@prosopo/user-access-policy 3.5.19 → 3.5.27

package/dist/tests/testLogger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testLogger.d.ts","sourceRoot":"","sources":["../../src/tests/testLogger.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAG9C,QAAA,MAAM,oBAAoB,EAAE,MAkB3B,CAAC;AAEF,OAAO,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/tests/testLogger.js

@@ -0,0 +1,22 @@
+import { vi } from "vitest";
+const loggerMockedInstance = {
+    trace: vi.fn(),
+    debug: vi.fn(),
+    info: vi.fn(),
+    warn: vi.fn(),
+    error: vi.fn(),
+    fatal: vi.fn(),
+    log: vi.fn(),
+    setLogLevel: vi.fn(),
+    getLogLevel: vi.fn(),
+    with: vi.fn().mockReturnThis(),
+    getScope: vi.fn().mockReturnValue("test-scope"),
+    getPretty: vi.fn().mockReturnValue(false),
+    setPretty: vi.fn(),
+    getPrintStack: vi.fn().mockReturnValue(false),
+    setPrintStack: vi.fn(),
+    getFormat: vi.fn().mockReturnValue("json"),
+    setFormat: vi.fn(),
+};
+export { loggerMockedInstance };
+//# sourceMappingURL=testLogger.js.map

package/dist/tests/testLogger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testLogger.js","sourceRoot":"","sources":["../../src/tests/testLogger.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE5B,MAAM,oBAAoB,GAAW;IACpC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;IACd,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;IACd,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;IACb,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;IACb,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;IACd,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;IACd,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;IACZ,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;IACpB,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;IACpB,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;IAC9B,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,YAAY,CAAC;IAC/C,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC;IACzC,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;IAClB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC;IAC7C,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;IACtB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;CAClB,CAAC;AAEF,OAAO,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/tests/transformRule.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=transformRule.unit.test.d.ts.map

package/dist/tests/transformRule.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transformRule.unit.test.d.ts","sourceRoot":"","sources":["../../src/tests/transformRule.unit.test.ts"],"names":[],"mappings":""}

package/dist/tests/transformRule.unit.test.js

@@ -0,0 +1,188 @@
+import { CaptchaType } from "@prosopo/types";
+import { Address4 } from "ip-address";
+import { describe, expect, it } from "vitest";
+import { AccessPolicyType } from "#policy/rule.js";
+import { getCidrFromNumericIpRange, makeAccessRuleHash, transformAccessRuleIntoRecord, transformAccessRuleRecordIntoRule, } from "#policy/transformRule.js";
+describe("makeAccessRuleHash", () => {
+    it("should make md5 rule hash", () => {
+        const rule = {
+            type: AccessPolicyType.Restrict,
+        };
+        const hash = makeAccessRuleHash(rule);
+        expect(hash).toEqual("755f7123e8f766b6692218b1014b85ca");
+    });
+    it("should handle bigint rule properties", () => {
+        const rule = {
+            type: AccessPolicyType.Restrict,
+            numericIp: 100n,
+        };
+        const hash = makeAccessRuleHash(rule);
+        expect(hash).toEqual("ab3fea02b8ef3309fb3fa6f6f703c55a");
+    });
+    it("should make same hash for same values regardless of properties order", () => {
+        const rule1 = {
+            type: AccessPolicyType.Restrict,
+            description: "description",
+        };
+        const rule2 = {
+            description: "description",
+            type: AccessPolicyType.Restrict,
+        };
+        const hash1 = makeAccessRuleHash(rule1);
+        const hash2 = makeAccessRuleHash(rule2);
+        expect(hash1).toEqual("5ed2f7de7ba1c6acc617f9246f19d35b");
+        expect(hash1).toEqual(hash2);
+    });
+    it("should make same hash for 'undefined' and missing properties", () => {
+        const rule1 = {
+            type: AccessPolicyType.Restrict,
+            description: undefined,
+        };
+        const rule2 = {
+            type: AccessPolicyType.Restrict,
+        };
+        const hash1 = makeAccessRuleHash(rule1);
+        const hash2 = makeAccessRuleHash(rule2);
+        expect(hash1).toEqual("755f7123e8f766b6692218b1014b85ca");
+        expect(hash1).toEqual(hash2);
+    });
+});
+describe("transformRule", () => {
+    const commonProperties = {
+        type: AccessPolicyType.Restrict,
+        captchaType: CaptchaType.frictionless,
+        description: "test",
+        solvedImagesCount: 1,
+        imageThreshold: 1,
+        powDifficulty: 1,
+        unsolvedImagesCount: 1,
+        frictionlessScore: 1,
+        headersHash: "headersHash",
+        ja4Hash: "js4Hash",
+        clientId: "client",
+        userId: "user",
+    };
+    it("should transform access rule record into rule", () => {
+        const ruleRecord = {
+            ...commonProperties,
+            ruleGroupId: "ruleGroupId",
+            ipMask: "127.0.0.0/20",
+            ip: "127.0.0.0",
+            userAgent: "test",
+        };
+        const accessRule = transformAccessRuleRecordIntoRule({
+            ...ruleRecord,
+            unwantedProperty: "bloatware",
+        });
+        expect(accessRule).toEqual({
+            ...commonProperties,
+            groupId: "ruleGroupId",
+            numericIp: 2130706432n,
+            numericIpMaskMax: 2130710527n,
+            numericIpMaskMin: 2130706432n,
+            userAgentHash: "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
+        });
+    });
+    it("should transform access rule into record", () => {
+        const accessRule = {
+            ...commonProperties,
+            groupId: "ruleGroupId",
+            numericIp: 2130706432n,
+            numericIpMaskMax: 2130710527n,
+            numericIpMaskMin: 2130706432n,
+            userAgentHash: "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
+        };
+        const accessRuleRecord = transformAccessRuleIntoRecord({
+            ...accessRule,
+            unwantedProperty: "bloatware",
+        });
+        expect(accessRuleRecord).toEqual({
+            ...commonProperties,
+            ruleGroupId: "ruleGroupId",
+            ipMask: "127.0.0.0/20",
+            ip: "127.0.0.0",
+            userAgent: "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
+        });
+    });
+    it("should throw error if cannot transform access rule record into rule", () => {
+        expect(() => transformAccessRuleRecordIntoRule({
+            ip: "127.0.0.1",
+            userAgent: "test",
+        })).toThrow();
+    });
+    it("should throw error if cannot transform access rule into record", () => {
+        expect(() => transformAccessRuleIntoRecord({
+            ip: "127.0.0.1",
+            userAgent: "test",
+        })).toThrow();
+    });
+});
+describe("getCidrFromNumericIpRange", () => {
+    const cirdsSet = [
+        {
+            cidr: "127.0.0.0/20",
+            startIp: "127.0.0.0",
+            endIp: "127.0.15.255",
+            description: "/20 network - 4096 addresses",
+        },
+        {
+            cidr: "192.168.1.0/24",
+            startIp: "192.168.1.0",
+            endIp: "192.168.1.255",
+            description: "/24 network - 256 addresses (Class C)",
+        },
+        {
+            cidr: "10.0.0.0/8",
+            startIp: "10.0.0.0",
+            endIp: "10.255.255.255",
+            description: "/8 network - 16M addresses (Class A)",
+        },
+        {
+            cidr: "172.16.0.0/12",
+            startIp: "172.16.0.0",
+            endIp: "172.31.255.255",
+            description: "/12 network - 1M addresses",
+        },
+        {
+            cidr: "192.168.0.0/16",
+            startIp: "192.168.0.0",
+            endIp: "192.168.255.255",
+            description: "/16 network - 65536 addresses (Class B)",
+        },
+        {
+            cidr: "192.168.1.128/25",
+            startIp: "192.168.1.128",
+            endIp: "192.168.1.255",
+            description: "/25 network - 128 addresses (subnet)",
+        },
+        {
+            cidr: "10.20.30.0/28",
+            startIp: "10.20.30.0",
+            endIp: "10.20.30.15",
+            description: "/28 network - 16 addresses (small subnet)",
+        },
+        {
+            cidr: "8.8.8.8/32",
+            startIp: "8.8.8.8",
+            endIp: "8.8.8.8",
+            description: "/32 network - single IP address",
+        },
+        {
+            cidr: "203.0.113.0/30",
+            startIp: "203.0.113.0",
+            endIp: "203.0.113.3",
+            description: "/30 network - 4 addresses (point-to-point)",
+        },
+        {
+            cidr: "198.51.100.64/26",
+            startIp: "198.51.100.64",
+            endIp: "198.51.100.127",
+            description: "/26 network - 64 addresses",
+        },
+    ];
+    it.each(cirdsSet)("should convert $description to $cidr", (cirdExample) => {
+        const cird = getCidrFromNumericIpRange(new Address4(cirdExample.startIp).bigInt(), new Address4(cirdExample.endIp).bigInt());
+        expect(cird).toEqual(cirdExample.cidr);
+    });
+});
+//# sourceMappingURL=transformRule.unit.test.js.map

package/dist/tests/transformRule.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transformRule.unit.test.js","sourceRoot":"","sources":["../../src/tests/transformRule.unit.test.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAmB,MAAM,iBAAiB,CAAC;AAEpE,OAAO,EACN,yBAAyB,EACzB,kBAAkB,EAClB,6BAA6B,EAC7B,iCAAiC,GACjC,MAAM,0BAA0B,CAAC;AAElC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACpC,MAAM,IAAI,GAAe;YACxB,IAAI,EAAE,gBAAgB,CAAC,QAAQ;SAC/B,CAAC;QAEF,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAEtC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC/C,MAAM,IAAI,GAAe;YACxB,IAAI,EAAE,gBAAgB,CAAC,QAAQ;YAC/B,SAAS,EAAE,IAAI;SACf,CAAC;QAEF,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAEtC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC/E,MAAM,KAAK,GAAe;YACzB,IAAI,EAAE,gBAAgB,CAAC,QAAQ;YAC/B,WAAW,EAAE,aAAa;SAC1B,CAAC;QACF,MAAM,KAAK,GAAe;YACzB,WAAW,EAAE,aAAa;YAC1B,IAAI,EAAE,gBAAgB,CAAC,QAAQ;SAC/B,CAAC;QAEF,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAExC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;QAE1D,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACvE,MAAM,KAAK,GAAe;YACzB,IAAI,EAAE,gBAAgB,CAAC,QAAQ;YAC/B,WAAW,EAAE,SAAS;SACtB,CAAC;QACF,MAAM,KAAK,GAAe;YACzB,IAAI,EAAE,gBAAgB,CAAC,QAAQ;SAC/B,CAAC;QAEF,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAExC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;QAE1D,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC9B,MAAM,gBAAgB,GAAG;QACxB,IAAI,EAAE,gBAAgB,CAAC,QAAQ;QAC/B,WAAW,EAAE,WAAW,CAAC,YAAY;QACrC,WAAW,EAAE,MAAM;QACnB,iBAAiB,EAAE,CAAC;QACpB,cAAc,EAAE,CAAC;QACjB,aAAa,EAAE,CAAC;QAChB,mBAAmB,EAAE,CAAC;QACtB,iBAAiB,EAAE,CAAC;QACpB,WAAW,EAAE,aAAa;QAC1B,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,MAAM;KACO,CAAC;IAEvB,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACxD,MAAM,UAAU,GAA+B;YAC9C,GAAG,gBAAgB;YACnB,WAAW,EAAE,aAAa;YAC1B,MAAM,EAAE,cAAc;YACtB,EAAE,EAAE,WAAW;YACf,SAAS,EAAE,MAAM;SACjB,CAAC;QAEF,MAAM,UAAU,GAAG,iCAAiC,CAAC;YACpD,GAAG,UAAU;YACb,gBAAgB,EAAE,WAAW;SACE,CAAC,CAAC;QAElC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC;YAC1B,GAAG,gBAAgB;YACnB,OAAO,EAAE,aAAa;YACtB,SAAS,EAAE,WAAW;YACtB,gBAAgB,EAAE,WAAW;YAC7B,gBAAgB,EAAE,WAAW;YAC7B,aAAa,EACZ,kEAAkE;SACnE,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QACnD,MAAM,UAAU,GAAyB;YACxC,GAAG,gBAAgB;YACnB,OAAO,EAAE,aAAa;YACtB,SAAS,EAAE,WAAW;YACtB,gBAAgB,EAAE,WAAW;YAC7B,gBAAgB,EAAE,WAAW;YAC7B,aAAa,EACZ,kEAAkE;SACnE,CAAC;QAEF,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;YACtD,GAAG,UAAU;YACb,gBAAgB,EAAE,WAAW;SACJ,CAAC,CAAC;QAE5B,MAAM,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC;YAChC,GAAG,gBAAgB;YACnB,WAAW,EAAE,aAAa;YAC1B,MAAM,EAAE,cAAc;YACtB,EAAE,EAAE,WAAW;YACf,SAAS,EACR,kEAAkE;SACnE,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC9E,MAAM,CAAC,GAAG,EAAE,CAEX,iCAAiC,CAAC;YACjC,EAAE,EAAE,WAAW;YACf,SAAS,EAAE,MAAM;SACc,CAAC,CACjC,CAAC,OAAO,EAAE,CAAC;IACb,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,GAAG,EAAE,CAEX,6BAA6B,CAAC;YAC7B,EAAE,EAAE,WAAW;YACf,SAAS,EAAE,MAAM;SACQ,CAAC,CAC3B,CAAC,OAAO,EAAE,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IAQ1C,MAAM,QAAQ,GAAkB;QAC/B;YACC,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,WAAW;YACpB,KAAK,EAAE,cAAc;YACrB,WAAW,EAAE,8BAA8B;SAC3C;QACD;YACC,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,aAAa;YACtB,KAAK,EAAE,eAAe;YACtB,WAAW,EAAE,uCAAuC;SACpD;QACD;YACC,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,UAAU;YACnB,KAAK,EAAE,gBAAgB;YACvB,WAAW,EAAE,sCAAsC;SACnD;QACD;YACC,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,YAAY;YACrB,KAAK,EAAE,gBAAgB;YACvB,WAAW,EAAE,4BAA4B;SACzC;QACD;YACC,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,aAAa;YACtB,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,yCAAyC;SACtD;QACD;YACC,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,eAAe;YACxB,KAAK,EAAE,eAAe;YACtB,WAAW,EAAE,sCAAsC;SACnD;QACD;YACC,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,YAAY;YACrB,KAAK,EAAE,aAAa;YACpB,WAAW,EAAE,2CAA2C;SACxD;QACD;YACC,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,SAAS;YAChB,WAAW,EAAE,iCAAiC;SAC9C;QACD;YACC,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,aAAa;YACtB,KAAK,EAAE,aAAa;YACpB,WAAW,EAAE,4CAA4C;SACzD;QACD;YACC,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,eAAe;YACxB,KAAK,EAAE,gBAAgB;YACvB,WAAW,EAAE,4BAA4B;SACzC;KACD,CAAC;IAEF,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,sCAAsC,EAAE,CAAC,WAAW,EAAE,EAAE;QACzE,MAAM,IAAI,GAAG,yBAAyB,CACrC,IAAI,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAC1C,IAAI,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CACxC,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/transformRule.d.ts

@@ -0,0 +1,7 @@
+import type { AccessRule } from "./rule.js";
+import type { AccessRuleRecord } from "./ruleRecord.js";
+export declare const makeAccessRuleHash: (rule: AccessRule) => string;
+export declare const transformAccessRuleRecordIntoRule: (ruleRecord: AccessRuleRecord) => AccessRule;
+export declare const transformAccessRuleIntoRecord: (rule: AccessRule) => AccessRuleRecord;
+export declare const getCidrFromNumericIpRange: (startIp: bigint, endIp: bigint) => string | undefined;
+//# sourceMappingURL=transformRule.d.ts.map

package/dist/transformRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transformRule.d.ts","sourceRoot":"","sources":["../src/transformRule.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAO5C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAIxD,eAAO,MAAM,kBAAkB,SAAU,UAAU,KAAG,MAYrD,CAAC;AAEF,eAAO,MAAM,iCAAiC,eACjC,gBAAgB,KAC1B,UAE+B,CAAC;AAEnC,eAAO,MAAM,6BAA6B,SACnC,UAAU,KACd,gBAAwD,CAAC;AAgE5D,eAAO,MAAM,yBAAyB,YAC5B,MAAM,SACR,MAAM,KACX,MAAM,GAAG,SASX,CAAC"}

package/dist/transformRule.js

@@ -0,0 +1,77 @@
+import crypto from "node:crypto";
+import { IpRange, IpAddress } from "cidr-calc";
+import { Address4 } from "ip-address";
+import { z } from "zod";
+import { policyScopeInput, accessPolicyInput } from "./ruleInput/policyInput.js";
+import { accessRuleInput } from "./ruleInput/ruleInput.js";
+import { userScopeSchema } from "./ruleInput/userScopeInput.js";
+const RULE_HASH_ALGORITHM = "md5";
+const makeAccessRuleHash = (rule) => {
+  const valueProperties = Object.entries(rule).filter(
+    ([key, value]) => "undefined" !== typeof value
+  );
+  const orderedProperties = valueProperties.sort();
+  const objectToHash = Object.fromEntries(orderedProperties);
+  return hashObject(objectToHash, RULE_HASH_ALGORITHM);
+};
+const transformAccessRuleRecordIntoRule = (ruleRecord) => (
+  // accessRuleInput does all the record field transformations
+  accessRuleInput.parse(ruleRecord)
+);
+const transformAccessRuleIntoRecord = (rule) => accessRuleToRecordScheme.parse(rule);
+const accessRuleToRecordScheme = z.object({
+  ...accessPolicyInput.shape,
+  ...policyScopeInput.shape,
+  ...userScopeSchema.shape,
+  groupId: z.coerce.string().optional()
+}).transform((ruleInput) => {
+  const {
+    groupId,
+    numericIp,
+    numericIpMaskMin,
+    numericIpMaskMax,
+    userAgentHash,
+    ...rule
+  } = ruleInput;
+  const record = rule;
+  if ("string" === typeof groupId) {
+    record.ruleGroupId = groupId;
+  }
+  if ("string" === typeof userAgentHash) {
+    record.userAgent = userAgentHash;
+  }
+  if ("bigint" === typeof numericIp) {
+    record.ip = getStringIpFromNumeric(numericIp);
+  }
+  if ("bigint" === typeof numericIpMaskMin && "bigint" === typeof numericIpMaskMax) {
+    record.ipMask = getCidrFromNumericIpRange(
+      numericIpMaskMin,
+      numericIpMaskMax
+    );
+  }
+  return record;
+});
+const hashObject = (object, algorithm) => crypto.createHash(algorithm).update(
+  JSON.stringify(
+    object,
+    (key, value) => (
+      // JSON.stringify can't handle BigInt itself: throws "Do not know how to serialize a BigInt"
+      "bigint" === typeof value ? value.toString() : value
+    )
+  )
+).digest("hex");
+const getStringIpFromNumeric = (numericIp) => Address4.fromInteger(Number(numericIp)).address;
+const getCidrFromNumericIpRange = (startIp, endIp) => {
+  const ipRange = new IpRange(
+    IpAddress.of(getStringIpFromNumeric(startIp)),
+    IpAddress.of(getStringIpFromNumeric(endIp))
+  );
+  const cidr = ipRange.toCidrs()[0];
+  return cidr ? `${cidr.prefix.toString()}/${cidr.prefixLen}` : void 0;
+};
+export {
+  getCidrFromNumericIpRange,
+  makeAccessRuleHash,
+  transformAccessRuleIntoRecord,
+  transformAccessRuleRecordIntoRule
+};

package/dist/transformRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transformRule.js","sourceRoot":"","sources":["../src/transformRule.ts"],"names":[],"mappings":"AAcA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACN,iBAAiB,EACjB,gBAAgB,GAChB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAGhE,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAAgB,EAAU,EAAE;IAE9D,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAClD,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,WAAW,KAAK,OAAO,KAAK,CAC9C,CAAC;IAGF,MAAM,iBAAiB,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC;IAEjD,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAE3D,OAAO,UAAU,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;AACtD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAChD,UAA4B,EACf,EAAE,CAEf,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAEnC,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAC5C,IAAgB,EACG,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAE5D,MAAM,wBAAwB,GAAG,CAAC;KAChC,MAAM,CAAC;IACP,GAAG,iBAAiB,CAAC,KAAK;IAC1B,GAAG,gBAAgB,CAAC,KAAK;IACzB,GAAG,eAAe,CAAC,KAAK;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,SAAS,CAAC,CAAC,SAAqB,EAAoB,EAAE;IAEtD,MAAM,EACL,OAAO,EACP,SAAS,EACT,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,GAAG,IAAI,EACP,GAAG,SAAS,CAAC;IAEd,MAAM,MAAM,GAAqB,IAAI,CAAC;IAEtC,IAAI,QAAQ,KAAK,OAAO,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC;IAC9B,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,aAAa,EAAE,CAAC;QACvC,MAAM,CAAC,SAAS,GAAG,aAAa,CAAC;IAClC,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,EAAE,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IAED,IACC,QAAQ,KAAK,OAAO,gBAAgB;QACpC,QAAQ,KAAK,OAAO,gBAAgB,EACnC,CAAC;QACF,MAAM,CAAC,MAAM,GAAG,yBAAyB,CACxC,gBAAgB,EAChB,gBAAgB,CAChB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC,CAAC,CAAC;AAEJ,MAAM,UAAU,GAAG,CAClB,MAA+B,EAC/B,SAAiB,EACR,EAAE,CACX,MAAM;KACJ,UAAU,CAAC,SAAS,CAAC;KACrB,MAAM,CACN,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAErC,QAAQ,KAAK,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CACpD,CACD;KACA,MAAM,CAAC,KAAK,CAAC,CAAC;AAEjB,MAAM,sBAAsB,GAAG,CAAC,SAAiB,EAAU,EAAE,CAC5D,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAEjD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACxC,OAAe,EACf,KAAa,EACQ,EAAE;IACvB,MAAM,OAAO,GAAG,IAAI,OAAO,CAC1B,SAAS,CAAC,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,EAC7C,SAAS,CAAC,EAAE,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAC3C,CAAC;IAEF,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAElC,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACzE,CAAC,CAAC"}

package/dist/util.d.ts

@@ -0,0 +1,2 @@
+export declare const hashUserAgent: (userAgent: string) => string;
+//# sourceMappingURL=util.d.ts.map

package/dist/util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,aAAa,cAAe,MAAM,KAAG,MACU,CAAC"}

package/dist/util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"AAaA,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,SAAiB,EAAU,EAAE,CAC1D,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC"}

package/entries.ts

@@ -0,0 +1,20 @@
+// Copyright 2021-2025 Prosopo (UK) Ltd.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+export const entries: Record<string, string> = {
+	".export": "src/.export.ts",
+	"api/.export": "src/api/.export.ts",
+	"redis/.export": "src/redis/.export.ts",
+	"mongoose/.export": "src/mongoose/.export.ts",
+};

package/package.json

@@ -1,18 +1,31 @@
 {
 	"name": "@prosopo/user-access-policy",
-	"version": "3.5.19",
-	"main": "dist/index.js",
-	"types": "dist/index.d.ts",
+	"version": "3.5.27",
 	"type": "module",
 	"engines": {
-		"node": "20",
-		"npm": "10.8.2"
+		"node": ">=v20.0.0",
+		"npm": ">=10.6.0"
 	},
 	"exports": {
 		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js",
-			"require": "./dist/cjs/index.cjs"
+			"types": "./dist/.export.d.ts",
+			"import": "./dist/.export.js",
+			"require": "./dist/cjs/.export.cjs"
+		},
+		"./api": {
+			"types": "./dist/api/.export.d.ts",
+			"import": "./dist/api/.export.js",
+			"require": "./dist/cjs/api/.export.cjs"
+		},
+		"./redis": {
+			"types": "./dist/redis/.export.d.ts",
+			"import": "./dist/redis/.export.js",
+			"require": "./dist/cjs/redis/.export.cjs"
+		},
+		"./mongoose": {
+			"types": "./dist/mongoose/.export.d.ts",
+			"import": "./dist/mongoose/.export.js",
+			"require": "./dist/cjs/mongoose/.export.cjs"
 		}
 	},
 	"imports": {
@@ -29,24 +42,27 @@
 		"test": "npm run test:unit && npm run test:integration"
 	},
 	"dependencies": {
-		"@prosopo/api": "3.1.24",
-		"@prosopo/api-route": "2.6.28",
-		"@prosopo/common": "3.1.20",
-		"@prosopo/redis-client": "1.0.5",
-		"@prosopo/types": "3.5.3",
-		"@prosopo/util": "3.1.5",
+		"@prosopo/api": "3.1.32",
+		"@prosopo/api-route": "2.6.29",
+		"@prosopo/common": "3.1.21",
+		"@prosopo/redis-client": "1.0.6",
+		"@prosopo/types": "3.5.11",
+		"@prosopo/util": "3.1.7",
 		"@redis/search": "5.0.0",
+		"@redis/client": "5.0.0",
+		"cidr-calc": "1.0.4",
 		"dotenv": "16.4.5",
 		"ip-address": "10.0.1",
 		"redis": "5.0.0",
 		"zod": "3.23.8"
 	},
 	"devDependencies": {
-		"@prosopo/config": "3.1.20",
-		"@prosopo/util-crypto": "13.5.22",
+		"@prosopo/config": "3.1.21",
+		"@prosopo/util-crypto": "13.5.23",
 		"@types/node": "22.10.2",
-		"vite": "6.3.5",
-		"vitest": "3.0.9",
+		"mongoose": "8.13.0",
+		"vite": "6.4.1",
+		"vitest": "3.2.4",
 		"yargs": "17.7.2"
 	},
 	"author": "PROSOPO LIMITED <info@prosopo.io>",

package/vite.cjs.config.ts

@@ -1,4 +1,3 @@
-import path from "node:path";
 // Copyright 2021-2025 Prosopo (UK) Ltd.
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
@@ -12,11 +11,15 @@ import path from "node:path";
 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 // See the License for the specific language governing permissions and
 // limitations under the License.
+
+import path from "node:path";
 import { ViteCommonJSConfig } from "@prosopo/config";
+import { entries } from "./entries.js";
 
 export default function () {
 	return ViteCommonJSConfig(
 		path.basename("."),
 		path.resolve("./tsconfig.json"),
+		entries,
 	);
 }

package/vite.esm.config.ts

@@ -14,7 +14,12 @@
 
 import path from "node:path";
 import { ViteEsmConfig } from "@prosopo/config";
+import { entries } from "./entries.js";
 
 export default function () {
-	return ViteEsmConfig(path.basename("."), path.resolve("./tsconfig.json"));
+	return ViteEsmConfig(
+		path.basename("."),
+		path.resolve("./tsconfig.json"),
+		entries,
+	);
 }

package/dist/cjs/api/accessRulesApiClient.cjs

@@ -1,38 +0,0 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const api = require("@prosopo/api");
-const accessRuleApiRoutes = require("./accessRuleApiRoutes.cjs");
-class AccessRulesApiClient extends api.ApiClient {
-  insertMany(toInsert, timestamp, signature) {
-    return this.post(accessRuleApiRoutes.accessRuleApiPaths.INSERT_MANY, toInsert, {
-      headers: {
-        "Prosopo-Site-Key": this.account,
-        timestamp,
-        signature
-      }
-    });
-  }
-  deleteMany(toDelete, timestamp, signature) {
-    return this.post(accessRuleApiRoutes.accessRuleApiPaths.DELETE_MANY, toDelete, {
-      headers: {
-        "Prosopo-Site-Key": this.account,
-        timestamp,
-        signature
-      }
-    });
-  }
-  deleteAll(timestamp, signature) {
-    return this.post(
-      accessRuleApiRoutes.accessRuleApiPaths.DELETE_ALL,
-      {},
-      {
-        headers: {
-          "Prosopo-Site-Key": this.account,
-          timestamp,
-          signature
-        }
-      }
-    );
-  }
-}
-exports.AccessRulesApiClient = AccessRulesApiClient;