@addon-pass/sdk 0.1.3

package/dist/verifier.js

@@ -0,0 +1,255 @@
+import { AddonPassConfigurationError, AddonPassUnavailableError, EntitlementCredentialRejectedError, EntitlementScopeMismatchError, EntitlementVerificationError, } from "./errors.js";
+import { hashEntitlementToken } from "./token.js";
+import { entitlementResponseSchema, } from "./types.js";
+const CREDENTIAL_PATTERN = /^ap_v[1-9][0-9]*_[a-z0-9]{10,24}\.[A-Za-z0-9_-]{43}$/;
+const DEFAULT_CACHE_TTL_MS = 5_000;
+const DEFAULT_MAX_CACHE_ENTRIES = 1_000;
+const DEFAULT_REQUEST_TIMEOUT_MS = 5_000;
+const MAX_CACHE_TTL_MS = 5_000;
+const MAX_RESPONSE_BYTES = 16_384;
+class ApiUnavailableError extends Error {
+}
+function normalizedApiUrl(value) {
+    try {
+        const url = new URL(value);
+        const localHttp = url.protocol === "http:" &&
+            (url.hostname === "localhost" || url.hostname === "127.0.0.1");
+        if ((url.protocol !== "https:" && !localHttp) ||
+            url.username !== "" ||
+            url.password !== "" ||
+            url.search !== "" ||
+            url.hash !== "") {
+            throw new AddonPassConfigurationError();
+        }
+        if (!url.pathname.endsWith("/"))
+            url.pathname += "/";
+        return new URL("v1/entitlements/verify", url);
+    }
+    catch (error) {
+        if (error instanceof AddonPassConfigurationError)
+            throw error;
+        throw new AddonPassConfigurationError();
+    }
+}
+function boundedInteger(value, fallback, minimum, maximum) {
+    const selected = value ?? fallback;
+    if (!Number.isSafeInteger(selected) ||
+        selected < minimum ||
+        selected > maximum) {
+        throw new AddonPassConfigurationError();
+    }
+    return selected;
+}
+function cacheControlTtl(value) {
+    if (value === null || /(?:^|,)\s*no-store\s*(?:,|$)/i.test(value))
+        return 0;
+    const match = /(?:^|,)\s*max-age=([0-9]+)\s*(?:,|$)/i.exec(value);
+    if (match?.[1] === undefined)
+        return 0;
+    const seconds = Number(match[1]);
+    return Number.isSafeInteger(seconds) ? seconds * 1_000 : 0;
+}
+async function readBoundedBody(response) {
+    const contentLength = response.headers.get("content-length");
+    if (contentLength !== null && Number(contentLength) > MAX_RESPONSE_BYTES) {
+        await response.body?.cancel();
+        throw new EntitlementVerificationError();
+    }
+    if (response.body === null)
+        return "";
+    const reader = response.body.getReader();
+    const decoder = new TextDecoder();
+    let bytes = 0;
+    let text = "";
+    let chunk = await reader.read();
+    while (!chunk.done) {
+        bytes += chunk.value.byteLength;
+        if (bytes > MAX_RESPONSE_BYTES) {
+            await reader.cancel();
+            throw new EntitlementVerificationError();
+        }
+        text += decoder.decode(chunk.value, { stream: true });
+        chunk = await reader.read();
+    }
+    return text + decoder.decode();
+}
+function accessDeadlineMs(response) {
+    const deadline = response.status === "grace" ? response.graceEnds : response.paidThrough;
+    if (!response.entitled || deadline === null)
+        return null;
+    const parsed = Date.parse(deadline);
+    return Number.isFinite(parsed) ? parsed : null;
+}
+export class AddonPassVerifier {
+    #allowedPlanIds;
+    #apiUrl;
+    #cache = new Map();
+    #cacheTtlMs;
+    #fallback;
+    #fetch;
+    #inFlight = new Map();
+    #integrationCredential;
+    #maxCacheEntries;
+    #now;
+    #requestTimeoutMs;
+    constructor(options) {
+        this.#apiUrl = normalizedApiUrl(options.apiBaseUrl);
+        if (!CREDENTIAL_PATTERN.test(options.integrationCredential)) {
+            throw new AddonPassConfigurationError();
+        }
+        const allowedPlanIds = options.allowedPlanIds.map((value) => value.toString());
+        if (allowedPlanIds.length === 0 ||
+            allowedPlanIds.some((value) => !/^[1-9][0-9]*$/.test(value))) {
+            throw new AddonPassConfigurationError();
+        }
+        this.#allowedPlanIds = new Set(allowedPlanIds);
+        this.#cacheTtlMs = boundedInteger(options.cacheTtlMs, DEFAULT_CACHE_TTL_MS, 0, MAX_CACHE_TTL_MS);
+        this.#maxCacheEntries = boundedInteger(options.maxCacheEntries, DEFAULT_MAX_CACHE_ENTRIES, 1, 10_000);
+        this.#requestTimeoutMs = boundedInteger(options.requestTimeoutMs, DEFAULT_REQUEST_TIMEOUT_MS, 100, 10_000);
+        this.#fallback = options.fallback;
+        this.#fetch = options.fetch ?? globalThis.fetch;
+        this.#integrationCredential = options.integrationCredential;
+        this.#now = options.now ?? (() => new Date());
+    }
+    clear() {
+        this.#cache.clear();
+    }
+    invalidate(rawToken) {
+        this.#cache.delete(hashEntitlementToken(rawToken));
+    }
+    async verifyToken(rawToken) {
+        const tokenHash = hashEntitlementToken(rawToken);
+        const nowMs = this.#now().getTime();
+        const cached = this.#cache.get(tokenHash);
+        if (cached !== undefined) {
+            if (cached.expiresAtMs > nowMs) {
+                this.#cache.delete(tokenHash);
+                this.#cache.set(tokenHash, cached);
+                return { ...cached.decision, cached: true };
+            }
+            this.#cache.delete(tokenHash);
+        }
+        const active = this.#inFlight.get(tokenHash);
+        if (active !== undefined)
+            return active;
+        const verification = this.#verify(tokenHash).finally(() => {
+            this.#inFlight.delete(tokenHash);
+        });
+        this.#inFlight.set(tokenHash, verification);
+        return verification;
+    }
+    async #verify(tokenHash) {
+        let verification;
+        let source = "api";
+        try {
+            verification = await this.#verifyViaApi(tokenHash);
+        }
+        catch (error) {
+            if (!(error instanceof ApiUnavailableError) ||
+                this.#fallback === undefined) {
+                throw error instanceof ApiUnavailableError
+                    ? new AddonPassUnavailableError()
+                    : error;
+            }
+            let response;
+            try {
+                response = entitlementResponseSchema.parse(await this.#fallback.verify(tokenHash));
+            }
+            catch (fallbackError) {
+                if (fallbackError instanceof EntitlementScopeMismatchError) {
+                    throw fallbackError;
+                }
+                throw new AddonPassUnavailableError();
+            }
+            verification = { cacheTtlMs: this.#cacheTtlMs, response };
+            source = "contract";
+        }
+        if (verification.response.planId !== null &&
+            !this.#allowedPlanIds.has(verification.response.planId)) {
+            throw new EntitlementScopeMismatchError();
+        }
+        const decision = {
+            ...verification.response,
+            cached: false,
+            source,
+        };
+        this.#cacheDecision(tokenHash, decision, verification.cacheTtlMs);
+        return decision;
+    }
+    async #verifyViaApi(tokenHash) {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => {
+            controller.abort();
+        }, this.#requestTimeoutMs);
+        try {
+            let response;
+            try {
+                response = await this.#fetch(this.#apiUrl, {
+                    body: JSON.stringify({ tokenHash }),
+                    headers: {
+                        accept: "application/json",
+                        authorization: `Bearer ${this.#integrationCredential}`,
+                        "content-type": "application/json",
+                    },
+                    method: "POST",
+                    redirect: "error",
+                    signal: controller.signal,
+                });
+            }
+            catch {
+                throw new ApiUnavailableError();
+            }
+            if (response.status === 401 || response.status === 403) {
+                await response.body?.cancel();
+                throw new EntitlementCredentialRejectedError();
+            }
+            if (response.status >= 500) {
+                await response.body?.cancel();
+                throw new ApiUnavailableError();
+            }
+            if (!response.ok) {
+                await response.body?.cancel();
+                throw new EntitlementVerificationError();
+            }
+            let parsed;
+            try {
+                parsed = JSON.parse(await readBoundedBody(response));
+            }
+            catch (error) {
+                if (controller.signal.aborted)
+                    throw new ApiUnavailableError();
+                if (error instanceof EntitlementVerificationError)
+                    throw error;
+                throw new EntitlementVerificationError();
+            }
+            const result = entitlementResponseSchema.safeParse(parsed);
+            if (!result.success)
+                throw new EntitlementVerificationError();
+            return {
+                cacheTtlMs: Math.min(this.#cacheTtlMs, cacheControlTtl(response.headers.get("cache-control"))),
+                response: result.data,
+            };
+        }
+        finally {
+            clearTimeout(timeout);
+        }
+    }
+    #cacheDecision(tokenHash, decision, requestedTtlMs) {
+        const nowMs = this.#now().getTime();
+        const deadlineMs = accessDeadlineMs(decision);
+        const ttlMs = Math.max(0, Math.min(requestedTtlMs, deadlineMs === null ? requestedTtlMs : deadlineMs - nowMs));
+        if (ttlMs === 0)
+            return;
+        while (this.#cache.size >= this.#maxCacheEntries) {
+            const oldest = this.#cache.keys().next().value;
+            if (oldest === undefined)
+                break;
+            this.#cache.delete(oldest);
+        }
+        this.#cache.set(tokenHash, {
+            decision,
+            expiresAtMs: nowMs + ttlMs,
+        });
+    }
+}
+//# sourceMappingURL=verifier.js.map

package/dist/verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../src/verifier.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,kCAAkC,EAClC,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EACL,yBAAyB,GAI1B,MAAM,YAAY,CAAC;AAEpB,MAAM,kBAAkB,GACtB,sDAAsD,CAAC;AACzD,MAAM,oBAAoB,GAAG,KAAK,CAAC;AACnC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AACxC,MAAM,0BAA0B,GAAG,KAAK,CAAC;AACzC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAYlC,MAAM,mBAAoB,SAAQ,KAAK;CAAG;AAE1C,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,SAAS,GACb,GAAG,CAAC,QAAQ,KAAK,OAAO;YACxB,CAAC,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;QACjE,IACE,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC;YACzC,GAAG,CAAC,QAAQ,KAAK,EAAE;YACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;YACnB,GAAG,CAAC,MAAM,KAAK,EAAE;YACjB,GAAG,CAAC,IAAI,KAAK,EAAE,EACf,CAAC;YACD,MAAM,IAAI,2BAA2B,EAAE,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC;QACrD,OAAO,IAAI,GAAG,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,YAAY,2BAA2B;YAAE,MAAM,KAAK,CAAC;QAC9D,MAAM,IAAI,2BAA2B,EAAE,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,KAAyB,EACzB,QAAgB,EAChB,OAAe,EACf,OAAe;IAEf,MAAM,QAAQ,GAAG,KAAK,IAAI,QAAQ,CAAC;IACnC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC;QAC/B,QAAQ,GAAG,OAAO;QAClB,QAAQ,GAAG,OAAO,EAClB,CAAC;QACD,MAAM,IAAI,2BAA2B,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,KAAoB;IAC3C,IAAI,KAAK,KAAK,IAAI,IAAI,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,uCAAuC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAkB;IAC/C,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7D,IAAI,aAAa,KAAK,IAAI,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,kBAAkB,EAAE,CAAC;QACzE,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,4BAA4B,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;QAChC,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;YAC/B,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,4BAA4B,EAAE,CAAC;QAC3C,CAAC;QACD,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,gBAAgB,CAAC,QAA6B;IACrD,MAAM,QAAQ,GACZ,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;IAC1E,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAcD,MAAM,OAAO,iBAAiB;IACnB,eAAe,CAAsB;IACrC,OAAO,CAAM;IACb,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;IACpC,WAAW,CAAS;IACpB,SAAS,CAAkC;IAC3C,MAAM,CAA0B;IAChC,SAAS,GAAG,IAAI,GAAG,EAAqC,CAAC;IACzD,sBAAsB,CAAS;IAC/B,gBAAgB,CAAS;IACzB,IAAI,CAAa;IACjB,iBAAiB,CAAS;IAEnC,YAAY,OAAiC;QAC3C,IAAI,CAAC,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,2BAA2B,EAAE,CAAC;QAC1C,CAAC;QACD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1D,KAAK,CAAC,QAAQ,EAAE,CACjB,CAAC;QACF,IACE,cAAc,CAAC,MAAM,KAAK,CAAC;YAC3B,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAC5D,CAAC;YACD,MAAM,IAAI,2BAA2B,EAAE,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,eAAe,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;QAC/C,IAAI,CAAC,WAAW,GAAG,cAAc,CAC/B,OAAO,CAAC,UAAU,EAClB,oBAAoB,EACpB,CAAC,EACD,gBAAgB,CACjB,CAAC;QACF,IAAI,CAAC,gBAAgB,GAAG,cAAc,CACpC,OAAO,CAAC,eAAe,EACvB,yBAAyB,EACzB,CAAC,EACD,MAAM,CACP,CAAC;QACF,IAAI,CAAC,iBAAiB,GAAG,cAAc,CACrC,OAAO,CAAC,gBAAgB,EACxB,0BAA0B,EAC1B,GAAG,EACH,MAAM,CACP,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAChD,IAAI,CAAC,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,CAAC;QAC5D,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED,UAAU,CAAC,QAAgB;QACzB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAAgB;QAChC,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,MAAM,CAAC,WAAW,GAAG,KAAK,EAAE,CAAC;gBAC/B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC9B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBACnC,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC9C,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACxD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC5C,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAc;QAC1B,IAAI,YAA6B,CAAC;QAClC,IAAI,MAAM,GAAkC,KAAK,CAAC;QAClD,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IACE,CAAC,CAAC,KAAK,YAAY,mBAAmB,CAAC;gBACvC,IAAI,CAAC,SAAS,KAAK,SAAS,EAC5B,CAAC;gBACD,MAAM,KAAK,YAAY,mBAAmB;oBACxC,CAAC,CAAC,IAAI,yBAAyB,EAAE;oBACjC,CAAC,CAAC,KAAK,CAAC;YACZ,CAAC;YACD,IAAI,QAA6B,CAAC;YAClC,IAAI,CAAC;gBACH,QAAQ,GAAG,yBAAyB,CAAC,KAAK,CACxC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CACvC,CAAC;YACJ,CAAC;YAAC,OAAO,aAAsB,EAAE,CAAC;gBAChC,IAAI,aAAa,YAAY,6BAA6B,EAAE,CAAC;oBAC3D,MAAM,aAAa,CAAC;gBACtB,CAAC;gBACD,MAAM,IAAI,yBAAyB,EAAE,CAAC;YACxC,CAAC;YACD,YAAY,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC;YAC1D,MAAM,GAAG,UAAU,CAAC;QACtB,CAAC;QACD,IACE,YAAY,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI;YACrC,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EACvD,CAAC;YACD,MAAM,IAAI,6BAA6B,EAAE,CAAC;QAC5C,CAAC;QACD,MAAM,QAAQ,GAAwB;YACpC,GAAG,YAAY,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK;YACb,MAAM;SACP,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;QAClE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAc;QAChC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC3B,IAAI,CAAC;YACH,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE;oBACzC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;oBACnC,OAAO,EAAE;wBACP,MAAM,EAAE,kBAAkB;wBAC1B,aAAa,EAAE,UAAU,IAAI,CAAC,sBAAsB,EAAE;wBACtD,cAAc,EAAE,kBAAkB;qBACnC;oBACD,MAAM,EAAE,MAAM;oBACd,QAAQ,EAAE,OAAO;oBACjB,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,mBAAmB,EAAE,CAAC;YAClC,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC9B,MAAM,IAAI,kCAAkC,EAAE,CAAC;YACjD,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBAC3B,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC9B,MAAM,IAAI,mBAAmB,EAAE,CAAC;YAClC,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC9B,MAAM,IAAI,4BAA4B,EAAE,CAAC;YAC3C,CAAC;YACD,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,IAAI,mBAAmB,EAAE,CAAC;gBAC/D,IAAI,KAAK,YAAY,4BAA4B;oBAAE,MAAM,KAAK,CAAC;gBAC/D,MAAM,IAAI,4BAA4B,EAAE,CAAC;YAC3C,CAAC;YACD,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,4BAA4B,EAAE,CAAC;YAC9D,OAAO;gBACL,UAAU,EAAE,IAAI,CAAC,GAAG,CAClB,IAAI,CAAC,WAAW,EAChB,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CACvD;gBACD,QAAQ,EAAE,MAAM,CAAC,IAAI;aACtB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,cAAc,CACZ,SAAc,EACd,QAA6B,EAC7B,cAAsB;QAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,CAAC,EACD,IAAI,CAAC,GAAG,CACN,cAAc,EACd,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,GAAG,KAAK,CAC1D,CACF,CAAC;QACF,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO;QACxB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACjD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC/C,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM;YAChC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE;YACzB,QAAQ;YACR,WAAW,EAAE,KAAK,GAAG,KAAK;SAC3B,CAAC,CAAC;IACL,CAAC;CACF"}

package/package.json

@@ -0,0 +1,72 @@
+{
+  "name": "@addon-pass/sdk",
+  "version": "0.1.3",
+  "description": "Fail-closed entitlement middleware for private Stremio add-ons using AddonPass.",
+  "license": "MIT",
+  "type": "module",
+  "sideEffects": false,
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/AddonPass/addonpass-sdk.git"
+  },
+  "bugs": {
+    "url": "https://github.com/AddonPass/addonpass-sdk/issues"
+  },
+  "homepage": "https://github.com/AddonPass/addonpass-sdk#readme",
+  "engines": {
+    "node": ">=22.14.0"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./express": {
+      "types": "./dist/express.d.ts",
+      "import": "./dist/express.js"
+    },
+    "./fastify": {
+      "types": "./dist/fastify.d.ts",
+      "import": "./dist/fastify.js"
+    }
+  },
+  "files": [
+    "dist",
+    "LICENSE",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "check": "npm run typecheck && npm test && npm run build",
+    "prepare": "npm run build",
+    "test": "vitest run",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  },
+  "dependencies": {
+    "viem": "2.56.0",
+    "zod": "4.5.4"
+  },
+  "devDependencies": {
+    "@types/express": "5.0.6",
+    "@types/node": "24.13.3",
+    "express": "5.2.1",
+    "fastify": "5.12.1",
+    "typescript": "5.9.3",
+    "vitest": "4.1.11"
+  },
+  "peerDependencies": {
+    "express": ">=5.2.1 <6",
+    "fastify": ">=5.12.1 <6"
+  },
+  "peerDependenciesMeta": {
+    "express": {
+      "optional": true
+    },
+    "fastify": {
+      "optional": true
+    }
+  }
+}