/A\"} | ${markdownCell(message.type)} | ${markdownCell(message.message)} | ${markdownCell(message.extract ?? \"N/A\")} |`,\n      );\n    }\n  }\n\n  if (input.cssAudited) {\n    report.push(\"\", `## CSS diagnostics (${input.cssMessages.length})`);\n    if (input.cssMessages.length === 0) {\n      report.push(\"No CSS validation errors were returned.\");\n    } else {\n      report.push(\"\", \"| Line | Context | Message |\", \"| :---: | :--- | :--- |\");\n      for (const message of input.cssMessages) {\n        report.push(\n          `| ${message.line} | ${markdownCell(message.context ?? \"N/A\")} | ${markdownCell(message.message)} |`,\n        );\n      }\n      if (cssCompatibilityLimitations > 0) {\n        report.push(\n          \"\",\n          `${cssCompatibilityLimitations} known validator limitation(s) match Jigsaw's current parser gap for the standards-defined \\`@container\\` rule. The original Jigsaw diagnostic is preserved, but CSS and overall scores are withheld because this upstream limitation can report valid modern CSS as invalid.`,\n        );\n      }\n    }\n  }\n\n  const combinedIssues = [...input.seoIssues, ...input.schemaIssues];\n  report.push(\"\", `## SEO, accessibility, and JSON-LD findings (${combinedIssues.length})`);\n  if (combinedIssues.length === 0) {\n    report.push(\"No SEO, accessibility, or JSON-LD syntax findings were returned.\");\n  } else {\n    report.push(\"\", \"| Category | Severity | Message | Element |\", \"| :--- | :--- | :--- | :--- |\");\n    for (const issue of combinedIssues) {\n      report.push(\n        `| ${markdownCell(issue.category)} | ${markdownCell(issue.severity)} | ${markdownCell(issue.message)} | ${markdownCell(issue.element ?? \"N/A\")} |`,\n      );\n    }\n  }\n\n  report.push(\"\", `## Link health (${input.links.length} checked)`);\n  if (input.links.length === 0) {\n    report.push(\"No public HTTP(S) links were checked.\");\n  } else {\n    report.push(\"\", \"| URL | Status | Reachable | Details |\", \"| :--- | :---: | :---: | :--- |\");\n    for (const link of input.links) {\n      report.push(\n        `| ${markdownCell(link.url)} | ${markdownCell(link.status)} | ${link.ok ? \"Yes\" : \"No\"} | ${markdownCell(link.message ?? \"Accessible\")} |`,\n      );\n    }\n  }\n\n  return {\n    report: report.join(\"\\n\"),\n    summary,\n    htmlMessages: input.htmlMessages,\n    cssMessages: input.cssMessages,\n    seoIssues: input.seoIssues,\n    schemaIssues: input.schemaIssues,\n    links: input.links,\n    failedChecks,\n    ...(input.errors && input.errors.length > 0 ? { errors: input.errors } : {}),\n  };\n}\n"]}

package/dist/w3c-validator.js

@@ -20,11 +20,11 @@ function assertContentSize(content, maxBytes, label) {
 }
 function normalizeW3CMessage(message) {
     if (typeof message !== "object" || message === null) {
-        return null;
+        throw new Error("W3C HTML validator returned a malformed message");
     }
     const candidate = message;
     if (typeof candidate.type !== "string" || typeof candidate.message !== "string") {
-        return null;
+        throw new Error("W3C HTML validator returned a malformed message");
     }
     const normalized = {
         type: candidate.type,
@@ -71,7 +71,6 @@ export async function validateHtmlContent(htmlContent) {
         }
         return data.messages
             .map(normalizeW3CMessage)
-            .filter((message) => message !== null)
             .slice(0, MAX_VALIDATION_MESSAGES);
     }
     catch (error) {

package/dist/w3c-validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"w3c-validator.js","sourceRoot":"","sources":["../src/w3c-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAoB/C,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,cAAc,GAAG,SAAS,CAAC;AACjC,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAChD,MAAM,4BAA4B,GAAG,SAAS,CAAC;AAC/C,MAAM,UAAU,GAAG,qBAAqB,eAAe,0CAA0C,CAAC;AAClG,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAE3C,SAAS,6BAA6B,CAAC,IAAwB,EAAE,OAAe;IAC9E,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACzE,OAAO,UAAU,KAAK,iCAAiC,CAAC;AAC1D,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,QAAgB,EAAE,KAAa;IACzE,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChD,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gBAAgB,QAAQ,wBAAwB,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,OAAkC,CAAC;IACrD,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAe;QAC7B,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,OAAO,EAAE,SAAS,CAAC,OAAO;KAC3B,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,CAAU,EAAE,CAAC;QACpF,IAAI,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC/E,UAAU,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC1C,UAAU,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;IACzC,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,WAAmB;IAC3D,MAAM,GAAG,GAAG,uCAAuC,CAAC;IAEpD,IAAI,CAAC;QACH,iBAAiB,CAAC,WAAW,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,0BAA0B;gBAC1C,YAAY,EAAE,UAAU;aACzB;YACD,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,oBAAoB,CAAC;SAClD,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,2CAA2C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA2B,CAAC;QACxD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ;aACjB,GAAG,CAAC,mBAAmB,CAAC;aACxB,MAAM,CAAC,CAAC,OAAO,EAAyB,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC;aAC5D,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,2BAA2B,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,UAAkB;IACzD,MAAM,GAAG,GAAG,+CAA+C,CAAC;IAE5D,IAAI,CAAC;QACH,iBAAiB,CAAC,UAAU,EAAE,wBAAwB,EAAE,aAAa,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAE/B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,YAAY,EAAE,UAAU;aACzB;YACD,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,oBAAoB,CAAC;SAClD,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,0CAA0C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC;QAE5E,6FAA6F;QAC7F,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAe3B,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,IAAI,EAAE,CAAC;QAC/C,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC1D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,8BAA8B,CAAC;YAClF,OAAO;gBACL,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC;gBACnB,IAAI,EAAE,OAAO;gBACb,OAAO;gBACP,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS;gBACjC,GAAG,CAAC,6BAA6B,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;oBAClD,CAAC,CAAC,EAAE,aAAa,EAAE,4BAAqC,EAAE;oBAC1D,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,0BAA0B,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;AACH,CAAC","sourcesContent":["import {\n  cancelResponseBody,\n  getErrorMessage,\n  readResponseText,\n} from \"./network.js\";\nimport { PACKAGE_VERSION } from \"./version.js\";\n\nexport interface W3CMessage {\n  type: string;\n  lastLine?: number;\n  lastColumn?: number;\n  firstLine?: number;\n  firstColumn?: number;\n  message: string;\n  extract?: string;\n}\n\nexport interface CSSMessage {\n  line: number;\n  type: string;\n  message: string;\n  context?: string;\n  compatibility?: \"known-validator-limitation\";\n}\n\nconst VALIDATOR_TIMEOUT_MS = 20_000;\nconst MAX_HTML_BYTES = 2_000_000;\nexport const MAX_CSS_VALIDATION_BYTES = 128_000;\nconst MAX_VALIDATOR_RESPONSE_BYTES = 5_000_000;\nconst USER_AGENT = `mcp-web-validator/${PACKAGE_VERSION} (+https://digestseo.com/validator-mcp/)`;\nexport const MAX_VALIDATION_MESSAGES = 200;\n\nfunction isKnownCssValidatorLimitation(type: string | undefined, message: string): boolean {\n  if (type?.trim().toLowerCase() !== \"at-rule\") return false;\n  const normalized = message.trim().toLowerCase().replace(/[“”\"'‘’]/g, \"\");\n  return normalized === \"unrecognized at-rule @container\";\n}\n\nfunction assertContentSize(content: string, maxBytes: number, label: string): void {\n  const size = Buffer.byteLength(content, \"utf8\");\n  if (size > maxBytes) {\n    throw new Error(`${label} exceeds the ${maxBytes}-byte validation limit`);\n  }\n}\n\nfunction normalizeW3CMessage(message: unknown): W3CMessage | null {\n  if (typeof message !== \"object\" || message === null) {\n    return null;\n  }\n\n  const candidate = message as Record<string, unknown>;\n  if (typeof candidate.type !== \"string\" || typeof candidate.message !== \"string\") {\n    return null;\n  }\n\n  const normalized: W3CMessage = {\n    type: candidate.type,\n    message: candidate.message,\n  };\n\n  for (const field of [\"lastLine\", \"lastColumn\", \"firstLine\", \"firstColumn\"] as const) {\n    if (typeof candidate[field] === \"number\" && Number.isInteger(candidate[field])) {\n      normalized[field] = candidate[field];\n    }\n  }\n\n  if (typeof candidate.extract === \"string\") {\n    normalized.extract = candidate.extract;\n  }\n\n  return normalized;\n}\n\n/**\n * Validates HTML using the W3C Nu HTML Checker API\n */\nexport async function validateHtmlContent(htmlContent: string): Promise<W3CMessage[]> {\n  const url = \"https://validator.w3.org/nu/?out=json\";\n\n  try {\n    assertContentSize(htmlContent, MAX_HTML_BYTES, \"HTML content\");\n    const response = await fetch(url, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"text/html; charset=utf-8\",\n        \"User-Agent\": USER_AGENT,\n      },\n      body: htmlContent,\n      redirect: \"error\",\n      signal: AbortSignal.timeout(VALIDATOR_TIMEOUT_MS),\n    });\n\n    if (!response.ok) {\n      await cancelResponseBody(response);\n      throw new Error(`W3C HTML validator returned HTTP status ${response.status}`);\n    }\n\n    const text = await readResponseText(response, MAX_VALIDATOR_RESPONSE_BYTES);\n    const data = JSON.parse(text) as { messages?: unknown };\n    if (data.messages === undefined) {\n      throw new Error(\"W3C HTML validator returned an invalid response shape\");\n    }\n    if (!Array.isArray(data.messages)) {\n      throw new Error(\"W3C HTML validator returned an invalid response shape\");\n    }\n    return data.messages\n      .map(normalizeW3CMessage)\n      .filter((message): message is W3CMessage => message !== null)\n      .slice(0, MAX_VALIDATION_MESSAGES);\n  } catch (error: unknown) {\n    throw new Error(`HTML validation failed: ${getErrorMessage(error)}`);\n  }\n}\n\n/**\n * Validates CSS using the W3C Jigsaw CSS Validator API\n */\nexport async function validateCssContent(cssContent: string): Promise<CSSMessage[]> {\n  const url = \"https://jigsaw.w3.org/css-validator/validator\";\n\n  try {\n    assertContentSize(cssContent, MAX_CSS_VALIDATION_BYTES, \"CSS content\");\n    const form = new FormData();\n    form.set(\"text\", cssContent);\n    form.set(\"output\", \"json\");\n    form.set(\"warning\", \"0\");\n    form.set(\"profile\", \"css3svg\");\n\n    const response = await fetch(url, {\n      method: \"POST\",\n      headers: {\n        \"User-Agent\": USER_AGENT,\n      },\n      body: form,\n      redirect: \"error\",\n      signal: AbortSignal.timeout(VALIDATOR_TIMEOUT_MS),\n    });\n\n    if (!response.ok) {\n      await cancelResponseBody(response);\n      throw new Error(`W3C CSS validator returned HTTP status ${response.status}`);\n    }\n\n    const text = await readResponseText(response, MAX_VALIDATOR_RESPONSE_BYTES);\n\n    // An empty upstream response is indeterminate and must never be presented as a clean result.\n    if (!text || text.trim() === \"\") {\n      throw new Error(\"W3C CSS validator returned an empty response\");\n    }\n\n    const data = JSON.parse(text) as {\n      cssvalidation?: {\n        errors?: Array<{\n          line: number;\n          message: string;\n          context?: string;\n          type?: string;\n        }>;\n        warnings?: Array<{\n          line: number;\n          message: string;\n          context?: string;\n          type?: string;\n        }>;\n      };\n    };\n\n    if (!data.cssvalidation || typeof data.cssvalidation !== \"object\") {\n      throw new Error(\"W3C CSS validator returned an invalid response shape\");\n    }\n\n    const errors = data.cssvalidation.errors || [];\n    return errors.slice(0, MAX_VALIDATION_MESSAGES).map((err) => {\n      const message = err.message ? err.message.trim() : \"Unknown CSS validation error\";\n      return {\n        line: err.line || 0,\n        type: \"error\",\n        message,\n        context: err.context || undefined,\n        ...(isKnownCssValidatorLimitation(err.type, message)\n          ? { compatibility: \"known-validator-limitation\" as const }\n          : {}),\n      };\n    });\n  } catch (error: unknown) {\n    throw new Error(`CSS validation failed: ${getErrorMessage(error)}`);\n  }\n}\n"]}
+{"version":3,"file":"w3c-validator.js","sourceRoot":"","sources":["../src/w3c-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAoB/C,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,cAAc,GAAG,SAAS,CAAC;AACjC,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAChD,MAAM,4BAA4B,GAAG,SAAS,CAAC;AAC/C,MAAM,UAAU,GAAG,qBAAqB,eAAe,0CAA0C,CAAC;AAClG,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAE3C,SAAS,6BAA6B,CAAC,IAAwB,EAAE,OAAe;IAC9E,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACzE,OAAO,UAAU,KAAK,iCAAiC,CAAC;AAC1D,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,QAAgB,EAAE,KAAa;IACzE,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChD,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gBAAgB,QAAQ,wBAAwB,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,SAAS,GAAG,OAAkC,CAAC;IACrD,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,UAAU,GAAe;QAC7B,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,OAAO,EAAE,SAAS,CAAC,OAAO;KAC3B,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,CAAU,EAAE,CAAC;QACpF,IAAI,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC/E,UAAU,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC1C,UAAU,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;IACzC,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,WAAmB;IAC3D,MAAM,GAAG,GAAG,uCAAuC,CAAC;IAEpD,IAAI,CAAC;QACH,iBAAiB,CAAC,WAAW,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,0BAA0B;gBAC1C,YAAY,EAAE,UAAU;aACzB;YACD,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,oBAAoB,CAAC;SAClD,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,2CAA2C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA2B,CAAC;QACxD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ;aACjB,GAAG,CAAC,mBAAmB,CAAC;aACxB,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,2BAA2B,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,UAAkB;IACzD,MAAM,GAAG,GAAG,+CAA+C,CAAC;IAE5D,IAAI,CAAC;QACH,iBAAiB,CAAC,UAAU,EAAE,wBAAwB,EAAE,aAAa,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAE/B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,YAAY,EAAE,UAAU;aACzB;YACD,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,oBAAoB,CAAC;SAClD,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,0CAA0C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC;QAE5E,6FAA6F;QAC7F,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAe3B,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,IAAI,EAAE,CAAC;QAC/C,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC1D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,8BAA8B,CAAC;YAClF,OAAO;gBACL,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC;gBACnB,IAAI,EAAE,OAAO;gBACb,OAAO;gBACP,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS;gBACjC,GAAG,CAAC,6BAA6B,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;oBAClD,CAAC,CAAC,EAAE,aAAa,EAAE,4BAAqC,EAAE;oBAC1D,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,0BAA0B,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;AACH,CAAC","sourcesContent":["import {\n  cancelResponseBody,\n  getErrorMessage,\n  readResponseText,\n} from \"./network.js\";\nimport { PACKAGE_VERSION } from \"./version.js\";\n\nexport interface W3CMessage {\n  type: string;\n  lastLine?: number;\n  lastColumn?: number;\n  firstLine?: number;\n  firstColumn?: number;\n  message: string;\n  extract?: string;\n}\n\nexport interface CSSMessage {\n  line: number;\n  type: string;\n  message: string;\n  context?: string;\n  compatibility?: \"known-validator-limitation\";\n}\n\nconst VALIDATOR_TIMEOUT_MS = 20_000;\nconst MAX_HTML_BYTES = 2_000_000;\nexport const MAX_CSS_VALIDATION_BYTES = 128_000;\nconst MAX_VALIDATOR_RESPONSE_BYTES = 5_000_000;\nconst USER_AGENT = `mcp-web-validator/${PACKAGE_VERSION} (+https://digestseo.com/validator-mcp/)`;\nexport const MAX_VALIDATION_MESSAGES = 200;\n\nfunction isKnownCssValidatorLimitation(type: string | undefined, message: string): boolean {\n  if (type?.trim().toLowerCase() !== \"at-rule\") return false;\n  const normalized = message.trim().toLowerCase().replace(/[“”\"'‘’]/g, \"\");\n  return normalized === \"unrecognized at-rule @container\";\n}\n\nfunction assertContentSize(content: string, maxBytes: number, label: string): void {\n  const size = Buffer.byteLength(content, \"utf8\");\n  if (size > maxBytes) {\n    throw new Error(`${label} exceeds the ${maxBytes}-byte validation limit`);\n  }\n}\n\nfunction normalizeW3CMessage(message: unknown): W3CMessage {\n  if (typeof message !== \"object\" || message === null) {\n    throw new Error(\"W3C HTML validator returned a malformed message\");\n  }\n\n  const candidate = message as Record<string, unknown>;\n  if (typeof candidate.type !== \"string\" || typeof candidate.message !== \"string\") {\n    throw new Error(\"W3C HTML validator returned a malformed message\");\n  }\n\n  const normalized: W3CMessage = {\n    type: candidate.type,\n    message: candidate.message,\n  };\n\n  for (const field of [\"lastLine\", \"lastColumn\", \"firstLine\", \"firstColumn\"] as const) {\n    if (typeof candidate[field] === \"number\" && Number.isInteger(candidate[field])) {\n      normalized[field] = candidate[field];\n    }\n  }\n\n  if (typeof candidate.extract === \"string\") {\n    normalized.extract = candidate.extract;\n  }\n\n  return normalized;\n}\n\n/**\n * Validates HTML using the W3C Nu HTML Checker API\n */\nexport async function validateHtmlContent(htmlContent: string): Promise<W3CMessage[]> {\n  const url = \"https://validator.w3.org/nu/?out=json\";\n\n  try {\n    assertContentSize(htmlContent, MAX_HTML_BYTES, \"HTML content\");\n    const response = await fetch(url, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"text/html; charset=utf-8\",\n        \"User-Agent\": USER_AGENT,\n      },\n      body: htmlContent,\n      redirect: \"error\",\n      signal: AbortSignal.timeout(VALIDATOR_TIMEOUT_MS),\n    });\n\n    if (!response.ok) {\n      await cancelResponseBody(response);\n      throw new Error(`W3C HTML validator returned HTTP status ${response.status}`);\n    }\n\n    const text = await readResponseText(response, MAX_VALIDATOR_RESPONSE_BYTES);\n    const data = JSON.parse(text) as { messages?: unknown };\n    if (data.messages === undefined) {\n      throw new Error(\"W3C HTML validator returned an invalid response shape\");\n    }\n    if (!Array.isArray(data.messages)) {\n      throw new Error(\"W3C HTML validator returned an invalid response shape\");\n    }\n    return data.messages\n      .map(normalizeW3CMessage)\n      .slice(0, MAX_VALIDATION_MESSAGES);\n  } catch (error: unknown) {\n    throw new Error(`HTML validation failed: ${getErrorMessage(error)}`);\n  }\n}\n\n/**\n * Validates CSS using the W3C Jigsaw CSS Validator API\n */\nexport async function validateCssContent(cssContent: string): Promise<CSSMessage[]> {\n  const url = \"https://jigsaw.w3.org/css-validator/validator\";\n\n  try {\n    assertContentSize(cssContent, MAX_CSS_VALIDATION_BYTES, \"CSS content\");\n    const form = new FormData();\n    form.set(\"text\", cssContent);\n    form.set(\"output\", \"json\");\n    form.set(\"warning\", \"0\");\n    form.set(\"profile\", \"css3svg\");\n\n    const response = await fetch(url, {\n      method: \"POST\",\n      headers: {\n        \"User-Agent\": USER_AGENT,\n      },\n      body: form,\n      redirect: \"error\",\n      signal: AbortSignal.timeout(VALIDATOR_TIMEOUT_MS),\n    });\n\n    if (!response.ok) {\n      await cancelResponseBody(response);\n      throw new Error(`W3C CSS validator returned HTTP status ${response.status}`);\n    }\n\n    const text = await readResponseText(response, MAX_VALIDATOR_RESPONSE_BYTES);\n\n    // An empty upstream response is indeterminate and must never be presented as a clean result.\n    if (!text || text.trim() === \"\") {\n      throw new Error(\"W3C CSS validator returned an empty response\");\n    }\n\n    const data = JSON.parse(text) as {\n      cssvalidation?: {\n        errors?: Array<{\n          line: number;\n          message: string;\n          context?: string;\n          type?: string;\n        }>;\n        warnings?: Array<{\n          line: number;\n          message: string;\n          context?: string;\n          type?: string;\n        }>;\n      };\n    };\n\n    if (!data.cssvalidation || typeof data.cssvalidation !== \"object\") {\n      throw new Error(\"W3C CSS validator returned an invalid response shape\");\n    }\n\n    const errors = data.cssvalidation.errors || [];\n    return errors.slice(0, MAX_VALIDATION_MESSAGES).map((err) => {\n      const message = err.message ? err.message.trim() : \"Unknown CSS validation error\";\n      return {\n        line: err.line || 0,\n        type: \"error\",\n        message,\n        context: err.context || undefined,\n        ...(isKnownCssValidatorLimitation(err.type, message)\n          ? { compatibility: \"known-validator-limitation\" as const }\n          : {}),\n      };\n    });\n  } catch (error: unknown) {\n    throw new Error(`CSS validation failed: ${getErrorMessage(error)}`);\n  }\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-web-validator",
-  "version": "1.3.4",
+  "version": "1.3.6",
   "description": "W3C HTML/CSS Validator and Technical SEO Audit MCP Server for AI coding assistants.",
   "main": "dist/index.js",
   "bin": {
@@ -52,6 +52,7 @@
     "@modelcontextprotocol/sdk": "^1.29.0",
     "cheerio": "^1.0.0",
     "puppeteer": "25.7.0",
+    "undici": "^7.29.0",
     "zod": "^4.4.3"
   },
   "devDependencies": {