@netloc8/netloc8-js 0.1.0

package/README.md

@@ -0,0 +1,71 @@
+# @netloc8/netloc8-js
+
+Zero-dependency core library for the NetLoc8 geolocation SDK. Provides the
+API client, IP detection, platform header parsing, cookie management,
+and geo-source reconciliation.
+
+> **Tip:** If you're using Next.js, install [`@netloc8/nextjs`](../nextjs/)
+> instead — it re-exports everything from this package. For React SPAs,
+> see [`@netloc8/react`](../react/).
+
+## Install
+
+```bash
+bun add @netloc8/netloc8-js
+```
+
+## Usage
+
+### Fetch geo data for an IP
+
+```typescript
+import { fetchGeo } from '@netloc8/netloc8-js';
+
+const geo = await fetchGeo( '203.0.113.42', {
+    apiKey: 'sk_...',
+} );
+
+console.log( geo );
+// { ip, country, region, city, timezone, ... }
+```
+
+### Fetch only the timezone
+
+```typescript
+import { fetchTimezone } from '@netloc8/netloc8-js';
+
+const tz = await fetchTimezone( '203.0.113.42', {
+    apiKey: 'sk_...',
+} );
+
+console.log( tz ); // "America/Chicago"
+```
+
+### Client-side (browser) — fetch for the caller's own IP
+
+```typescript
+import { fetchMyGeo, fetchMyTimezone } from '@netloc8/netloc8-js';
+
+const geo = await fetchMyGeo( { apiKey: 'pk_...' } );
+const tz  = await fetchMyTimezone( { apiKey: 'pk_...' } );
+```
+
+## Exports
+
+| Export | Description |
+|--------|-------------|
+| `fetchGeo` | Full geo lookup by IP |
+| `fetchTimezone` | Timezone-only lookup by IP |
+| `fetchMyGeo` | Full geo lookup for the caller's own IP (browser) |
+| `fetchMyTimezone` | Timezone-only lookup for the caller's own IP (browser) |
+| `getClientIp` | Extract client IP from request headers |
+| `isPublicIp` | Check whether an IP is publicly routable |
+| `getGeoFromPlatformHeaders` | Parse Vercel / Cloudflare / CloudFront geo headers |
+| `parseCookie` / `serializeCookie` | Read/write the `__netloc8` cookie |
+| `reconcileGeo` | Merge cookie, platform, and API geo sources |
+| `normalizeApiResponse` | Normalize raw API JSON into a `Geo` object |
+| `Geo` (type) | The shared geolocation type used across all packages |
+
+## License
+
+[Elastic License 2.0 (ELv2)](../../LICENSE)

package/dist/index.d.mts

@@ -0,0 +1,147 @@
+//#region src/types.d.ts
+interface Geo {
+  ip?: string;
+  ipVersion?: number;
+  continent?: string;
+  continentName?: string;
+  country?: string;
+  countryName?: string;
+  isEU?: boolean;
+  region?: string;
+  regionName?: string;
+  city?: string;
+  postalCode?: string;
+  latitude?: number;
+  longitude?: number;
+  timezone?: string;
+  accuracyRadius?: number;
+  precision?: string;
+  isLimited?: boolean;
+  limitReason?: string;
+  timezoneFromClient?: boolean;
+}
+interface FetchGeoOptions {
+  apiKey?: string;
+  apiUrl?: string;
+  timeout?: number;
+  clientId?: string;
+}
+interface CookieOptions {
+  path?: string;
+  httpOnly?: boolean;
+  secure?: boolean;
+  sameSite?: "strict" | "lax" | "none";
+  maxAge?: number;
+}
+//#endregion
+//#region src/api.d.ts
+/**
+* Fetch geolocation data for an IP address from the NetLoc8 API.
+*
+* Returns the raw API JSON or null on error/timeout.
+* Never throws — errors are swallowed with a console.warn for debugging.
+*/
+declare function fetchGeo(ipAddress: string, options?: FetchGeoOptions): Promise<Record<string, unknown> | null>;
+/**
+* Fetch only the timezone for an IP address.
+*
+* Returns the IANA timezone string or null.
+*/
+declare function fetchTimezone(ipAddress: string, options?: FetchGeoOptions): Promise<string | null>;
+/**
+* Fetch geolocation data for the caller's own IP from the NetLoc8 API.
+*
+* Calls GET /api/v1/ip/me which auto-detects the caller's IP and returns
+* the full Geo response. Intended for browser-side usage with a publishable
+* key (pk_).
+*
+* Returns the raw API JSON or null on error/timeout.
+* Never throws — errors are swallowed with a console.warn for debugging.
+*/
+declare function fetchMyGeo(options?: FetchGeoOptions): Promise<Record<string, unknown> | null>;
+/**
+* Fetch only the timezone for the caller's own IP.
+*
+* Calls GET /api/v1/ip/me/timezone which auto-detects the caller's IP.
+* Intended for browser-side usage with a publishable key (pk_).
+*
+* Returns the IANA timezone string or null.
+*/
+declare function fetchMyTimezone(options?: FetchGeoOptions): Promise<string | null>;
+//#endregion
+//#region src/ip.d.ts
+/**
+* Normalize an IP string: strip ::ffff: prefix, brackets, lowercase.
+*/
+declare function normalizeIp(ip: string | undefined): string | undefined;
+/**
+* Return true if the IP is publicly routable
+* (not RFC1918, loopback, link-local, CGNAT, ULA).
+*/
+declare function isPublicIp(ip: string): boolean;
+/**
+* Determine the most likely real client IP from request headers.
+* Returns the first public IP found in the priority chain.
+*/
+declare function getClientIp(headers: Headers): string | undefined;
+//#endregion
+//#region src/platform.d.ts
+/**
+* Extract geo information from platform/CDN request headers.
+* Supports Vercel, Cloudflare, and CloudFront.
+*
+* Returns a partial Geo object — fields not provided by the platform are absent.
+*/
+declare function getGeoFromPlatformHeaders(headers: Headers): Partial<Geo>;
+//#endregion
+//#region src/cookie.d.ts
+/** Cookie name used by the plugin. */
+declare const COOKIE_NAME = "__netloc8_geo";
+/** Default cookie options. `secure` is disabled in development for http://localhost. */
+declare const COOKIE_OPTIONS: CookieOptions;
+/**
+* Serialize a Geo object into a cookie value string (JSON, URI-encoded).
+*/
+declare function serializeCookie(geo: Geo): string;
+/**
+* Parse a cookie value string back into a Geo object.
+* Returns an empty object if corrupt or unparseable.
+*/
+declare function parseCookie(value: string | undefined): Partial<Geo>;
+//#endregion
+//#region src/normalize.d.ts
+/**
+* Normalize a NetLoc8 API response into the SDK's Geo type.
+*
+* The API returns a flat structure that matches Geo closely.
+* This function copies the fields and adds timezoneFromClient.
+*/
+declare function normalizeApiResponse(raw: Record<string, unknown>, ip?: string): Geo;
+//#endregion
+//#region src/reconcile.d.ts
+interface ReconcileSources {
+  cookie?: Partial<Geo>;
+  platform?: Partial<Geo>;
+  api?: Partial<Geo>;
+  ip?: string;
+}
+/**
+* Merge geo data from multiple sources into a single authoritative Geo object.
+*
+* Source priority (highest to lowest):
+*   1. Fresh API response  (most complete)
+*   2. Platform headers  (zero-cost, may be partial)
+*   3. Cookie (including timezoneFromClient)  (stale, client-controlled)
+*
+* Cookie location fields are never treated as fully authoritative; they are
+* only used as a fallback when no better data is available. The browser-
+* confirmed timezone (`timezoneFromClient`) is trusted when the IP matches.
+*/
+declare function reconcileGeo(sources: ReconcileSources): Geo;
+//#endregion
+//#region src/constants.d.ts
+/** SDK client identifier sent as X-NetLoc8-Client on every API request. */
+declare const CLIENT_ID: string;
+//#endregion
+export { CLIENT_ID, COOKIE_NAME, COOKIE_OPTIONS, CookieOptions, FetchGeoOptions, Geo, ReconcileSources, fetchGeo, fetchMyGeo, fetchMyTimezone, fetchTimezone, getClientIp, getGeoFromPlatformHeaders, isPublicIp, normalizeApiResponse, normalizeIp, parseCookie, reconcileGeo, serializeCookie };
+//# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/types.ts","../src/api.ts","../src/ip.ts","../src/platform.ts","../src/cookie.ts","../src/normalize.ts","../src/reconcile.ts","../src/constants.ts"],"mappings":";UAAiB,GAAA;EACb,EAAA;EACA,SAAA;EACA,SAAA;EACA,aAAA;EACA,OAAA;EACA,WAAA;EACA,IAAA;EACA,MAAA;EACA,UAAA;EACA,IAAA;EACA,UAAA;EACA,QAAA;EACA,SAAA;EACA,QAAA;EACA,cAAA;EACA,SAAA;EACA,SAAA;EACA,WAAA;EACA,kBAAA;AAAA;AAAA,UAGa,eAAA;EACb,MAAA;EACA,MAAA;EACA,OAAA;EACA,QAAA;AAAA;AAAA,UAGa,aAAA;EACb,IAAA;EACA,QAAA;EACA,MAAA;EACA,QAAA;EACA,MAAA;AAAA;;;AAlCJ;;;;;;AAAA,iBCSsB,QAAA,CAClB,SAAA,UACA,OAAA,GAAU,eAAA,GACX,OAAA,CAAQ,MAAA;;;;;;iBAwCW,aAAA,CAClB,SAAA,UACA,OAAA,GAAU,eAAA,GACX,OAAA;;;;;;;;;;;iBA6CmB,UAAA,CAClB,OAAA,GAAU,eAAA,GACX,OAAA,CAAQ,MAAA;;ADhFX;;;;;;;iBC2HsB,eAAA,CAClB,OAAA,GAAU,eAAA,GACX,OAAA;;;;ADnJH;;iBEGgB,WAAA,CAAY,EAAA;;;;;iBAwBZ,UAAA,CAAW,EAAA;;;;;iBAoFX,WAAA,CAAY,OAAA,EAAS,OAAA;;;AF/GrC;;;;;;AAAA,iBGQgB,yBAAA,CAA0B,OAAA,EAAS,OAAA,GAAU,OAAA,CAAQ,GAAA;;;AHRrE;AAAA,cIGa,WAAA;;cAGA,cAAA,EAAgB,aAAA;;;;iBAWb,eAAA,CAAgB,GAAA,EAAK,GAAA;;;;;iBAQrB,WAAA,CAAY,KAAA,uBAA4B,OAAA,CAAQ,GAAA;;;AJzBhE;;;;;;AAAA,iBKQgB,oBAAA,CACZ,GAAA,EAAK,MAAA,mBACL,EAAA,YACD,GAAA;;;UCTc,gBAAA;EACb,MAAA,GAAS,OAAA,CAAQ,GAAA;EACjB,QAAA,GAAW,OAAA,CAAQ,GAAA;EACnB,GAAA,GAAM,OAAA,CAAQ,GAAA;EACd,EAAA;AAAA;;;;;;;;;;;;;iBAeY,YAAA,CAAa,OAAA,EAAS,gBAAA,GAAmB,GAAA;;;;cCjB5C,SAAA"}

package/dist/index.mjs

@@ -0,0 +1,379 @@
+//#region src/constants.ts
+/** SDK client identifier sent as X-NetLoc8-Client on every API request. */
+const CLIENT_ID = `@netloc8/netloc8-js/0.1.0`;
+//#endregion
+//#region src/api.ts
+/**
+* Fetch geolocation data for an IP address from the NetLoc8 API.
+*
+* Returns the raw API JSON or null on error/timeout.
+* Never throws — errors are swallowed with a console.warn for debugging.
+*/
+async function fetchGeo(ipAddress, options) {
+	const apiKey = options?.apiKey ?? process.env.NETLOC8_API_KEY;
+	const apiUrl = options?.apiUrl ?? process.env.NETLOC8_API_URL ?? "https://netloc8.com";
+	const timeout = options?.timeout ?? 1500;
+	const clientId = options?.clientId ?? CLIENT_ID;
+	if (!apiKey) {
+		console.warn("[netloc8] No API key provided. Set NETLOC8_API_KEY or pass apiKey in options.");
+		return null;
+	}
+	const url = `${apiUrl}/api/v1/ip/${encodeURIComponent(ipAddress)}`;
+	try {
+		const response = await fetch(url, {
+			method: "GET",
+			headers: {
+				"X-API-Key": apiKey,
+				"X-NetLoc8-Client": clientId,
+				"Accept": "application/json"
+			},
+			signal: AbortSignal.timeout(timeout)
+		});
+		if (!response.ok) return null;
+		return await response.json();
+	} catch (error) {
+		console.warn(`[netloc8] Geo lookup failed for ${ipAddress}: ${error.message}`);
+		return null;
+	}
+}
+/**
+* Fetch only the timezone for an IP address.
+*
+* Returns the IANA timezone string or null.
+*/
+async function fetchTimezone(ipAddress, options) {
+	const apiKey = options?.apiKey ?? process.env.NETLOC8_API_KEY;
+	const apiUrl = options?.apiUrl ?? process.env.NETLOC8_API_URL ?? "https://netloc8.com";
+	const timeout = options?.timeout ?? 1500;
+	const clientId = options?.clientId ?? CLIENT_ID;
+	if (!apiKey) {
+		console.warn("[netloc8] No API key provided. Set NETLOC8_API_KEY or pass apiKey in options.");
+		return null;
+	}
+	const url = `${apiUrl}/api/v1/ip/${encodeURIComponent(ipAddress)}/timezone`;
+	try {
+		const response = await fetch(url, {
+			method: "GET",
+			headers: {
+				"X-API-Key": apiKey,
+				"X-NetLoc8-Client": clientId,
+				"Accept": "application/json"
+			},
+			signal: AbortSignal.timeout(timeout)
+		});
+		if (!response.ok) return null;
+		return await response.json();
+	} catch (error) {
+		console.warn(`[netloc8] Timezone lookup failed for ${ipAddress}: ${error.message}`);
+		return null;
+	}
+}
+/**
+* Fetch geolocation data for the caller's own IP from the NetLoc8 API.
+*
+* Calls GET /api/v1/ip/me which auto-detects the caller's IP and returns
+* the full Geo response. Intended for browser-side usage with a publishable
+* key (pk_).
+*
+* Returns the raw API JSON or null on error/timeout.
+* Never throws — errors are swallowed with a console.warn for debugging.
+*/
+async function fetchMyGeo(options) {
+	const apiKey = options?.apiKey ?? process.env.NETLOC8_API_KEY;
+	const apiUrl = options?.apiUrl ?? process.env.NETLOC8_API_URL ?? "https://netloc8.com";
+	const timeout = options?.timeout ?? 1500;
+	const clientId = options?.clientId ?? CLIENT_ID;
+	if (!apiKey) {
+		console.warn("[netloc8] No API key provided. Set NETLOC8_API_KEY or pass apiKey in options.");
+		return null;
+	}
+	const url = `${apiUrl}/api/v1/ip/me`;
+	try {
+		const response = await fetch(url, {
+			method: "GET",
+			headers: {
+				"X-API-Key": apiKey,
+				"X-NetLoc8-Client": clientId,
+				"Accept": "application/json"
+			},
+			signal: AbortSignal.timeout(timeout)
+		});
+		if (!response.ok) return null;
+		return await response.json();
+	} catch (error) {
+		console.warn(`[netloc8] Self geo lookup failed: ${error.message}`);
+		return null;
+	}
+}
+/**
+* Fetch only the timezone for the caller's own IP.
+*
+* Calls GET /api/v1/ip/me/timezone which auto-detects the caller's IP.
+* Intended for browser-side usage with a publishable key (pk_).
+*
+* Returns the IANA timezone string or null.
+*/
+async function fetchMyTimezone(options) {
+	const apiKey = options?.apiKey ?? process.env.NETLOC8_API_KEY;
+	const apiUrl = options?.apiUrl ?? process.env.NETLOC8_API_URL ?? "https://netloc8.com";
+	const timeout = options?.timeout ?? 1500;
+	const clientId = options?.clientId ?? CLIENT_ID;
+	if (!apiKey) {
+		console.warn("[netloc8] No API key provided. Set NETLOC8_API_KEY or pass apiKey in options.");
+		return null;
+	}
+	const url = `${apiUrl}/api/v1/ip/me/timezone`;
+	try {
+		const response = await fetch(url, {
+			method: "GET",
+			headers: {
+				"X-API-Key": apiKey,
+				"X-NetLoc8-Client": clientId,
+				"Accept": "application/json"
+			},
+			signal: AbortSignal.timeout(timeout)
+		});
+		if (!response.ok) return null;
+		return await response.json();
+	} catch (error) {
+		console.warn(`[netloc8] Self timezone lookup failed: ${error.message}`);
+		return null;
+	}
+}
+//#endregion
+//#region src/ip.ts
+/**
+* Normalize an IP string: strip ::ffff: prefix, brackets, lowercase.
+*/
+function normalizeIp(ip) {
+	if (!ip) return;
+	let normalized = ip.trim();
+	if (normalized.startsWith("[") && normalized.endsWith("]")) normalized = normalized.slice(1, -1);
+	if (normalized.toLowerCase().startsWith("::ffff:")) normalized = normalized.slice(7);
+	return normalized.toLowerCase();
+}
+/**
+* Return true if the IP is publicly routable
+* (not RFC1918, loopback, link-local, CGNAT, ULA).
+*/
+function isPublicIp(ip) {
+	const normalized = normalizeIp(ip);
+	if (!normalized) return false;
+	if (!normalized.includes(":")) {
+		const parts = normalized.split(".").map(Number);
+		if (parts.length !== 4) return false;
+		if (parts.some((p) => !Number.isInteger(p) || p < 0 || p > 255)) return false;
+		if (parts[0] === 127) return false;
+		if (parts[0] === 10) return false;
+		if (parts[0] === 172 && parts[1] >= 16 && parts[1] <= 31) return false;
+		if (parts[0] === 192 && parts[1] === 168) return false;
+		if (parts[0] === 100 && parts[1] >= 64 && parts[1] <= 127) return false;
+		if (parts[0] === 169 && parts[1] === 254) return false;
+		if (parts.every((p) => p === 0)) return false;
+		return true;
+	}
+	if (normalized === "::1") return false;
+	if (normalized.startsWith("fc") || normalized.startsWith("fd")) return false;
+	if (normalized.startsWith("fe80")) return false;
+	if (normalized === "::") return false;
+	return true;
+}
+/**
+* Determine the most likely real client IP from request headers.
+* Returns the first public IP found in the priority chain.
+*/
+function getClientIp(headers) {
+	const xff = headers.get("x-forwarded-for");
+	if (xff) {
+		const publicIp = xff.split(",").map((s) => normalizeIp(s.trim())).filter(Boolean).find((ip) => isPublicIp(ip));
+		if (publicIp) return publicIp;
+	}
+	const singleHeaders = [
+		"cf-connecting-ip",
+		"true-client-ip",
+		"x-real-ip",
+		"x-client-ip",
+		"fastly-client-ip",
+		"fly-client-ip"
+	];
+	for (const header of singleHeaders) {
+		const value = headers.get(header);
+		if (value) {
+			const normalized = normalizeIp(value);
+			if (normalized && isPublicIp(normalized)) return normalized;
+		}
+	}
+	if (xff) {
+		const ips = xff.split(",").map((s) => normalizeIp(s.trim())).filter(Boolean);
+		if (ips.length > 0) return ips[0];
+	}
+	for (const header of singleHeaders) {
+		const value = headers.get(header);
+		if (value) {
+			const normalized = normalizeIp(value);
+			if (normalized) return normalized;
+		}
+	}
+}
+//#endregion
+//#region src/platform.ts
+/**
+* Extract geo information from platform/CDN request headers.
+* Supports Vercel, Cloudflare, and CloudFront.
+*
+* Returns a partial Geo object — fields not provided by the platform are absent.
+*/
+function getGeoFromPlatformHeaders(headers) {
+	const geo = {};
+	const vercelCountry = headers.get("x-vercel-ip-country");
+	if (vercelCountry) geo.country = vercelCountry;
+	const vercelRegion = headers.get("x-vercel-ip-country-region");
+	if (vercelRegion) geo.region = vercelRegion;
+	const vercelCity = headers.get("x-vercel-ip-city");
+	if (vercelCity !== null) try {
+		geo.city = decodeURIComponent(vercelCity);
+	} catch {
+		geo.city = vercelCity;
+	}
+	const vercelLat = headers.get("x-vercel-ip-latitude");
+	if (vercelLat) {
+		const lat = parseFloat(vercelLat);
+		if (isFinite(lat)) geo.latitude = lat;
+	}
+	const vercelLng = headers.get("x-vercel-ip-longitude");
+	if (vercelLng) {
+		const lng = parseFloat(vercelLng);
+		if (isFinite(lng)) geo.longitude = lng;
+	}
+	const vercelTz = headers.get("x-vercel-ip-timezone");
+	if (vercelTz) geo.timezone = vercelTz;
+	const cfCountry = headers.get("cf-ipcountry");
+	if (cfCountry && !geo.country) geo.country = cfCountry;
+	const cfrontCountry = headers.get("cloudfront-viewer-country");
+	if (cfrontCountry && !geo.country) geo.country = cfrontCountry;
+	return geo;
+}
+//#endregion
+//#region src/cookie.ts
+/** Cookie name used by the plugin. */
+const COOKIE_NAME = "__netloc8_geo";
+/** Default cookie options. `secure` is disabled in development for http://localhost. */
+const COOKIE_OPTIONS = {
+	path: "/",
+	httpOnly: false,
+	secure: process.env.NODE_ENV === "production",
+	sameSite: "lax",
+	maxAge: 2592e3
+};
+/**
+* Serialize a Geo object into a cookie value string (JSON, URI-encoded).
+*/
+function serializeCookie(geo) {
+	return encodeURIComponent(JSON.stringify(geo));
+}
+/**
+* Parse a cookie value string back into a Geo object.
+* Returns an empty object if corrupt or unparseable.
+*/
+function parseCookie(value) {
+	if (!value) return {};
+	try {
+		const decoded = decodeURIComponent(value);
+		const parsed = JSON.parse(decoded);
+		if (typeof parsed !== "object" || parsed === null) return {};
+		const safeGeo = {};
+		if (typeof parsed.ip === "string") safeGeo.ip = parsed.ip;
+		if (typeof parsed.ipVersion === "number") safeGeo.ipVersion = parsed.ipVersion;
+		if (typeof parsed.continent === "string") safeGeo.continent = parsed.continent;
+		if (typeof parsed.continentName === "string") safeGeo.continentName = parsed.continentName;
+		if (typeof parsed.country === "string") safeGeo.country = parsed.country;
+		if (typeof parsed.countryName === "string") safeGeo.countryName = parsed.countryName;
+		if (typeof parsed.isEU === "boolean") safeGeo.isEU = parsed.isEU;
+		if (typeof parsed.region === "string") safeGeo.region = parsed.region;
+		if (typeof parsed.regionName === "string") safeGeo.regionName = parsed.regionName;
+		if (typeof parsed.city === "string") safeGeo.city = parsed.city;
+		if (typeof parsed.postalCode === "string") safeGeo.postalCode = parsed.postalCode;
+		if (typeof parsed.latitude === "number") safeGeo.latitude = parsed.latitude;
+		if (typeof parsed.longitude === "number") safeGeo.longitude = parsed.longitude;
+		if (typeof parsed.timezone === "string") safeGeo.timezone = parsed.timezone;
+		if (typeof parsed.accuracyRadius === "number") safeGeo.accuracyRadius = parsed.accuracyRadius;
+		if (typeof parsed.precision === "string") safeGeo.precision = parsed.precision;
+		if (typeof parsed.isLimited === "boolean") safeGeo.isLimited = parsed.isLimited;
+		if (typeof parsed.limitReason === "string") safeGeo.limitReason = parsed.limitReason;
+		if (typeof parsed.timezoneFromClient === "boolean") safeGeo.timezoneFromClient = parsed.timezoneFromClient;
+		return safeGeo;
+	} catch {
+		return {};
+	}
+}
+//#endregion
+//#region src/normalize.ts
+/**
+* Normalize a NetLoc8 API response into the SDK's Geo type.
+*
+* The API returns a flat structure that matches Geo closely.
+* This function copies the fields and adds timezoneFromClient.
+*/
+function normalizeApiResponse(raw, ip) {
+	return {
+		ip: raw.ip ?? ip,
+		ipVersion: raw.ipVersion,
+		continent: raw.continent,
+		continentName: raw.continentName,
+		country: raw.country,
+		countryName: raw.countryName,
+		isEU: raw.isEU,
+		region: raw.region,
+		regionName: raw.regionName,
+		city: raw.city,
+		postalCode: raw.postalCode,
+		latitude: raw.latitude,
+		longitude: raw.longitude,
+		timezone: raw.timezone,
+		accuracyRadius: raw.accuracyRadius,
+		precision: raw.precision,
+		isLimited: raw.isLimited,
+		limitReason: raw.limitReason,
+		timezoneFromClient: false
+	};
+}
+//#endregion
+//#region src/reconcile.ts
+/**
+* Merge geo data from multiple sources into a single authoritative Geo object.
+*
+* Source priority (highest to lowest):
+*   1. Fresh API response  (most complete)
+*   2. Platform headers  (zero-cost, may be partial)
+*   3. Cookie (including timezoneFromClient)  (stale, client-controlled)
+*
+* Cookie location fields are never treated as fully authoritative; they are
+* only used as a fallback when no better data is available. The browser-
+* confirmed timezone (`timezoneFromClient`) is trusted when the IP matches.
+*/
+function reconcileGeo(sources) {
+	const { cookie, platform, api, ip } = sources;
+	const geo = { ip };
+	if (cookie) Object.assign(geo, stripUndefined(cookie));
+	if (platform) Object.assign(geo, stripUndefined(platform));
+	if (api) Object.assign(geo, stripUndefined(api));
+	if (cookie?.timezoneFromClient === true && cookie?.ip !== ip && cookie?.timezone) {
+		geo.timezone = cookie.timezone;
+		geo.timezoneFromClient = false;
+	}
+	geo.ip = ip;
+	return geo;
+}
+/**
+* Remove undefined values from an object so Object.assign doesn't overwrite
+* existing values with undefined.
+*/
+function stripUndefined(obj) {
+	const result = {};
+	for (const [key, value] of Object.entries(obj)) if (value !== void 0) result[key] = value;
+	return result;
+}
+//#endregion
+export { CLIENT_ID, COOKIE_NAME, COOKIE_OPTIONS, fetchGeo, fetchMyGeo, fetchMyTimezone, fetchTimezone, getClientIp, getGeoFromPlatformHeaders, isPublicIp, normalizeApiResponse, normalizeIp, parseCookie, reconcileGeo, serializeCookie };
+
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../src/constants.ts","../src/api.ts","../src/ip.ts","../src/platform.ts","../src/cookie.ts","../src/normalize.ts","../src/reconcile.ts"],"sourcesContent":["declare const __PKG_NAME__: string;\ndeclare const __PKG_VERSION__: string;\n\n/** SDK client identifier sent as X-NetLoc8-Client on every API request. */\nexport const CLIENT_ID: string = `${typeof __PKG_NAME__ !== 'undefined' ? __PKG_NAME__ : '@netloc8/netloc8-js'}/${typeof __PKG_VERSION__ !== 'undefined' ? __PKG_VERSION__ : 'dev'}`;\n","import type { FetchGeoOptions } from './types';\nimport { CLIENT_ID } from './constants';\n\n/**\n * Fetch geolocation data for an IP address from the NetLoc8 API.\n *\n * Returns the raw API JSON or null on error/timeout.\n * Never throws — errors are swallowed with a console.warn for debugging.\n */\nexport async function fetchGeo(\n    ipAddress: string,\n    options?: FetchGeoOptions\n): Promise<Record<string, unknown> | null> {\n    const apiKey = options?.apiKey ?? process.env.NETLOC8_API_KEY;\n    const apiUrl = options?.apiUrl ?? process.env.NETLOC8_API_URL ?? 'https://netloc8.com';\n    const timeout = options?.timeout ?? 1500;\n    const clientId = options?.clientId ?? CLIENT_ID;\n\n    if (!apiKey) {\n        console.warn('[netloc8] No API key provided. Set NETLOC8_API_KEY or pass apiKey in options.');\n        return null;\n    }\n\n    const url = `${apiUrl}/api/v1/ip/${encodeURIComponent(ipAddress)}`;\n\n    try {\n        const response = await fetch(url, {\n            method: 'GET',\n            headers: {\n                'X-API-Key': apiKey,\n                'X-NetLoc8-Client': clientId,\n                'Accept': 'application/json',\n            },\n            signal: AbortSignal.timeout(timeout),\n        });\n\n        if (!response.ok) {\n            return null;\n        }\n\n        return await response.json() as Record<string, unknown>;\n    } catch (error) {\n        console.warn(`[netloc8] Geo lookup failed for ${ipAddress}: ${(error as Error).message}`);\n        return null;\n    }\n}\n\n/**\n * Fetch only the timezone for an IP address.\n *\n * Returns the IANA timezone string or null.\n */\nexport async function fetchTimezone(\n    ipAddress: string,\n    options?: FetchGeoOptions\n): Promise<string | null> {\n    const apiKey = options?.apiKey ?? process.env.NETLOC8_API_KEY;\n    const apiUrl = options?.apiUrl ?? process.env.NETLOC8_API_URL ?? 'https://netloc8.com';\n    const timeout = options?.timeout ?? 1500;\n    const clientId = options?.clientId ?? CLIENT_ID;\n\n    if (!apiKey) {\n        console.warn('[netloc8] No API key provided. Set NETLOC8_API_KEY or pass apiKey in options.');\n        return null;\n    }\n\n    const url = `${apiUrl}/api/v1/ip/${encodeURIComponent(ipAddress)}/timezone`;\n\n    try {\n        const response = await fetch(url, {\n            method: 'GET',\n            headers: {\n                'X-API-Key': apiKey,\n                'X-NetLoc8-Client': clientId,\n                'Accept': 'application/json',\n            },\n            signal: AbortSignal.timeout(timeout),\n        });\n\n        if (!response.ok) {\n            return null;\n        }\n\n        return await response.json() as string;\n    } catch (error) {\n        console.warn(`[netloc8] Timezone lookup failed for ${ipAddress}: ${(error as Error).message}`);\n        return null;\n    }\n}\n\n/**\n * Fetch geolocation data for the caller's own IP from the NetLoc8 API.\n *\n * Calls GET /api/v1/ip/me which auto-detects the caller's IP and returns\n * the full Geo response. Intended for browser-side usage with a publishable\n * key (pk_).\n *\n * Returns the raw API JSON or null on error/timeout.\n * Never throws — errors are swallowed with a console.warn for debugging.\n */\nexport async function fetchMyGeo(\n    options?: FetchGeoOptions\n): Promise<Record<string, unknown> | null> {\n    const apiKey = options?.apiKey ?? process.env.NETLOC8_API_KEY;\n    const apiUrl = options?.apiUrl ?? process.env.NETLOC8_API_URL ?? 'https://netloc8.com';\n    const timeout = options?.timeout ?? 1500;\n    const clientId = options?.clientId ?? CLIENT_ID;\n\n    if (!apiKey) {\n        console.warn('[netloc8] No API key provided. Set NETLOC8_API_KEY or pass apiKey in options.');\n        return null;\n    }\n\n    const url = `${apiUrl}/api/v1/ip/me`;\n\n    try {\n        const response = await fetch(url, {\n            method: 'GET',\n            headers: {\n                'X-API-Key': apiKey,\n                'X-NetLoc8-Client': clientId,\n                'Accept': 'application/json',\n            },\n            signal: AbortSignal.timeout(timeout),\n        });\n\n        if (!response.ok) {\n            return null;\n        }\n\n        return await response.json() as Record<string, unknown>;\n    } catch (error) {\n        console.warn(`[netloc8] Self geo lookup failed: ${(error as Error).message}`);\n        return null;\n    }\n}\n\n/**\n * Fetch only the timezone for the caller's own IP.\n *\n * Calls GET /api/v1/ip/me/timezone which auto-detects the caller's IP.\n * Intended for browser-side usage with a publishable key (pk_).\n *\n * Returns the IANA timezone string or null.\n */\nexport async function fetchMyTimezone(\n    options?: FetchGeoOptions\n): Promise<string | null> {\n    const apiKey = options?.apiKey ?? process.env.NETLOC8_API_KEY;\n    const apiUrl = options?.apiUrl ?? process.env.NETLOC8_API_URL ?? 'https://netloc8.com';\n    const timeout = options?.timeout ?? 1500;\n    const clientId = options?.clientId ?? CLIENT_ID;\n\n    if (!apiKey) {\n        console.warn('[netloc8] No API key provided. Set NETLOC8_API_KEY or pass apiKey in options.');\n        return null;\n    }\n\n    const url = `${apiUrl}/api/v1/ip/me/timezone`;\n\n    try {\n        const response = await fetch(url, {\n            method: 'GET',\n            headers: {\n                'X-API-Key': apiKey,\n                'X-NetLoc8-Client': clientId,\n                'Accept': 'application/json',\n            },\n            signal: AbortSignal.timeout(timeout),\n        });\n\n        if (!response.ok) {\n            return null;\n        }\n\n        return await response.json() as string;\n    } catch (error) {\n        console.warn(`[netloc8] Self timezone lookup failed: ${(error as Error).message}`);\n        return null;\n    }\n}\n","/**\n * Normalize an IP string: strip ::ffff: prefix, brackets, lowercase.\n */\nexport function normalizeIp(ip: string | undefined): string | undefined {\n    if (!ip) {\n        return undefined;\n    }\n\n    let normalized = ip.trim();\n\n    // Strip brackets (IPv6 in URLs)\n    if (normalized.startsWith('[') && normalized.endsWith(']')) {\n        normalized = normalized.slice(1, -1);\n    }\n\n    // Strip IPv4-mapped IPv6 prefix\n    if (normalized.toLowerCase().startsWith('::ffff:')) {\n        normalized = normalized.slice(7);\n    }\n\n    return normalized.toLowerCase();\n}\n\n/**\n * Return true if the IP is publicly routable\n * (not RFC1918, loopback, link-local, CGNAT, ULA).\n */\nexport function isPublicIp(ip: string): boolean {\n    const normalized = normalizeIp(ip);\n    if (!normalized) {\n        return false;\n    }\n\n    // IPv4 checks\n    if (!normalized.includes(':')) {\n        const parts = normalized.split('.').map(Number);\n        if (parts.length !== 4) {\n            return false;\n        }\n\n        // Validate each octet is an integer in 0-255\n        if (parts.some(p => !Number.isInteger(p) || p < 0 || p > 255)) {\n            return false;\n        }\n\n        // Loopback: 127.0.0.0/8\n        if (parts[0] === 127) {\n            return false;\n        }\n\n        // RFC1918: 10.0.0.0/8\n        if (parts[0] === 10) {\n            return false;\n        }\n\n        // RFC1918: 172.16.0.0/12\n        if (parts[0] === 172 && parts[1] >= 16 && parts[1] <= 31) {\n            return false;\n        }\n\n        // RFC1918: 192.168.0.0/16\n        if (parts[0] === 192 && parts[1] === 168) {\n            return false;\n        }\n\n        // CGNAT: 100.64.0.0/10\n        if (parts[0] === 100 && parts[1] >= 64 && parts[1] <= 127) {\n            return false;\n        }\n\n        // Link-local: 169.254.0.0/16\n        if (parts[0] === 169 && parts[1] === 254) {\n            return false;\n        }\n\n        // 0.0.0.0\n        if (parts.every(p => p === 0)) {\n            return false;\n        }\n\n        return true;\n    }\n\n    // IPv6 checks\n    // Loopback: ::1\n    if (normalized === '::1') {\n        return false;\n    }\n\n    // ULA: fc00::/7\n    if (normalized.startsWith('fc') || normalized.startsWith('fd')) {\n        return false;\n    }\n\n    // Link-local: fe80::/10\n    if (normalized.startsWith('fe80')) {\n        return false;\n    }\n\n    // Unspecified: ::\n    if (normalized === '::') {\n        return false;\n    }\n\n    return true;\n}\n\n/**\n * Determine the most likely real client IP from request headers.\n * Returns the first public IP found in the priority chain.\n */\nexport function getClientIp(headers: Headers): string | undefined {\n    // 1. x-forwarded-for — split by comma, return first public IP\n    const xff = headers.get('x-forwarded-for');\n    if (xff) {\n        const ips = xff.split(',').map(s => normalizeIp(s.trim())).filter(Boolean) as string[];\n        const publicIp = ips.find(ip => isPublicIp(ip));\n        if (publicIp) {\n            return publicIp;\n        }\n    }\n\n    // 2. Single-IP headers in priority order\n    const singleHeaders = [\n        'cf-connecting-ip',\n        'true-client-ip',\n        'x-real-ip',\n        'x-client-ip',\n        'fastly-client-ip',\n        'fly-client-ip',\n    ];\n\n    for (const header of singleHeaders) {\n        const value = headers.get(header);\n        if (value) {\n            const normalized = normalizeIp(value);\n            if (normalized && isPublicIp(normalized)) {\n                return normalized;\n            }\n        }\n    }\n\n    // 3. Last resort: return first candidate from xff even if private\n    if (xff) {\n        const ips = xff.split(',').map(s => normalizeIp(s.trim())).filter(Boolean) as string[];\n        if (ips.length > 0) {\n            return ips[0];\n        }\n    }\n\n    // 4. Check single-IP headers again, accepting private IPs\n    for (const header of singleHeaders) {\n        const value = headers.get(header);\n        if (value) {\n            const normalized = normalizeIp(value);\n            if (normalized) {\n                return normalized;\n            }\n        }\n    }\n\n    return undefined;\n}\n","import type { Geo } from './types';\n\n/**\n * Extract geo information from platform/CDN request headers.\n * Supports Vercel, Cloudflare, and CloudFront.\n *\n * Returns a partial Geo object — fields not provided by the platform are absent.\n */\nexport function getGeoFromPlatformHeaders(headers: Headers): Partial<Geo> {\n    const geo: Partial<Geo> = {};\n\n    // Vercel headers\n    const vercelCountry = headers.get('x-vercel-ip-country');\n    if (vercelCountry) {\n        geo.country = vercelCountry;\n    }\n\n    const vercelRegion = headers.get('x-vercel-ip-country-region');\n    if (vercelRegion) {\n        geo.region = vercelRegion;\n    }\n\n    const vercelCity = headers.get('x-vercel-ip-city');\n    if (vercelCity !== null) {\n        try {\n            geo.city = decodeURIComponent(vercelCity);\n        } catch {\n            geo.city = vercelCity;\n        }\n    }\n\n    const vercelLat = headers.get('x-vercel-ip-latitude');\n    if (vercelLat) {\n        const lat = parseFloat(vercelLat);\n        if (isFinite(lat)) {\n            geo.latitude = lat;\n        }\n    }\n\n    const vercelLng = headers.get('x-vercel-ip-longitude');\n    if (vercelLng) {\n        const lng = parseFloat(vercelLng);\n        if (isFinite(lng)) {\n            geo.longitude = lng;\n        }\n    }\n\n    const vercelTz = headers.get('x-vercel-ip-timezone');\n    if (vercelTz) {\n        geo.timezone = vercelTz;\n    }\n\n    // Cloudflare headers\n    const cfCountry = headers.get('cf-ipcountry');\n    if (cfCountry && !geo.country) {\n        geo.country = cfCountry;\n    }\n\n    // CloudFront headers\n    const cfrontCountry = headers.get('cloudfront-viewer-country');\n    if (cfrontCountry && !geo.country) {\n        geo.country = cfrontCountry;\n    }\n\n    return geo;\n}\n","import type { Geo, CookieOptions } from './types';\n\n/** Cookie name used by the plugin. */\nexport const COOKIE_NAME = '__netloc8_geo';\n\n/** Default cookie options. `secure` is disabled in development for http://localhost. */\nexport const COOKIE_OPTIONS: CookieOptions = {\n    path: '/',\n    httpOnly: false,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax',\n    maxAge: 2_592_000, // 30 days\n};\n\n/**\n * Serialize a Geo object into a cookie value string (JSON, URI-encoded).\n */\nexport function serializeCookie(geo: Geo): string {\n    return encodeURIComponent(JSON.stringify(geo));\n}\n\n/**\n * Parse a cookie value string back into a Geo object.\n * Returns an empty object if corrupt or unparseable.\n */\nexport function parseCookie(value: string | undefined): Partial<Geo> {\n    if (!value) {\n        return {};\n    }\n\n    try {\n        const decoded = decodeURIComponent(value);\n        const parsed = JSON.parse(decoded);\n\n        if (typeof parsed !== 'object' || parsed === null) {\n            return {};\n        }\n\n        // Explicitly pick known properties to avoid prototype pollution or unexpected data\n        const safeGeo: Partial<Geo> = {};\n\n        if (typeof parsed.ip === 'string') safeGeo.ip = parsed.ip;\n        if (typeof parsed.ipVersion === 'number') safeGeo.ipVersion = parsed.ipVersion;\n        if (typeof parsed.continent === 'string') safeGeo.continent = parsed.continent;\n        if (typeof parsed.continentName === 'string') safeGeo.continentName = parsed.continentName;\n        if (typeof parsed.country === 'string') safeGeo.country = parsed.country;\n        if (typeof parsed.countryName === 'string') safeGeo.countryName = parsed.countryName;\n        if (typeof parsed.isEU === 'boolean') safeGeo.isEU = parsed.isEU;\n        if (typeof parsed.region === 'string') safeGeo.region = parsed.region;\n        if (typeof parsed.regionName === 'string') safeGeo.regionName = parsed.regionName;\n        if (typeof parsed.city === 'string') safeGeo.city = parsed.city;\n        if (typeof parsed.postalCode === 'string') safeGeo.postalCode = parsed.postalCode;\n        if (typeof parsed.latitude === 'number') safeGeo.latitude = parsed.latitude;\n        if (typeof parsed.longitude === 'number') safeGeo.longitude = parsed.longitude;\n        if (typeof parsed.timezone === 'string') safeGeo.timezone = parsed.timezone;\n        if (typeof parsed.accuracyRadius === 'number') safeGeo.accuracyRadius = parsed.accuracyRadius;\n        if (typeof parsed.precision === 'string') safeGeo.precision = parsed.precision;\n        if (typeof parsed.isLimited === 'boolean') safeGeo.isLimited = parsed.isLimited;\n        if (typeof parsed.limitReason === 'string') safeGeo.limitReason = parsed.limitReason;\n        if (typeof parsed.timezoneFromClient === 'boolean') safeGeo.timezoneFromClient = parsed.timezoneFromClient;\n\n        return safeGeo;\n    } catch {\n        return {};\n    }\n}\n","import type { Geo } from './types';\n\n/**\n * Normalize a NetLoc8 API response into the SDK's Geo type.\n *\n * The API returns a flat structure that matches Geo closely.\n * This function copies the fields and adds timezoneFromClient.\n */\nexport function normalizeApiResponse(\n    raw: Record<string, unknown>,\n    ip?: string\n): Geo {\n    return {\n        ip: (raw.ip as string) ?? ip,\n        ipVersion: raw.ipVersion as number | undefined,\n        continent: raw.continent as string | undefined,\n        continentName: raw.continentName as string | undefined,\n        country: raw.country as string | undefined,\n        countryName: raw.countryName as string | undefined,\n        isEU: raw.isEU as boolean | undefined,\n        region: raw.region as string | undefined,\n        regionName: raw.regionName as string | undefined,\n        city: raw.city as string | undefined,\n        postalCode: raw.postalCode as string | undefined,\n        latitude: raw.latitude as number | undefined,\n        longitude: raw.longitude as number | undefined,\n        timezone: raw.timezone as string | undefined,\n        accuracyRadius: raw.accuracyRadius as number | undefined,\n        precision: raw.precision as string | undefined,\n        isLimited: raw.isLimited as boolean | undefined,\n        limitReason: raw.limitReason as string | undefined,\n        timezoneFromClient: false,\n    };\n}\n","import type { Geo } from './types';\n\nexport interface ReconcileSources {\n    cookie?: Partial<Geo>;\n    platform?: Partial<Geo>;\n    api?: Partial<Geo>;\n    ip?: string;\n}\n\n/**\n * Merge geo data from multiple sources into a single authoritative Geo object.\n *\n * Source priority (highest to lowest):\n *   1. Fresh API response  (most complete)\n *   2. Platform headers  (zero-cost, may be partial)\n *   3. Cookie (including timezoneFromClient)  (stale, client-controlled)\n *\n * Cookie location fields are never treated as fully authoritative; they are\n * only used as a fallback when no better data is available. The browser-\n * confirmed timezone (`timezoneFromClient`) is trusted when the IP matches.\n */\nexport function reconcileGeo(sources: ReconcileSources): Geo {\n    const { cookie, platform, api, ip } = sources;\n\n    // Build merged geo from lowest to highest priority\n    const geo: Geo = { ip };\n\n    // Layer in cookie fields (lowest priority — stale but useful fallback)\n    if (cookie) {\n        Object.assign(geo, stripUndefined(cookie));\n    }\n\n    // Layer in platform headers (partial — may only have country)\n    if (platform) {\n        Object.assign(geo, stripUndefined(platform));\n    }\n\n    // Layer in API response (most complete — overwrites platform fields)\n    if (api) {\n        Object.assign(geo, stripUndefined(api));\n    }\n\n    // If cookie had timezoneFromClient but IP changed,\n    // keep the browser timezone but mark it as stale\n    if (\n        cookie?.timezoneFromClient === true &&\n        cookie?.ip !== ip &&\n        cookie?.timezone\n    ) {\n        geo.timezone = cookie.timezone;\n        geo.timezoneFromClient = false;\n    }\n\n    // Ensure IP is set\n    geo.ip = ip;\n\n    return geo;\n}\n\n/**\n * Remove undefined values from an object so Object.assign doesn't overwrite\n * existing values with undefined.\n */\nfunction stripUndefined(obj: Partial<Geo>): Partial<Geo> {\n    const result: Partial<Geo> = {};\n    for (const [key, value] of Object.entries(obj)) {\n        if (value !== undefined) {\n            (result as Record<string, unknown>)[key] = value;\n        }\n    }\n    return result;\n}\n"],"mappings":";;AAIA,MAAa,YAAoB;;;;;;;;;ACKjC,eAAsB,SAClB,WACA,SACuC;CACvC,MAAM,SAAS,SAAS,UAAU,QAAQ,IAAI;CAC9C,MAAM,SAAS,SAAS,UAAU,QAAQ,IAAI,mBAAmB;CACjE,MAAM,UAAU,SAAS,WAAW;CACpC,MAAM,WAAW,SAAS,YAAY;AAEtC,KAAI,CAAC,QAAQ;AACT,UAAQ,KAAK,gFAAgF;AAC7F,SAAO;;CAGX,MAAM,MAAM,GAAG,OAAO,aAAa,mBAAmB,UAAU;AAEhE,KAAI;EACA,MAAM,WAAW,MAAM,MAAM,KAAK;GAC9B,QAAQ;GACR,SAAS;IACL,aAAa;IACb,oBAAoB;IACpB,UAAU;IACb;GACD,QAAQ,YAAY,QAAQ,QAAQ;GACvC,CAAC;AAEF,MAAI,CAAC,SAAS,GACV,QAAO;AAGX,SAAO,MAAM,SAAS,MAAM;UACvB,OAAO;AACZ,UAAQ,KAAK,mCAAmC,UAAU,IAAK,MAAgB,UAAU;AACzF,SAAO;;;;;;;;AASf,eAAsB,cAClB,WACA,SACsB;CACtB,MAAM,SAAS,SAAS,UAAU,QAAQ,IAAI;CAC9C,MAAM,SAAS,SAAS,UAAU,QAAQ,IAAI,mBAAmB;CACjE,MAAM,UAAU,SAAS,WAAW;CACpC,MAAM,WAAW,SAAS,YAAY;AAEtC,KAAI,CAAC,QAAQ;AACT,UAAQ,KAAK,gFAAgF;AAC7F,SAAO;;CAGX,MAAM,MAAM,GAAG,OAAO,aAAa,mBAAmB,UAAU,CAAC;AAEjE,KAAI;EACA,MAAM,WAAW,MAAM,MAAM,KAAK;GAC9B,QAAQ;GACR,SAAS;IACL,aAAa;IACb,oBAAoB;IACpB,UAAU;IACb;GACD,QAAQ,YAAY,QAAQ,QAAQ;GACvC,CAAC;AAEF,MAAI,CAAC,SAAS,GACV,QAAO;AAGX,SAAO,MAAM,SAAS,MAAM;UACvB,OAAO;AACZ,UAAQ,KAAK,wCAAwC,UAAU,IAAK,MAAgB,UAAU;AAC9F,SAAO;;;;;;;;;;;;;AAcf,eAAsB,WAClB,SACuC;CACvC,MAAM,SAAS,SAAS,UAAU,QAAQ,IAAI;CAC9C,MAAM,SAAS,SAAS,UAAU,QAAQ,IAAI,mBAAmB;CACjE,MAAM,UAAU,SAAS,WAAW;CACpC,MAAM,WAAW,SAAS,YAAY;AAEtC,KAAI,CAAC,QAAQ;AACT,UAAQ,KAAK,gFAAgF;AAC7F,SAAO;;CAGX,MAAM,MAAM,GAAG,OAAO;AAEtB,KAAI;EACA,MAAM,WAAW,MAAM,MAAM,KAAK;GAC9B,QAAQ;GACR,SAAS;IACL,aAAa;IACb,oBAAoB;IACpB,UAAU;IACb;GACD,QAAQ,YAAY,QAAQ,QAAQ;GACvC,CAAC;AAEF,MAAI,CAAC,SAAS,GACV,QAAO;AAGX,SAAO,MAAM,SAAS,MAAM;UACvB,OAAO;AACZ,UAAQ,KAAK,qCAAsC,MAAgB,UAAU;AAC7E,SAAO;;;;;;;;;;;AAYf,eAAsB,gBAClB,SACsB;CACtB,MAAM,SAAS,SAAS,UAAU,QAAQ,IAAI;CAC9C,MAAM,SAAS,SAAS,UAAU,QAAQ,IAAI,mBAAmB;CACjE,MAAM,UAAU,SAAS,WAAW;CACpC,MAAM,WAAW,SAAS,YAAY;AAEtC,KAAI,CAAC,QAAQ;AACT,UAAQ,KAAK,gFAAgF;AAC7F,SAAO;;CAGX,MAAM,MAAM,GAAG,OAAO;AAEtB,KAAI;EACA,MAAM,WAAW,MAAM,MAAM,KAAK;GAC9B,QAAQ;GACR,SAAS;IACL,aAAa;IACb,oBAAoB;IACpB,UAAU;IACb;GACD,QAAQ,YAAY,QAAQ,QAAQ;GACvC,CAAC;AAEF,MAAI,CAAC,SAAS,GACV,QAAO;AAGX,SAAO,MAAM,SAAS,MAAM;UACvB,OAAO;AACZ,UAAQ,KAAK,0CAA2C,MAAgB,UAAU;AAClF,SAAO;;;;;;;;AC/Kf,SAAgB,YAAY,IAA4C;AACpE,KAAI,CAAC,GACD;CAGJ,IAAI,aAAa,GAAG,MAAM;AAG1B,KAAI,WAAW,WAAW,IAAI,IAAI,WAAW,SAAS,IAAI,CACtD,cAAa,WAAW,MAAM,GAAG,GAAG;AAIxC,KAAI,WAAW,aAAa,CAAC,WAAW,UAAU,CAC9C,cAAa,WAAW,MAAM,EAAE;AAGpC,QAAO,WAAW,aAAa;;;;;;AAOnC,SAAgB,WAAW,IAAqB;CAC5C,MAAM,aAAa,YAAY,GAAG;AAClC,KAAI,CAAC,WACD,QAAO;AAIX,KAAI,CAAC,WAAW,SAAS,IAAI,EAAE;EAC3B,MAAM,QAAQ,WAAW,MAAM,IAAI,CAAC,IAAI,OAAO;AAC/C,MAAI,MAAM,WAAW,EACjB,QAAO;AAIX,MAAI,MAAM,MAAK,MAAK,CAAC,OAAO,UAAU,EAAE,IAAI,IAAI,KAAK,IAAI,IAAI,CACzD,QAAO;AAIX,MAAI,MAAM,OAAO,IACb,QAAO;AAIX,MAAI,MAAM,OAAO,GACb,QAAO;AAIX,MAAI,MAAM,OAAO,OAAO,MAAM,MAAM,MAAM,MAAM,MAAM,GAClD,QAAO;AAIX,MAAI,MAAM,OAAO,OAAO,MAAM,OAAO,IACjC,QAAO;AAIX,MAAI,MAAM,OAAO,OAAO,MAAM,MAAM,MAAM,MAAM,MAAM,IAClD,QAAO;AAIX,MAAI,MAAM,OAAO,OAAO,MAAM,OAAO,IACjC,QAAO;AAIX,MAAI,MAAM,OAAM,MAAK,MAAM,EAAE,CACzB,QAAO;AAGX,SAAO;;AAKX,KAAI,eAAe,MACf,QAAO;AAIX,KAAI,WAAW,WAAW,KAAK,IAAI,WAAW,WAAW,KAAK,CAC1D,QAAO;AAIX,KAAI,WAAW,WAAW,OAAO,CAC7B,QAAO;AAIX,KAAI,eAAe,KACf,QAAO;AAGX,QAAO;;;;;;AAOX,SAAgB,YAAY,SAAsC;CAE9D,MAAM,MAAM,QAAQ,IAAI,kBAAkB;AAC1C,KAAI,KAAK;EAEL,MAAM,WADM,IAAI,MAAM,IAAI,CAAC,KAAI,MAAK,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,QAAQ,CACrD,MAAK,OAAM,WAAW,GAAG,CAAC;AAC/C,MAAI,SACA,QAAO;;CAKf,MAAM,gBAAgB;EAClB;EACA;EACA;EACA;EACA;EACA;EACH;AAED,MAAK,MAAM,UAAU,eAAe;EAChC,MAAM,QAAQ,QAAQ,IAAI,OAAO;AACjC,MAAI,OAAO;GACP,MAAM,aAAa,YAAY,MAAM;AACrC,OAAI,cAAc,WAAW,WAAW,CACpC,QAAO;;;AAMnB,KAAI,KAAK;EACL,MAAM,MAAM,IAAI,MAAM,IAAI,CAAC,KAAI,MAAK,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,QAAQ;AAC1E,MAAI,IAAI,SAAS,EACb,QAAO,IAAI;;AAKnB,MAAK,MAAM,UAAU,eAAe;EAChC,MAAM,QAAQ,QAAQ,IAAI,OAAO;AACjC,MAAI,OAAO;GACP,MAAM,aAAa,YAAY,MAAM;AACrC,OAAI,WACA,QAAO;;;;;;;;;;;;ACpJvB,SAAgB,0BAA0B,SAAgC;CACtE,MAAM,MAAoB,EAAE;CAG5B,MAAM,gBAAgB,QAAQ,IAAI,sBAAsB;AACxD,KAAI,cACA,KAAI,UAAU;CAGlB,MAAM,eAAe,QAAQ,IAAI,6BAA6B;AAC9D,KAAI,aACA,KAAI,SAAS;CAGjB,MAAM,aAAa,QAAQ,IAAI,mBAAmB;AAClD,KAAI,eAAe,KACf,KAAI;AACA,MAAI,OAAO,mBAAmB,WAAW;SACrC;AACJ,MAAI,OAAO;;CAInB,MAAM,YAAY,QAAQ,IAAI,uBAAuB;AACrD,KAAI,WAAW;EACX,MAAM,MAAM,WAAW,UAAU;AACjC,MAAI,SAAS,IAAI,CACb,KAAI,WAAW;;CAIvB,MAAM,YAAY,QAAQ,IAAI,wBAAwB;AACtD,KAAI,WAAW;EACX,MAAM,MAAM,WAAW,UAAU;AACjC,MAAI,SAAS,IAAI,CACb,KAAI,YAAY;;CAIxB,MAAM,WAAW,QAAQ,IAAI,uBAAuB;AACpD,KAAI,SACA,KAAI,WAAW;CAInB,MAAM,YAAY,QAAQ,IAAI,eAAe;AAC7C,KAAI,aAAa,CAAC,IAAI,QAClB,KAAI,UAAU;CAIlB,MAAM,gBAAgB,QAAQ,IAAI,4BAA4B;AAC9D,KAAI,iBAAiB,CAAC,IAAI,QACtB,KAAI,UAAU;AAGlB,QAAO;;;;;AC7DX,MAAa,cAAc;;AAG3B,MAAa,iBAAgC;CACzC,MAAM;CACN,UAAU;CACV,QAAQ,QAAQ,IAAI,aAAa;CACjC,UAAU;CACV,QAAQ;CACX;;;;AAKD,SAAgB,gBAAgB,KAAkB;AAC9C,QAAO,mBAAmB,KAAK,UAAU,IAAI,CAAC;;;;;;AAOlD,SAAgB,YAAY,OAAyC;AACjE,KAAI,CAAC,MACD,QAAO,EAAE;AAGb,KAAI;EACA,MAAM,UAAU,mBAAmB,MAAM;EACzC,MAAM,SAAS,KAAK,MAAM,QAAQ;AAElC,MAAI,OAAO,WAAW,YAAY,WAAW,KACzC,QAAO,EAAE;EAIb,MAAM,UAAwB,EAAE;AAEhC,MAAI,OAAO,OAAO,OAAO,SAAU,SAAQ,KAAK,OAAO;AACvD,MAAI,OAAO,OAAO,cAAc,SAAU,SAAQ,YAAY,OAAO;AACrE,MAAI,OAAO,OAAO,cAAc,SAAU,SAAQ,YAAY,OAAO;AACrE,MAAI,OAAO,OAAO,kBAAkB,SAAU,SAAQ,gBAAgB,OAAO;AAC7E,MAAI,OAAO,OAAO,YAAY,SAAU,SAAQ,UAAU,OAAO;AACjE,MAAI,OAAO,OAAO,gBAAgB,SAAU,SAAQ,cAAc,OAAO;AACzE,MAAI,OAAO,OAAO,SAAS,UAAW,SAAQ,OAAO,OAAO;AAC5D,MAAI,OAAO,OAAO,WAAW,SAAU,SAAQ,SAAS,OAAO;AAC/D,MAAI,OAAO,OAAO,eAAe,SAAU,SAAQ,aAAa,OAAO;AACvE,MAAI,OAAO,OAAO,SAAS,SAAU,SAAQ,OAAO,OAAO;AAC3D,MAAI,OAAO,OAAO,eAAe,SAAU,SAAQ,aAAa,OAAO;AACvE,MAAI,OAAO,OAAO,aAAa,SAAU,SAAQ,WAAW,OAAO;AACnE,MAAI,OAAO,OAAO,cAAc,SAAU,SAAQ,YAAY,OAAO;AACrE,MAAI,OAAO,OAAO,aAAa,SAAU,SAAQ,WAAW,OAAO;AACnE,MAAI,OAAO,OAAO,mBAAmB,SAAU,SAAQ,iBAAiB,OAAO;AAC/E,MAAI,OAAO,OAAO,cAAc,SAAU,SAAQ,YAAY,OAAO;AACrE,MAAI,OAAO,OAAO,cAAc,UAAW,SAAQ,YAAY,OAAO;AACtE,MAAI,OAAO,OAAO,gBAAgB,SAAU,SAAQ,cAAc,OAAO;AACzE,MAAI,OAAO,OAAO,uBAAuB,UAAW,SAAQ,qBAAqB,OAAO;AAExF,SAAO;SACH;AACJ,SAAO,EAAE;;;;;;;;;;;ACvDjB,SAAgB,qBACZ,KACA,IACG;AACH,QAAO;EACH,IAAK,IAAI,MAAiB;EAC1B,WAAW,IAAI;EACf,WAAW,IAAI;EACf,eAAe,IAAI;EACnB,SAAS,IAAI;EACb,aAAa,IAAI;EACjB,MAAM,IAAI;EACV,QAAQ,IAAI;EACZ,YAAY,IAAI;EAChB,MAAM,IAAI;EACV,YAAY,IAAI;EAChB,UAAU,IAAI;EACd,WAAW,IAAI;EACf,UAAU,IAAI;EACd,gBAAgB,IAAI;EACpB,WAAW,IAAI;EACf,WAAW,IAAI;EACf,aAAa,IAAI;EACjB,oBAAoB;EACvB;;;;;;;;;;;;;;;;ACXL,SAAgB,aAAa,SAAgC;CACzD,MAAM,EAAE,QAAQ,UAAU,KAAK,OAAO;CAGtC,MAAM,MAAW,EAAE,IAAI;AAGvB,KAAI,OACA,QAAO,OAAO,KAAK,eAAe,OAAO,CAAC;AAI9C,KAAI,SACA,QAAO,OAAO,KAAK,eAAe,SAAS,CAAC;AAIhD,KAAI,IACA,QAAO,OAAO,KAAK,eAAe,IAAI,CAAC;AAK3C,KACI,QAAQ,uBAAuB,QAC/B,QAAQ,OAAO,MACf,QAAQ,UACV;AACE,MAAI,WAAW,OAAO;AACtB,MAAI,qBAAqB;;AAI7B,KAAI,KAAK;AAET,QAAO;;;;;;AAOX,SAAS,eAAe,KAAiC;CACrD,MAAM,SAAuB,EAAE;AAC/B,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,IAAI,CAC1C,KAAI,UAAU,KAAA,EACT,QAAmC,OAAO;AAGnD,QAAO"}

package/package.json

@@ -0,0 +1,24 @@
+{
+    "name": "@netloc8/netloc8-js",
+    "version": "0.1.0",
+    "type": "module",
+    "license": "Elastic-2.0",
+    "exports": {
+        ".": {
+            "bun": "./src/index.ts",
+            "import": "./dist/index.mjs",
+            "types": "./dist/index.d.mts"
+        }
+    },
+    "files": [
+        "dist/"
+    ],
+    "scripts": {
+        "build": "tsdown",
+        "clean": "rm -rf dist",
+        "test": "bun test src/"
+    },
+    "engines": {
+        "node": ">=18"
+    }
+}