@etohq/utils 1.5.1-alpha.3 → 1.5.1-alpha.4

package/dist/access-link/case-sensitivity.d.ts

@@ -0,0 +1,14 @@
+export declare const CASE_SENSITIVE_DOMAINS: string[];
+export declare const encodeKey: (text: string) => string;
+export declare const decodeKey: (hash: string) => string;
+export declare const isCaseSensitiveDomain: (domain: string) => boolean;
+export declare const encodeKeyIfCaseSensitive: ({ domain, key, }: {
+    domain: string;
+    key: string;
+}) => string;
+export declare const decodeKeyIfCaseSensitive: ({ domain, key, }: {
+    domain: string;
+    key: string;
+}) => string;
+export declare const decodeLinkIfCaseSensitive: (link: any) => any;
+//# sourceMappingURL=case-sensitivity.d.ts.map

package/dist/access-link/case-sensitivity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"case-sensitivity.d.ts","sourceRoot":"","sources":["../../src/access-link/case-sensitivity.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,sBAAsB,UAElC,CAAA;AAED,eAAO,MAAM,SAAS,GAAI,MAAM,MAAM,KAAG,MAcxC,CAAA;AAED,eAAO,MAAM,SAAS,GAAI,MAAM,MAAM,KAAG,MAcxC,CAAA;AAED,eAAO,MAAM,qBAAqB,GAAI,QAAQ,MAAM,YAEnD,CAAA;AAED,eAAO,MAAM,wBAAwB,GAAI,kBAGtC;IACD,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;CACZ,WAEA,CAAA;AAED,eAAO,MAAM,wBAAwB,GAAI,kBAGtC;IACD,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;CACZ,WAEA,CAAA;AAED,eAAO,MAAM,yBAAyB,GAAI,MAAM,GAAG,QAclD,CAAA"}

package/dist/access-link/case-sensitivity.js

@@ -0,0 +1,57 @@
+"use strict";
+// Case sensitivity utilities for access links (following Dub's pattern)
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeLinkIfCaseSensitive = exports.decodeKeyIfCaseSensitive = exports.encodeKeyIfCaseSensitive = exports.isCaseSensitiveDomain = exports.decodeKey = exports.encodeKey = exports.CASE_SENSITIVE_DOMAINS = void 0;
+const XOR_SECRET_KEY = "58ff90c0dc372ded858cbf8fb2306066";
+exports.CASE_SENSITIVE_DOMAINS = [
+    "invite.app.com", // Add your case-sensitive domains here
+];
+const encodeKey = (text) => {
+    if (!text)
+        return "";
+    const xored = text
+        .split("")
+        .map((char, i) => String.fromCharCode(char.charCodeAt(0) ^
+        XOR_SECRET_KEY.charCodeAt(i % XOR_SECRET_KEY.length)))
+        .join("");
+    return Buffer.from(xored).toString("base64");
+};
+exports.encodeKey = encodeKey;
+const decodeKey = (hash) => {
+    if (!hash)
+        return "";
+    const xored = Buffer.from(hash, "base64").toString();
+    return xored
+        .split("")
+        .map((char, i) => String.fromCharCode(char.charCodeAt(0) ^
+        XOR_SECRET_KEY.charCodeAt(i % XOR_SECRET_KEY.length)))
+        .join("");
+};
+exports.decodeKey = decodeKey;
+const isCaseSensitiveDomain = (domain) => {
+    return exports.CASE_SENSITIVE_DOMAINS.includes(domain);
+};
+exports.isCaseSensitiveDomain = isCaseSensitiveDomain;
+const encodeKeyIfCaseSensitive = ({ domain, key, }) => {
+    return (0, exports.isCaseSensitiveDomain)(domain) ? (0, exports.encodeKey)(key) : key;
+};
+exports.encodeKeyIfCaseSensitive = encodeKeyIfCaseSensitive;
+const decodeKeyIfCaseSensitive = ({ domain, key, }) => {
+    return (0, exports.isCaseSensitiveDomain)(domain) ? (0, exports.decodeKey)(key) : key;
+};
+exports.decodeKeyIfCaseSensitive = decodeKeyIfCaseSensitive;
+const decodeLinkIfCaseSensitive = (link) => {
+    if ((0, exports.isCaseSensitiveDomain)(link.domain)) {
+        const originalKey = (0, exports.decodeKey)(link.key);
+        return {
+            ...link,
+            key: originalKey,
+            ...(link.short_link && {
+                short_link: `https://${link.domain}${originalKey === "_root" ? "" : `/${originalKey}`}`,
+            }),
+        };
+    }
+    return link;
+};
+exports.decodeLinkIfCaseSensitive = decodeLinkIfCaseSensitive;
+//# sourceMappingURL=case-sensitivity.js.map

package/dist/access-link/case-sensitivity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"case-sensitivity.js","sourceRoot":"","sources":["../../src/access-link/case-sensitivity.ts"],"names":[],"mappings":";AAAA,wEAAwE;;;AAExE,MAAM,cAAc,GAAG,kCAAkC,CAAA;AAE5C,QAAA,sBAAsB,GAAG;IACpC,gBAAgB,EAAE,uCAAuC;CAC1D,CAAA;AAEM,MAAM,SAAS,GAAG,CAAC,IAAY,EAAU,EAAE;IAChD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAA;IAEpB,MAAM,KAAK,GAAG,IAAI;SACf,KAAK,CAAC,EAAE,CAAC;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CACf,MAAM,CAAC,YAAY,CACjB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAChB,cAAc,CAAC,UAAU,CAAC,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CACvD,CACF;SACA,IAAI,CAAC,EAAE,CAAC,CAAA;IAEX,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AAC9C,CAAC,CAAA;AAdY,QAAA,SAAS,aAcrB;AAEM,MAAM,SAAS,GAAG,CAAC,IAAY,EAAU,EAAE;IAChD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAA;IAEpB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAA;IAEpD,OAAO,KAAK;SACT,KAAK,CAAC,EAAE,CAAC;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CACf,MAAM,CAAC,YAAY,CACjB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAChB,cAAc,CAAC,UAAU,CAAC,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CACvD,CACF;SACA,IAAI,CAAC,EAAE,CAAC,CAAA;AACb,CAAC,CAAA;AAdY,QAAA,SAAS,aAcrB;AAEM,MAAM,qBAAqB,GAAG,CAAC,MAAc,EAAE,EAAE;IACtD,OAAO,8BAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;AAChD,CAAC,CAAA;AAFY,QAAA,qBAAqB,yBAEjC;AAEM,MAAM,wBAAwB,GAAG,CAAC,EACvC,MAAM,EACN,GAAG,GAIJ,EAAE,EAAE;IACH,OAAO,IAAA,6BAAqB,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAS,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;AAC7D,CAAC,CAAA;AARY,QAAA,wBAAwB,4BAQpC;AAEM,MAAM,wBAAwB,GAAG,CAAC,EACvC,MAAM,EACN,GAAG,GAIJ,EAAE,EAAE;IACH,OAAO,IAAA,6BAAqB,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAS,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;AAC7D,CAAC,CAAA;AARY,QAAA,wBAAwB,4BAQpC;AAEM,MAAM,yBAAyB,GAAG,CAAC,IAAS,EAAE,EAAE;IACrD,IAAI,IAAA,6BAAqB,EAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,IAAA,iBAAS,EAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAEvC,OAAO;YACL,GAAG,IAAI;YACP,GAAG,EAAE,WAAW;YAChB,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI;gBACrB,UAAU,EAAE,WAAW,IAAI,CAAC,MAAM,GAAG,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,EAAE;aACxF,CAAC;SACH,CAAA;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAdY,QAAA,yBAAyB,6BAcrC"}

package/dist/access-link/check-if-key-exists.d.ts

@@ -0,0 +1,7 @@
+export declare const checkIfKeyExists: ({ domain, key, projectId, dataSource, }: {
+    domain: string;
+    key: string;
+    projectId?: string;
+    dataSource: any;
+}) => Promise<any>;
+//# sourceMappingURL=check-if-key-exists.d.ts.map

package/dist/access-link/check-if-key-exists.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-if-key-exists.d.ts","sourceRoot":"","sources":["../../src/access-link/check-if-key-exists.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,gBAAgB,GAAU,yCAKpC;IACD,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,GAAG,CAAA;CAChB,iBAsBA,CAAA"}

package/dist/access-link/check-if-key-exists.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkIfKeyExists = void 0;
+const case_sensitivity_1 = require("./case-sensitivity");
+// Punycode encoding for international characters
+const punyEncode = (key) => {
+    try {
+        return new URL(`http://${key}`).hostname;
+    }
+    catch {
+        return key;
+    }
+};
+const checkIfKeyExists = async ({ domain, key, projectId, dataSource, }) => {
+    const isCaseSensitive = (0, case_sensitivity_1.isCaseSensitiveDomain)(domain);
+    const keyToQuery = isCaseSensitive
+        ? // for case sensitive domains, we need to encode the key
+            (0, case_sensitivity_1.encodeKey)(key)
+        : // for non-case sensitive domains, we need to make sure that the key is always URI-decoded + punycode-encoded
+            punyEncode(decodeURIComponent(key));
+    // Query ETO access_link table
+    const query = projectId
+        ? "SELECT 1 FROM access_link WHERE domain = ? AND key = ? AND project_id = ? AND deleted_at IS NULL LIMIT 1"
+        : "SELECT 1 FROM access_link WHERE domain = ? AND key = ? AND deleted_at IS NULL LIMIT 1";
+    const params = projectId ? [domain, keyToQuery, projectId] : [domain, keyToQuery];
+    try {
+        const result = await dataSource.query(query, params);
+        return result && Array.isArray(result) && result.length > 0;
+    }
+    catch (error) {
+        console.error("Error checking key existence:", error);
+        return false;
+    }
+};
+exports.checkIfKeyExists = checkIfKeyExists;
+//# sourceMappingURL=check-if-key-exists.js.map

package/dist/access-link/check-if-key-exists.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-if-key-exists.js","sourceRoot":"","sources":["../../src/access-link/check-if-key-exists.ts"],"names":[],"mappings":";;;AAAA,yDAAqE;AAErE,iDAAiD;AACjD,MAAM,UAAU,GAAG,CAAC,GAAW,EAAU,EAAE;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAA;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAA;IACZ,CAAC;AACH,CAAC,CAAA;AAEM,MAAM,gBAAgB,GAAG,KAAK,EAAE,EACrC,MAAM,EACN,GAAG,EACH,SAAS,EACT,UAAU,GAMX,EAAE,EAAE;IACH,MAAM,eAAe,GAAG,IAAA,wCAAqB,EAAC,MAAM,CAAC,CAAA;IACrD,MAAM,UAAU,GAAG,eAAe;QAChC,CAAC,CAAC,wDAAwD;YACxD,IAAA,4BAAS,EAAC,GAAG,CAAC;QAChB,CAAC,CAAC,6GAA6G;YAC7G,UAAU,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAA;IAEvC,8BAA8B;IAC9B,MAAM,KAAK,GAAG,SAAS;QACrB,CAAC,CAAC,0GAA0G;QAC5G,CAAC,CAAC,uFAAuF,CAAA;IAE3F,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IAEjF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACpD,OAAO,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAA;QACrD,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC,CAAA;AAhCY,QAAA,gBAAgB,oBAgC5B"}

package/dist/access-link/index.d.ts

@@ -0,0 +1,11 @@
+export * from "./link-utils";
+export * from "./case-sensitivity";
+export * from "./transform-link";
+export * from "./validation-utils";
+export * from "./process-utils";
+export * from "./process-key";
+export * from "./key-checks";
+export * from "./check-if-key-exists";
+export * from "./url-detection";
+export * from "./link-resolution";
+//# sourceMappingURL=index.d.ts.map

package/dist/access-link/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/access-link/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAA;AAC5B,cAAc,oBAAoB,CAAA;AAClC,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,cAAc,uBAAuB,CAAA;AACrC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,mBAAmB,CAAA"}

package/dist/access-link/index.js

@@ -0,0 +1,27 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./link-utils"), exports);
+__exportStar(require("./case-sensitivity"), exports);
+__exportStar(require("./transform-link"), exports);
+__exportStar(require("./validation-utils"), exports);
+__exportStar(require("./process-utils"), exports);
+__exportStar(require("./process-key"), exports);
+__exportStar(require("./key-checks"), exports);
+__exportStar(require("./check-if-key-exists"), exports);
+__exportStar(require("./url-detection"), exports);
+__exportStar(require("./link-resolution"), exports);
+//# sourceMappingURL=index.js.map

package/dist/access-link/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/access-link/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA4B;AAC5B,qDAAkC;AAClC,mDAAgC;AAChC,qDAAkC;AAClC,kDAA+B;AAC/B,gDAA6B;AAC7B,+CAA4B;AAC5B,wDAAqC;AACrC,kDAA+B;AAC/B,oDAAiC"}

package/dist/access-link/key-checks.d.ts

@@ -0,0 +1,12 @@
+export interface KeyCheckResult {
+    error: string | null;
+    code?: 'forbidden' | 'conflict' | 'invalid';
+}
+export declare function keyChecks({ domain, key, projectId, dataSource, checkExisting, }: {
+    domain: string;
+    key: string;
+    projectId?: string;
+    dataSource?: any;
+    checkExisting?: boolean;
+}): Promise<KeyCheckResult>;
+//# sourceMappingURL=key-checks.d.ts.map

package/dist/access-link/key-checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-checks.d.ts","sourceRoot":"","sources":["../../src/access-link/key-checks.ts"],"names":[],"mappings":"AAgCA,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,IAAI,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG,SAAS,CAAA;CAC5C;AAED,wBAAsB,SAAS,CAAC,EAC9B,MAAM,EACN,GAAG,EACH,SAAS,EACT,UAAU,EACV,aAAoB,GACrB,EAAE;IACD,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,GAAG,CAAA;IAChB,aAAa,CAAC,EAAE,OAAO,CAAA;CACxB,GAAG,OAAO,CAAC,cAAc,CAAC,CAoD1B"}

package/dist/access-link/key-checks.js

@@ -0,0 +1,78 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.keyChecks = keyChecks;
+const check_if_key_exists_1 = require("./check-if-key-exists");
+// Key validation checks for ETO access links (following Dub's key-checks pattern)
+// Reserved keys that cannot be used globally
+const RESERVED_KEYS_GLOBAL = new Set([
+    'api', 'app', 'www', 'mail', 'ftp', 'admin', 'root', 'dashboard',
+    'analytics', 'settings', 'billing', 'support', 'help', 'docs', 'blog',
+    'status', 'legal', 'privacy', 'terms', 'security', 'contact', 'about',
+    'login', 'signup', 'register', 'auth', 'oauth', 'callback', 'webhook',
+    'health', 'ping', 'metrics', 'monitoring', 'logs', 'debug'
+]);
+// ETO-specific reserved keys
+const RESERVED_KEYS_ETO = new Set([
+    'access', 'grant', 'approve', 'reject', 'invite', 'join', 'share',
+    'link', 'links', 'project', 'projects', 'workspace', 'workspaces',
+    'tenant', 'tenants', 'resource', 'resources', 'permission', 'permissions'
+]);
+const isReservedKeyGlobal = (key) => {
+    return RESERVED_KEYS_GLOBAL.has(key.toLowerCase());
+};
+const isReservedKeyETO = (key) => {
+    return RESERVED_KEYS_ETO.has(key.toLowerCase());
+};
+const isETODomain = (domain) => {
+    return domain.includes('eto.') || domain.includes('shopabox.');
+};
+async function keyChecks({ domain, key, projectId, dataSource, checkExisting = true, }) {
+    // Root domain check - always allowed for ETO (no plan restrictions)
+    if (key.length === 0 || key === "_root") {
+        return { error: null };
+    }
+    // Global reserved key check
+    if (isReservedKeyGlobal(key)) {
+        return {
+            error: `"${key}" is a reserved keyword and cannot be used.`,
+            code: 'forbidden'
+        };
+    }
+    // ETO domain specific checks
+    if (isETODomain(domain) && isReservedKeyETO(key)) {
+        return {
+            error: `"${key}" is reserved for ETO system use and cannot be used.`,
+            code: 'forbidden'
+        };
+    }
+    // Key length validation
+    if (key.length > 100) {
+        return {
+            error: 'Key cannot be longer than 100 characters.',
+            code: 'invalid'
+        };
+    }
+    // Database check for existing keys
+    if (checkExisting && dataSource) {
+        try {
+            const exists = await (0, check_if_key_exists_1.checkIfKeyExists)({
+                domain,
+                key,
+                projectId,
+                dataSource
+            });
+            if (exists) {
+                return {
+                    error: `Key "${key}" already exists for this domain.`,
+                    code: 'conflict'
+                };
+            }
+        }
+        catch (error) {
+            console.error("Error checking key existence:", error);
+            // Don't fail the validation if DB check fails
+        }
+    }
+    return { error: null };
+}
+//# sourceMappingURL=key-checks.js.map

package/dist/access-link/key-checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-checks.js","sourceRoot":"","sources":["../../src/access-link/key-checks.ts"],"names":[],"mappings":";;AAqCA,8BAgEC;AArGD,+DAAwD;AAExD,kFAAkF;AAElF,6CAA6C;AAC7C,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW;IAChE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IACrE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO;IACrE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS;IACrE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO;CAC3D,CAAC,CAAA;AAEF,6BAA6B;AAC7B,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO;IACjE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY;IACjE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa;CAC1E,CAAC,CAAA;AAEF,MAAM,mBAAmB,GAAG,CAAC,GAAW,EAAW,EAAE;IACnD,OAAO,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAA;AACpD,CAAC,CAAA;AAED,MAAM,gBAAgB,GAAG,CAAC,GAAW,EAAW,EAAE;IAChD,OAAO,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAA;AACjD,CAAC,CAAA;AAED,MAAM,WAAW,GAAG,CAAC,MAAc,EAAW,EAAE;IAC9C,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AAChE,CAAC,CAAA;AAOM,KAAK,UAAU,SAAS,CAAC,EAC9B,MAAM,EACN,GAAG,EACH,SAAS,EACT,UAAU,EACV,aAAa,GAAG,IAAI,GAOrB;IACC,oEAAoE;IACpE,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACxB,CAAC;IAED,4BAA4B;IAC5B,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,KAAK,EAAE,IAAI,GAAG,6CAA6C;YAC3D,IAAI,EAAE,WAAW;SAClB,CAAA;IACH,CAAC;IAED,6BAA6B;IAC7B,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO;YACL,KAAK,EAAE,IAAI,GAAG,sDAAsD;YACpE,IAAI,EAAE,WAAW;SAClB,CAAA;IACH,CAAC;IAED,wBAAwB;IACxB,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACrB,OAAO;YACL,KAAK,EAAE,2CAA2C;YAClD,IAAI,EAAE,SAAS;SAChB,CAAA;IACH,CAAC;IAED,mCAAmC;IACnC,IAAI,aAAa,IAAI,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,sCAAgB,EAAC;gBACpC,MAAM;gBACN,GAAG;gBACH,SAAS;gBACT,UAAU;aACX,CAAC,CAAA;YACF,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO;oBACL,KAAK,EAAE,QAAQ,GAAG,mCAAmC;oBACrD,IAAI,EAAE,UAAU;iBACjB,CAAA;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAA;YACrD,8CAA8C;QAChD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AACxB,CAAC"}

package/dist/access-link/link-resolution.d.ts

@@ -0,0 +1,26 @@
+/**
+ * A/B test variant resolution following Dub's resolveABTestURL exact implementation
+ */
+export declare function resolveABTestVariant(testVariants?: Array<{
+    url: string;
+    percentage: number;
+}>, testCompletedAt?: Date): string | null;
+/**
+ * Get final URL following Dub's getFinalUrl exact pattern
+ */
+export declare function getFinalUrl(originalUrl: string, options: {
+    clickId?: string;
+    via?: string;
+    userAgent?: string;
+    ip?: string;
+    noTrack?: boolean;
+    shortLink?: string;
+}): string;
+/**
+ * Device targeting resolution following Dub's iOS/Android redirect exact pattern
+ */
+export declare function resolveDeviceTargeting(iosUrl?: string, androidUrl?: string, userAgent?: string): {
+    url: string;
+    isAppStore: boolean;
+} | null;
+//# sourceMappingURL=link-resolution.d.ts.map

package/dist/access-link/link-resolution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-resolution.d.ts","sourceRoot":"","sources":["../../src/access-link/link-resolution.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,YAAY,CAAC,EAAE,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,EACzD,eAAe,CAAC,EAAE,IAAI,GACrB,MAAM,GAAG,IAAI,CAuCf;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE;IACP,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,GACA,MAAM,CA4CR;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,CAAC,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,MAAM,EACnB,SAAS,CAAC,EAAE,MAAM,GACjB;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAwB7C"}

package/dist/access-link/link-resolution.js

@@ -0,0 +1,111 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveABTestVariant = resolveABTestVariant;
+exports.getFinalUrl = getFinalUrl;
+exports.resolveDeviceTargeting = resolveDeviceTargeting;
+const url_detection_1 = require("./url-detection");
+/**
+ * A/B test variant resolution following Dub's resolveABTestURL exact implementation
+ */
+function resolveABTestVariant(testVariants, testCompletedAt) {
+    try {
+        // Following Dub's exact validation logic
+        if (!testVariants || !testCompletedAt || !(new Date(testCompletedAt) > new Date())) {
+            return null;
+        }
+        // Following Dub's MAX_TEST_COUNT = 4, min 2 variants
+        if (testVariants.length < 2 || testVariants.length > 4) {
+            console.error(`Invalid test count: ${testVariants.length} for link.`);
+            return null;
+        }
+        // Following Dub's weighted random selection algorithm exactly
+        let i = 0;
+        const weights = [testVariants[0].percentage];
+        // Calculate cumulative weights
+        for (i = 1; i < testVariants.length; ++i) {
+            weights[i] = testVariants[i].percentage + weights[i - 1];
+        }
+        // Generate a random number between 0 and the total cumulative weight
+        const random = Math.random() * weights[weights.length - 1];
+        // Loop through cumulative weights and stop when we've found the first one greater than `random`
+        for (i = 0; i < weights.length; ++i) {
+            if (weights[i] > random) {
+                break;
+            }
+        }
+        console.log("Found test variant", testVariants[i]);
+        return testVariants[i].url;
+    }
+    catch (e) {
+        console.error("Error resolving AB test URL.", e);
+        return null;
+    }
+}
+/**
+ * Get final URL following Dub's getFinalUrl exact pattern
+ */
+function getFinalUrl(originalUrl, options) {
+    try {
+        const urlObj = new URL(originalUrl);
+        // Add via parameter (following Dub's pattern)
+        if (options.via) {
+            urlObj.searchParams.set("via", options.via);
+        }
+        // Add click ID for tracking (following Dub's exact logic)
+        if (options.clickId) {
+            // ETO equivalent of Dub's Stripe integration check
+            if (urlObj.searchParams.get("eto_client_reference_id") === "1") {
+                urlObj.searchParams.set("client_reference_id", `eto_id_${options.clickId}`);
+                urlObj.searchParams.delete("eto_client_reference_id");
+            }
+            else if (!options.noTrack) {
+                // Following Dub's dub-no-track pattern
+                urlObj.searchParams.set("eto_id", options.clickId);
+            }
+        }
+        // For Singular tracking links (following Dub's exact pattern)
+        if ((0, url_detection_1.isSingularTrackingUrl)(originalUrl)) {
+            urlObj.searchParams.set("cl", options.clickId || "");
+            urlObj.searchParams.set("ua", options.userAgent || "");
+            urlObj.searchParams.set("ip", options.ip || "");
+        }
+        // For Google Play Store links (following Dub's exact pattern)
+        if ((0, url_detection_1.isGooglePlayStoreUrl)(originalUrl) && options.shortLink) {
+            const existingReferrer = urlObj.searchParams.get("referrer");
+            const referrerSearchParam = new URLSearchParams(existingReferrer ? decodeURIComponent(existingReferrer) : "");
+            referrerSearchParam.set("deepLink", options.shortLink);
+            urlObj.searchParams.set("referrer", referrerSearchParam.toString());
+        }
+        return urlObj.toString();
+    }
+    catch (error) {
+        console.error("Error constructing final URL:", error);
+        return originalUrl;
+    }
+}
+/**
+ * Device targeting resolution following Dub's iOS/Android redirect exact pattern
+ */
+function resolveDeviceTargeting(iosUrl, androidUrl, userAgent) {
+    if (!userAgent)
+        return null;
+    // Following Dub's exact OS detection from userAgent(req)
+    const isIOS = /iPhone|iPad|iPod/i.test(userAgent);
+    const isAndroid = /Android/i.test(userAgent);
+    // iOS targeting (following Dub's ios && ua.os?.name === "iOS" pattern)
+    if (isIOS && iosUrl) {
+        return {
+            url: iosUrl,
+            isAppStore: (0, url_detection_1.isIosAppStoreUrl)(iosUrl)
+        };
+    }
+    // Android targeting (following Dub's android && ua.os?.name === "Android" pattern)
+    if (isAndroid && androidUrl) {
+        return {
+            url: androidUrl,
+            isAppStore: (0, url_detection_1.isGooglePlayStoreUrl)(androidUrl)
+        };
+    }
+    return null;
+}
+//# sourceMappingURL=link-resolution.js.map

package/dist/access-link/link-resolution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-resolution.js","sourceRoot":"","sources":["../../src/access-link/link-resolution.ts"],"names":[],"mappings":";;AAKA,oDA0CC;AAKD,kCAsDC;AAKD,wDA4BC;AA3ID,mDAA+F;AAE/F;;GAEG;AACH,SAAgB,oBAAoB,CAClC,YAAyD,EACzD,eAAsB;IAEtB,IAAI,CAAC;QACH,yCAAyC;QACzC,IAAI,CAAC,YAAY,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YACnF,OAAO,IAAI,CAAA;QACb,CAAC;QAED,qDAAqD;QACrD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvD,OAAO,CAAC,KAAK,CAAC,uBAAuB,YAAY,CAAC,MAAM,YAAY,CAAC,CAAA;YACrE,OAAO,IAAI,CAAA;QACb,CAAC;QAED,8DAA8D;QAC9D,IAAI,CAAC,GAAG,CAAC,CAAA;QACT,MAAM,OAAO,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;QAE5C,+BAA+B;QAC/B,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1D,CAAC;QAED,qEAAqE;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QAE1D,gGAAgG;QAChG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,CAAC;gBACxB,MAAK;YACP,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAA;QAClD,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;IAE5B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAA;QAChD,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CACzB,WAAmB,EACnB,OAOC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAA;QAEnC,8CAA8C;QAC9C,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;QAC7C,CAAC;QAED,0DAA0D;QAC1D,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,mDAAmD;YACnD,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,yBAAyB,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC/D,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,qBAAqB,EAAE,UAAU,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;gBAC3E,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAA;YACvD,CAAC;iBAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC5B,uCAAuC;gBACvC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;YACpD,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,IAAI,IAAA,qCAAqB,EAAC,WAAW,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAA;YACpD,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;YACtD,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACjD,CAAC;QAED,8DAA8D;QAC9D,IAAI,IAAA,oCAAoB,EAAC,WAAW,CAAC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YAC3D,MAAM,gBAAgB,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YAE5D,MAAM,mBAAmB,GAAG,IAAI,eAAe,CAC7C,gBAAgB,CAAC,CAAC,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAC7D,CAAA;YACD,mBAAmB,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;YACtD,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,mBAAmB,CAAC,QAAQ,EAAE,CAAC,CAAA;QACrE,CAAC;QAED,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAA;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAA;QACrD,OAAO,WAAW,CAAA;IACpB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,sBAAsB,CACpC,MAAe,EACf,UAAmB,EACnB,SAAkB;IAElB,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA;IAE3B,yDAAyD;IACzD,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACjD,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAE5C,uEAAuE;IACvE,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;QACpB,OAAO;YACL,GAAG,EAAE,MAAM;YACX,UAAU,EAAE,IAAA,gCAAgB,EAAC,MAAM,CAAC;SACrC,CAAA;IACH,CAAC;IAED,mFAAmF;IACnF,IAAI,SAAS,IAAI,UAAU,EAAE,CAAC;QAC5B,OAAO;YACL,GAAG,EAAE,UAAU;YACf,UAAU,EAAE,IAAA,oCAAoB,EAAC,UAAU,CAAC;SAC7C,CAAA;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/access-link/link-utils.d.ts

@@ -0,0 +1,23 @@
+export declare const nanoid: (chars?: number) => Promise<any>;
+export declare function getRandomKey({ domain, length, prefix, checkExists, }: {
+    domain: string;
+    length?: number;
+    prefix?: string;
+    checkExists: (domain: string, key: string) => Promise<boolean>;
+}): Promise<string>;
+export declare function extractUTMParams(url?: string): {
+    utm_source?: undefined;
+    utm_medium?: undefined;
+    utm_campaign?: undefined;
+    utm_term?: undefined;
+    utm_content?: undefined;
+} | {
+    utm_source: string | undefined;
+    utm_medium: string | undefined;
+    utm_campaign: string | undefined;
+    utm_term: string | undefined;
+    utm_content: string | undefined;
+};
+export declare function buildShortLink(domain: string, key: string): string;
+export declare function hashPassword(password: string): Promise<string>;
+//# sourceMappingURL=link-utils.d.ts.map

package/dist/access-link/link-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-utils.d.ts","sourceRoot":"","sources":["../../src/access-link/link-utils.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,MAAM,GAAU,QAAQ,MAAM,iBAO1C,CAAA;AAGD,wBAAsB,YAAY,CAAC,EACjC,MAAM,EACN,MAAU,EACV,MAAM,EACN,WAAW,GACZ,EAAE;IACD,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAC/D,GAAG,OAAO,CAAC,MAAM,CAAC,CAelB;AAED,wBAAgB,gBAAgB,CAAC,GAAG,CAAC,EAAE,MAAM;;;;;;;;;;;;EAe5C;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAElE;AAED,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOpE"}

package/dist/access-link/link-utils.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.nanoid = void 0;
+exports.getRandomKey = getRandomKey;
+exports.extractUTMParams = extractUTMParams;
+exports.buildShortLink = buildShortLink;
+exports.hashPassword = hashPassword;
+let customAlphabet;
+// Dub's exact nanoid implementation
+const nanoid = async (chars) => {
+    if (!customAlphabet)
+        ({ customAlphabet } = await import("nanoid"));
+    return customAlphabet("customAlphabet", chars || 7 // 7-character random string by default
+    )();
+};
+exports.nanoid = nanoid;
+// Dub's exact getRandomKey pattern
+async function getRandomKey({ domain, length = 7, prefix, checkExists, }) {
+    /* recursively get random key till it gets one that's available */
+    let key = await (0, exports.nanoid)(length);
+    if (prefix) {
+        key = `${prefix.replace(/^\/|\/$/g, "")}/${key}`;
+    }
+    const exists = await checkExists(domain, key);
+    if (exists) {
+        // by the off chance that key already exists
+        return getRandomKey({ domain, length, prefix, checkExists });
+    }
+    else {
+        return key;
+    }
+}
+function extractUTMParams(url) {
+    if (!url)
+        return {};
+    try {
+        const urlObj = new URL(url);
+        return {
+            utm_source: urlObj.searchParams.get("utm_source") || undefined,
+            utm_medium: urlObj.searchParams.get("utm_medium") || undefined,
+            utm_campaign: urlObj.searchParams.get("utm_campaign") || undefined,
+            utm_term: urlObj.searchParams.get("utm_term") || undefined,
+            utm_content: urlObj.searchParams.get("utm_content") || undefined,
+        };
+    }
+    catch {
+        return {};
+    }
+}
+function buildShortLink(domain, key) {
+    return `${domain}/${key}`;
+}
+async function hashPassword(password) {
+    // Simple hash for now - in production use bcrypt
+    const encoder = new TextEncoder();
+    const data = encoder.encode(password);
+    const hashBuffer = await crypto.subtle.digest("SHA-256", data);
+    const hashArray = Array.from(new Uint8Array(hashBuffer));
+    return hashArray.map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+//# sourceMappingURL=link-utils.js.map

package/dist/access-link/link-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-utils.js","sourceRoot":"","sources":["../../src/access-link/link-utils.ts"],"names":[],"mappings":";;;AAaA,oCAyBC;AAED,4CAeC;AAED,wCAEC;AAED,oCAOC;AApED,IAAI,cAAc,CAAA;AAElB,oCAAoC;AAC7B,MAAM,MAAM,GAAG,KAAK,EAAE,KAAc,EAAE,EAAE;IAC3C,IAAI,CAAC,cAAc;QACnB,CAAC,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC/C,OAAO,cAAc,CACnB,gBAAgB,EAChB,KAAK,IAAI,CAAC,CAAC,uCAAuC;KACnD,EAAE,CAAA;AACL,CAAC,CAAA;AAPY,QAAA,MAAM,UAOlB;AAED,mCAAmC;AAC5B,KAAK,UAAU,YAAY,CAAC,EACjC,MAAM,EACN,MAAM,GAAG,CAAC,EACV,MAAM,EACN,WAAW,GAMZ;IACC,kEAAkE;IAClE,IAAI,GAAG,GAAG,MAAM,IAAA,cAAM,EAAC,MAAM,CAAC,CAAA;IAC9B,IAAI,MAAM,EAAE,CAAC;QACX,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,GAAG,EAAE,CAAA;IAClD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAE7C,IAAI,MAAM,EAAE,CAAC;QACX,4CAA4C;QAC5C,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;IAC9D,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,CAAA;IACZ,CAAC;AACH,CAAC;AAED,SAAgB,gBAAgB,CAAC,GAAY;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAA;IAEnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QAC3B,OAAO;YACL,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS;YAC9D,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS;YAC9D,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS;YAClE,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS;YAC1D,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,SAAS;SACjE,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,SAAgB,cAAc,CAAC,MAAc,EAAE,GAAW;IACxD,OAAO,GAAG,MAAM,IAAI,GAAG,EAAE,CAAA;AAC3B,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,iDAAiD;IACjD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACrC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC9D,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,CAAA;IACxD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACvE,CAAC"}

package/dist/access-link/process-key.d.ts

@@ -0,0 +1,5 @@
+export declare function processKey({ domain, key }: {
+    domain: string;
+    key: string;
+}): string | null;
+//# sourceMappingURL=process-key.d.ts.map

package/dist/access-link/process-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-key.d.ts","sourceRoot":"","sources":["../../src/access-link/process-key.ts"],"names":[],"mappings":"AA6BA,wBAAgB,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,IAAI,CAoC1F"}

package/dist/access-link/process-key.js

@@ -0,0 +1,58 @@
+"use strict";
+// Process and validate access link keys (following Dub's process-key pattern)
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.processKey = processKey;
+const validKeyRegex = /^[a-zA-Z0-9\-_.~:/?#[\]@!$&'()*+,;=%]+$/;
+// ETO domains that require stricter key validation
+const isETODomain = (domain) => {
+    return domain.includes('eto.') || domain.includes('shopabox.');
+};
+// Keys that are reserved/unsupported
+const unsupportedKeys = new Set([
+    'api', 'app', 'admin', 'www', 'mail', 'ftp', 'localhost', 'dashboard',
+    'analytics', 'settings', 'billing', 'support', 'help', 'docs', 'blog',
+    'status', 'legal', 'privacy', 'terms', 'security', 'contact'
+]);
+const isUnsupportedKey = (key) => {
+    return unsupportedKeys.has(key.toLowerCase());
+};
+// Punycode encoding for international characters
+const punyEncode = (key) => {
+    try {
+        return new URL(`http://${key}`).hostname;
+    }
+    catch {
+        return key;
+    }
+};
+function processKey({ domain, key }) {
+    // Skip if root domain
+    if (key === "_root") {
+        return key;
+    }
+    if (!validKeyRegex.test(key)) {
+        return null;
+    }
+    // if key starts with _, return null (reserved route for ETO internals)
+    if (key.startsWith("_")) {
+        return null;
+    }
+    // check if key is supported
+    if (isUnsupportedKey(key)) {
+        return null;
+    }
+    // remove all leading and trailing slashes from key
+    key = key.replace(/^\/+|\/+$/g, "");
+    /*
+      for ETO domains, remove all special characters + unicode normalization
+      to remove accents / diacritical marks. this is to prevent phishing/typo squatting
+      for custom domains this is fine, since only the project can set the key
+    */
+    if (isETODomain(domain)) {
+        key = key.normalize("NFD").replace(/[\u0300-\u036f]/g, "");
+    }
+    // encode the key to ascii
+    key = punyEncode(key);
+    return key;
+}
+//# sourceMappingURL=process-key.js.map

package/dist/access-link/process-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-key.js","sourceRoot":"","sources":["../../src/access-link/process-key.ts"],"names":[],"mappings":";AAAA,8EAA8E;;AA6B9E,gCAoCC;AA/DD,MAAM,aAAa,GAAG,yCAAyC,CAAA;AAE/D,mDAAmD;AACnD,MAAM,WAAW,GAAG,CAAC,MAAc,EAAW,EAAE;IAC9C,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AAChE,CAAC,CAAA;AAED,qCAAqC;AACrC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW;IACrE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IACrE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS;CAC7D,CAAC,CAAA;AAEF,MAAM,gBAAgB,GAAG,CAAC,GAAW,EAAW,EAAE;IAChD,OAAO,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAA;AAC/C,CAAC,CAAA;AAED,iDAAiD;AACjD,MAAM,UAAU,GAAG,CAAC,GAAW,EAAU,EAAE;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAA;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAA;IACZ,CAAC;AACH,CAAC,CAAA;AAED,SAAgB,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,EAAmC;IACzE,sBAAsB;IACtB,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,uEAAuE;IACvE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,4BAA4B;IAC5B,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,mDAAmD;IACnD,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;IAEnC;;;;MAIE;IACF,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAA;IAC5D,CAAC;IAED,0BAA0B;IAC1B,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;IAErB,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/access-link/process-utils.d.ts

@@ -0,0 +1,19 @@
+export interface ProcessAccessLinkOptions {
+    domain?: string;
+    key?: string;
+    url?: string;
+    target_resource_type?: string;
+    target_resource_id?: string;
+    access_role?: string;
+    purpose?: string;
+    max_uses?: number;
+    expires_at?: Date;
+    auto_approve?: boolean;
+    requires_approval?: boolean;
+    password_protected?: boolean;
+}
+export declare function processAccessLink(data: ProcessAccessLinkOptions, options?: {
+    skipKeyValidation?: boolean;
+    skipUrlValidation?: boolean;
+}): Promise<any>;
+//# sourceMappingURL=process-utils.d.ts.map

package/dist/access-link/process-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-utils.d.ts","sourceRoot":"","sources":["../../src/access-link/process-utils.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,IAAI,CAAA;IACjB,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAC7B;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,wBAAwB,EAC9B,OAAO,GAAE;IACP,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,iBAAiB,CAAC,EAAE,OAAO,CAAA;CACvB,gBAsDP"}