@socialtip/asset-proxy-url-parser 0.5.0

package/CHANGELOG.md

@@ -0,0 +1,39 @@
+## 0.5.0
+
+- fix: use scale_cuda for GPU video resize instead of cuvid -resize
+- docs: documented videoThumbnailAnimation options
+- feat: support fill, extendFrame, trim, and focus point in VTA
+- feat(proxy): add page info option, inline snapshots for validation tests
+- refactor: add zod schema for info control options, add max_src_resolution
+- feat(proxy): add hashsum verification and source limits to info endpoint
+- feat(proxy): add calc_hashsums info option
+- feat(proxy): add blurhash info option
+- feat(proxy): add dominant colours info option
+- feat(proxy): add average colour info option
+- feat(proxy): add palette info option
+- refactor: move info URL option parsing to url-parser package
+
+## 0.4.1
+
+- fix: preserve JSDoc on ParsedUrlInput in declaration output
+- feat: add resizingAlgorithm to parsedUrlSchema and URL generator
+
+## 0.4.0
+
+- feat: add mute option to strip audio from video (ST-2456)
+- fix: allow image-only options with video thumbnail extraction (ST-2541)
+- feat: add security limit options (ST-2501)
+- feat: add miscellaneous imgproxy options (ST-2500)
+
+## 0.3.0
+
+- feat: ensure URL generator produces identical URLs to @imgproxy/imgproxy-node
+- feat: add best format selection for images
+
+## 0.2.0
+
+- refactor: standardise tsconfig pattern and add path aliases across all packages
+
+## 0.1.0
+
+Initial release with `@socialtip`-scoped packages.

package/README.md

@@ -0,0 +1,78 @@
+# @socialtip/asset-proxy-url-parser
+
+Shared URL schema, parsing, signature verification/generation, and source URL encryption for the [asset-proxy](../../README.md) service.
+
+## Installation
+
+```bash
+npm install @socialtip/asset-proxy-url-parser
+```
+
+## Usage
+
+### Parsing a URL
+
+```ts
+import { parseProcessingUrl } from "@socialtip/asset-proxy-url-parser";
+
+const parsed = parseProcessingUrl(
+  "/resize:fill:480:360/q:80/plain/https://example.com/photo.jpg@webp",
+);
+
+parsed.resize; // { type: "fill", width: 480, height: 360 }
+parsed.quality; // 80
+parsed.sourceUrl; // "https://example.com/photo.jpg"
+parsed.outputFormat; // "webp"
+```
+
+With encrypted source URLs:
+
+```ts
+const parsed = parseProcessingUrl("/resize:fill:480:360/enc/dGhpcyBpcy...", {
+  encryptionKey: Buffer.from("0123456789abcdef...", "hex"),
+});
+```
+
+### Signature verification and generation
+
+```ts
+import { verifySignature, sign } from "@socialtip/asset-proxy-url-parser";
+
+// Generate a signature
+const key = Buffer.from("...", "hex");
+const salt = Buffer.from("...", "hex");
+const signature = sign(
+  "/resize:fill:480:360/plain/https://example.com/photo.jpg",
+  key,
+  salt,
+);
+
+// Verify a signed URL
+const pathAfterSignature = verifySignature(
+  `/${signature}/resize:fill:480:360/plain/https://example.com/photo.jpg`,
+  { signingKey: key, signingSalt: salt },
+);
+```
+
+### Source URL encryption
+
+```ts
+import {
+  encryptSourceUrl,
+  decryptSourceUrl,
+} from "@socialtip/asset-proxy-url-parser";
+
+const key = Buffer.from("0123456789abcdef...", "hex"); // 32-byte key
+const encrypted = encryptSourceUrl("https://example.com/photo.jpg", key);
+const decrypted = decryptSourceUrl(encrypted, key);
+```
+
+### Schema and types
+
+```ts
+import {
+  parsedUrlSchema, // Zod schema for validated processing options
+  type ParsedUrlInput, // Input type (z.input<typeof parsedUrlSchema>)
+  type ParsedUrl, // Output type with resizingAlgorithm
+} from "@socialtip/asset-proxy-url-parser";
+```

package/dist/crypto.d.ts

@@ -0,0 +1,8 @@
+/** Decrypts an encrypted source URL. The encrypted payload is URL-safe Base64 encoding of: IV (16 bytes) + AES-256-CBC ciphertext. The plaintext is PKCS#7 padded before encryption. */
+export declare function decryptSourceUrl(encoded: string, key: Buffer): string;
+export interface EncryptOptions {
+    /** When true, derives the IV from the SHA-256 hash of the source URL instead of using random bytes. This makes the encrypted output deterministic for the same input, which is useful when URLs need to be stable for caching purposes. */
+    deterministic?: boolean;
+}
+/** Encrypts a source URL using AES-256-CBC, returning URL-safe Base64 of IV + ciphertext. */
+export declare function encryptSourceUrl(sourceUrl: string, key: Buffer, options?: EncryptOptions): string;

package/dist/crypto.js

@@ -0,0 +1,32 @@
+import { createCipheriv, createDecipheriv, createHash, randomBytes, } from "node:crypto";
+import { HTTPError } from "./error.js";
+/** Decrypts an encrypted source URL. The encrypted payload is URL-safe Base64 encoding of: IV (16 bytes) + AES-256-CBC ciphertext. The plaintext is PKCS#7 padded before encryption. */
+export function decryptSourceUrl(encoded, key) {
+    const data = Buffer.from(encoded, "base64url");
+    if (data.length < 32) {
+        throw new HTTPError("Encrypted payload too short", {
+            code: "BAD_REQUEST",
+        });
+    }
+    const iv = data.subarray(0, 16);
+    const ciphertext = data.subarray(16);
+    const decipher = createDecipheriv("aes-256-cbc", key, iv);
+    const decrypted = Buffer.concat([
+        decipher.update(ciphertext),
+        decipher.final(),
+    ]);
+    return decrypted.toString("utf-8");
+}
+/** Encrypts a source URL using AES-256-CBC, returning URL-safe Base64 of IV + ciphertext. */
+export function encryptSourceUrl(sourceUrl, key, options) {
+    const iv = options?.deterministic
+        ? Buffer.from(createHash("sha256").update(sourceUrl).digest("hex").slice(0, 16))
+        : randomBytes(16);
+    const cipher = createCipheriv("aes-256-cbc", key, iv);
+    const encrypted = Buffer.concat([
+        cipher.update(sourceUrl, "utf-8"),
+        cipher.final(),
+    ]);
+    return Buffer.concat([iv, encrypted]).toString("base64url");
+}
+//# sourceMappingURL=crypto.js.map

package/dist/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,wLAAwL;AACxL,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,GAAW;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAE/C,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,SAAS,CAAC,6BAA6B,EAAE;YACjD,IAAI,EAAE,aAAa;SACpB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAErC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE;KACjB,CAAC,CAAC;IAEH,OAAO,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAOD,6FAA6F;AAC7F,MAAM,UAAU,gBAAgB,CAC9B,SAAiB,EACjB,GAAW,EACX,OAAwB;IAExB,MAAM,EAAE,GAAG,OAAO,EAAE,aAAa;QAC/B,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAClE;QACH,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACpB,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC;QACjC,MAAM,CAAC,KAAK,EAAE;KACf,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC9D,CAAC"}

package/dist/error.d.ts

@@ -0,0 +1,17 @@
+export declare const ERROR_CODES: {
+    readonly BAD_REQUEST: 400;
+    readonly FORBIDDEN: 403;
+    readonly NOT_FOUND: 404;
+    readonly UNPROCESSABLE_ENTITY: 422;
+    readonly INTERNAL_SERVER_ERROR: 500;
+    readonly NOT_IMPLEMENTED: 501;
+    readonly BAD_GATEWAY: 502;
+};
+type ErrorCode = keyof typeof ERROR_CODES;
+export declare class HTTPError extends Error {
+    readonly status: number;
+    constructor(message: string, { code }?: {
+        code?: ErrorCode;
+    });
+}
+export {};

package/dist/error.js

@@ -0,0 +1,17 @@
+export const ERROR_CODES = {
+    BAD_REQUEST: 400,
+    FORBIDDEN: 403,
+    NOT_FOUND: 404,
+    UNPROCESSABLE_ENTITY: 422,
+    INTERNAL_SERVER_ERROR: 500,
+    NOT_IMPLEMENTED: 501,
+    BAD_GATEWAY: 502,
+};
+export class HTTPError extends Error {
+    status;
+    constructor(message, { code = "INTERNAL_SERVER_ERROR" } = {}) {
+        super(message);
+        this.status = ERROR_CODES[code];
+    }
+}
+//# sourceMappingURL=error.js.map

package/dist/error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.js","sourceRoot":"","sources":["../src/error.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,WAAW,EAAE,GAAG;IAChB,SAAS,EAAE,GAAG;IACd,SAAS,EAAE,GAAG;IACd,oBAAoB,EAAE,GAAG;IACzB,qBAAqB,EAAE,GAAG;IAC1B,eAAe,EAAE,GAAG;IACpB,WAAW,EAAE,GAAG;CACR,CAAC;AAIX,MAAM,OAAO,SAAU,SAAQ,KAAK;IACzB,MAAM,CAAS;IAExB,YACE,OAAe,EACf,EAAE,IAAI,GAAG,uBAAuB,KAA2B,EAAE;QAE7D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { HTTPError, ERROR_CODES } from "./error.js";
+export { parseInfoUrl, type InfoOptions, type ControlOptions, type ParsedInfoUrl, type InfoParseOptions, } from "./info-parse.js";
+export { decryptSourceUrl, encryptSourceUrl, type EncryptOptions, } from "./crypto.js";
+export { verifySignature, sign, type SignatureOptions } from "./signature.js";
+export { parseProcessingUrl, parsedUrlSchema, isImageUrl, isVideoUrl, type ParsedUrl, type ParsedUrlInput, type ImageUrl, type VideoUrl, type ParseOptions, type ResizingType, type ResizingAlgorithm, type OutputFormat, type ImageFormat, type VideoFormat, type MediaType, type CompassGravity, type FocusPointGravity, type Gravity, type ResizeOptions, SHORTHANDS, } from "./parse.js";

package/dist/index.js

@@ -0,0 +1,6 @@
+export { HTTPError, ERROR_CODES } from "./error.js";
+export { parseInfoUrl, } from "./info-parse.js";
+export { decryptSourceUrl, encryptSourceUrl, } from "./crypto.js";
+export { verifySignature, sign } from "./signature.js";
+export { parseProcessingUrl, parsedUrlSchema, isImageUrl, isVideoUrl, SHORTHANDS, } from "./parse.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EACL,YAAY,GAKb,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,GAEjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,IAAI,EAAyB,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,UAAU,EACV,UAAU,EAgBV,UAAU,GACX,MAAM,YAAY,CAAC"}

package/dist/info-parse.d.ts

@@ -0,0 +1,98 @@
+import { z } from "zod/v4";
+/** Parsed info endpoint options that control which additional metadata is returned. */
+export interface InfoOptions {
+    /** Include EXIF metadata in the response. */
+    exif?: boolean;
+    /** Include IPTC metadata in the response. */
+    iptc?: boolean;
+    /** Include XMP metadata organised by namespace in the response. */
+    xmp?: boolean;
+    /** Include the image colour space (e.g. `gbr`, `bt709`). */
+    colorspace?: boolean;
+    /** Include the number of image bands/channels. */
+    bands?: boolean;
+    /** Include the sample format (uchar, ushort, float). */
+    sampleFormat?: boolean;
+    /** Include the page/frame count. */
+    pagesNumber?: boolean;
+    /** Include alpha channel information. */
+    alpha?: boolean;
+    /** Return an RGBA colour palette with this many colours (2-256). 0 or undefined to disable. */
+    palette?: number;
+    /** Return the average image colour. */
+    average?: {
+        ignoreTransparent: boolean;
+    };
+    /** Return six dominant colour categories (vibrant, muted, light/dark variants). */
+    dominantColors?: boolean;
+    /** Return a BlurHash string with the given x and y components. */
+    blurhash?: {
+        xComponents: number;
+        yComponents: number;
+    };
+    /** Calculate and return hashsums of the source file. List of types: md5, sha1, sha256, sha512. */
+    calcHashsums?: Array<"md5" | "sha1" | "sha256" | "sha512">;
+    /** Which page to analyse for multi-page images (0-indexed). */
+    page?: number;
+}
+/** Zod schema for runtime validation of parsed info options. The `InfoOptions` interface is the authoritative type definition; this schema validates against it at compile time via `satisfies`. */
+export declare const parsedInfoOptionsSchema: z.ZodObject<{
+    exif: z.ZodOptional<z.ZodBoolean>;
+    iptc: z.ZodOptional<z.ZodBoolean>;
+    xmp: z.ZodOptional<z.ZodBoolean>;
+    colorspace: z.ZodOptional<z.ZodBoolean>;
+    bands: z.ZodOptional<z.ZodBoolean>;
+    sampleFormat: z.ZodOptional<z.ZodBoolean>;
+    pagesNumber: z.ZodOptional<z.ZodBoolean>;
+    alpha: z.ZodOptional<z.ZodBoolean>;
+    palette: z.ZodOptional<z.ZodNumber>;
+    average: z.ZodOptional<z.ZodObject<{
+        ignoreTransparent: z.ZodBoolean;
+    }, z.core.$strip>>;
+    dominantColors: z.ZodOptional<z.ZodBoolean>;
+    blurhash: z.ZodOptional<z.ZodObject<{
+        xComponents: z.ZodNumber;
+        yComponents: z.ZodNumber;
+    }, z.core.$strip>>;
+    calcHashsums: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        sha256: "sha256";
+        md5: "md5";
+        sha1: "sha1";
+        sha512: "sha512";
+    }>>>;
+    page: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+/** Control options parsed from an info URL (security, limits). */
+export interface ControlOptions {
+    /** Unix timestamp after which the URL returns 404. */
+    expires?: number;
+    /** Expected checksum of the source file. */
+    hashsum?: {
+        type: string;
+        hash: string;
+    };
+    /** Max source file size in bytes. */
+    maxSrcFileSize?: number;
+    /** Max source resolution in megapixels. */
+    maxSrcResolution?: number;
+}
+/** Zod schema for runtime validation of parsed control options. The `ControlOptions` interface is the authoritative type definition; this schema validates against it at compile time via `satisfies`. */
+export declare const parsedControlOptionsSchema: z.ZodObject<{
+    expires: z.ZodOptional<z.ZodNumber>;
+    hashsum: z.ZodOptional<z.ZodObject<{
+        type: z.ZodString;
+        hash: z.ZodString;
+    }, z.core.$strip>>;
+    maxSrcFileSize: z.ZodOptional<z.ZodNumber>;
+    maxSrcResolution: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+/** Parsed result from an info URL. */
+export interface ParsedInfoUrl extends ControlOptions {
+    sourceUrl: string;
+    infoOptions: InfoOptions;
+}
+export interface InfoParseOptions {
+    encryptionKey?: Buffer;
+}
+/** Parses an info URL path (after signature has been stripped). Extracts the source URL, info options, and control options (expires, hashsum, source limits). */
+export declare function parseInfoUrl(path: string, options?: InfoParseOptions): ParsedInfoUrl;

package/dist/info-parse.js

@@ -0,0 +1,187 @@
+import { z } from "zod/v4";
+import { decryptSourceUrl } from "./crypto.js";
+import { HTTPError } from "./error.js";
+const zBool = z
+    .string()
+    .transform((v) => v === "1" || v === "t" || v === "true");
+const INFO_SHORTHANDS = {
+    cs: "colorspace",
+    b: "bands",
+    sf: "sample_format",
+    pn: "pages_number",
+    a: "alpha",
+    p: "palette",
+    avg: "average",
+    dc: "dominant_colors",
+    bh: "blurhash",
+    chs: "calc_hashsums",
+    pg: "page",
+};
+const hashsumType = z.enum(["md5", "sha1", "sha256", "sha512"]);
+const rawInfoOptionsSchema = z.object({
+    exif: zBool.optional(),
+    iptc: zBool.optional(),
+    xmp: zBool.optional(),
+    colorspace: zBool.optional(),
+    bands: zBool.optional(),
+    sample_format: zBool.optional(),
+    pages_number: zBool.optional(),
+    alpha: zBool.optional(),
+    palette: z.coerce.number().int().min(0).max(256).optional(),
+    average: z
+        .string()
+        .transform((v) => {
+        const parts = v.split(":");
+        const enabled = parts[0] === "1" || parts[0] === "t" || parts[0] === "true";
+        const ignoreTransparent = parts[1] === "1" || parts[1] === "t" || parts[1] === "true";
+        return enabled ? { ignoreTransparent } : undefined;
+    })
+        .optional(),
+    dominant_colors: zBool.optional(),
+    blurhash: z
+        .string()
+        .transform((v) => {
+        const [x, y] = v.split(":").map(Number);
+        if (!x || !y)
+            return undefined;
+        return { xComponents: x, yComponents: y };
+    })
+        .optional(),
+    calc_hashsums: z
+        .string()
+        .transform((v) => v.split(":").filter((t) => hashsumType.safeParse(t).success))
+        .optional(),
+    page: z.coerce.number().int().min(0).optional(),
+});
+const infoOptionsSchema = rawInfoOptionsSchema.transform((data) => ({
+    exif: data.exif,
+    iptc: data.iptc,
+    xmp: data.xmp,
+    colorspace: data.colorspace,
+    bands: data.bands,
+    sampleFormat: data.sample_format,
+    pagesNumber: data.pages_number,
+    alpha: data.alpha,
+    palette: data.palette,
+    average: data.average,
+    dominantColors: data.dominant_colors,
+    blurhash: data.blurhash,
+    calcHashsums: data.calc_hashsums,
+    page: data.page,
+}));
+/** Zod schema for runtime validation of parsed info options. The `InfoOptions` interface is the authoritative type definition; this schema validates against it at compile time via `satisfies`. */
+export const parsedInfoOptionsSchema = z.object({
+    exif: z.boolean().optional(),
+    iptc: z.boolean().optional(),
+    xmp: z.boolean().optional(),
+    colorspace: z.boolean().optional(),
+    bands: z.boolean().optional(),
+    sampleFormat: z.boolean().optional(),
+    pagesNumber: z.boolean().optional(),
+    alpha: z.boolean().optional(),
+    palette: z.number().optional(),
+    average: z.object({ ignoreTransparent: z.boolean() }).optional(),
+    dominantColors: z.boolean().optional(),
+    blurhash: z
+        .object({ xComponents: z.number(), yComponents: z.number() })
+        .optional(),
+    calcHashsums: z.array(hashsumType).optional(),
+    page: z.number().optional(),
+});
+const CONTROL_SHORTHANDS = {
+    exp: "expires",
+    hs: "hashsum",
+    msfs: "max_src_file_size",
+    msr: "max_src_resolution",
+    cb: "cache_buster",
+};
+const ALL_SHORTHANDS = {
+    ...INFO_SHORTHANDS,
+    ...CONTROL_SHORTHANDS,
+};
+const ALL_OPTION_NAMES = new Set([
+    ...Object.keys(ALL_SHORTHANDS),
+    ...Object.values(ALL_SHORTHANDS),
+    "exif",
+    "iptc",
+    "xmp",
+]);
+const rawControlOptionsSchema = z.object({
+    expires: z.coerce.number().int().optional(),
+    hashsum: z
+        .string()
+        .transform((v) => {
+        const idx = v.indexOf(":");
+        if (idx === -1)
+            return undefined;
+        return { type: v.slice(0, idx), hash: v.slice(idx + 1) };
+    })
+        .optional(),
+    max_src_file_size: z.coerce.number().int().positive().optional(),
+    max_src_resolution: z.coerce.number().positive().optional(),
+    cache_buster: z.string().optional(),
+});
+const controlOptionsSchema = rawControlOptionsSchema.transform((data) => ({
+    expires: data.expires,
+    hashsum: data.hashsum,
+    maxSrcFileSize: data.max_src_file_size,
+    maxSrcResolution: data.max_src_resolution,
+}));
+/** Zod schema for runtime validation of parsed control options. The `ControlOptions` interface is the authoritative type definition; this schema validates against it at compile time via `satisfies`. */
+export const parsedControlOptionsSchema = z.object({
+    expires: z.number().optional(),
+    hashsum: z.object({ type: z.string(), hash: z.string() }).optional(),
+    maxSrcFileSize: z.number().optional(),
+    maxSrcResolution: z.number().optional(),
+});
+/** Parses an info URL path (after signature has been stripped). Extracts the source URL, info options, and control options (expires, hashsum, source limits). */
+export function parseInfoUrl(path, options) {
+    const withoutPrefix = path.replace(/^\//, "");
+    let optionsPart;
+    let sourceUrl;
+    let encrypted = false;
+    const plainIdx = withoutPrefix.indexOf("plain/");
+    const encIdx = withoutPrefix.indexOf("enc/");
+    if (plainIdx !== -1 && (encIdx === -1 || plainIdx <= encIdx)) {
+        optionsPart = withoutPrefix.slice(0, plainIdx).replace(/\/$/, "");
+        sourceUrl = withoutPrefix.slice(plainIdx + "plain/".length);
+    }
+    else if (encIdx !== -1) {
+        optionsPart = withoutPrefix.slice(0, encIdx).replace(/\/$/, "");
+        sourceUrl = withoutPrefix.slice(encIdx + "enc/".length);
+        encrypted = true;
+    }
+    else {
+        throw new HTTPError("Unsupported URL format: expected /plain/ or /enc/ source URL", { code: "BAD_REQUEST" });
+    }
+    if (!sourceUrl) {
+        throw new HTTPError("Missing source URL", { code: "BAD_REQUEST" });
+    }
+    if (encrypted) {
+        if (!options?.encryptionKey) {
+            throw new HTTPError("Encrypted source URLs are not supported: no encryption key provided", { code: "BAD_REQUEST" });
+        }
+        sourceUrl = decryptSourceUrl(sourceUrl, options.encryptionKey);
+    }
+    const controlCanonicals = new Set(Object.values(CONTROL_SHORTHANDS));
+    const infoRaw = {};
+    const controlRaw = {};
+    for (const seg of optionsPart.split("/").filter(Boolean)) {
+        const colonIdx = seg.indexOf(":");
+        const name = colonIdx === -1 ? seg : seg.slice(0, colonIdx);
+        const value = colonIdx === -1 ? "" : seg.slice(colonIdx + 1);
+        const canonical = ALL_SHORTHANDS[name] ?? name;
+        if (!ALL_OPTION_NAMES.has(name))
+            continue;
+        if (controlCanonicals.has(canonical)) {
+            controlRaw[canonical] = value;
+        }
+        else {
+            infoRaw[canonical] = value;
+        }
+    }
+    const infoOptions = parsedInfoOptionsSchema.parse(infoOptionsSchema.parse(infoRaw));
+    const control = parsedControlOptionsSchema.parse(controlOptionsSchema.parse(controlRaw));
+    return { sourceUrl, infoOptions, ...control };
+}
+//# sourceMappingURL=info-parse.js.map

package/dist/info-parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"info-parse.js","sourceRoot":"","sources":["../src/info-parse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,KAAK,GAAG,CAAC;KACZ,MAAM,EAAE;KACR,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC;AAE5D,MAAM,eAAe,GAA2B;IAC9C,EAAE,EAAE,YAAY;IAChB,CAAC,EAAE,OAAO;IACV,EAAE,EAAE,eAAe;IACnB,EAAE,EAAE,cAAc;IAClB,CAAC,EAAE,OAAO;IACV,CAAC,EAAE,SAAS;IACZ,GAAG,EAAE,SAAS;IACd,EAAE,EAAE,iBAAiB;IACrB,EAAE,EAAE,UAAU;IACd,GAAG,EAAE,eAAe;IACpB,EAAE,EAAE,MAAM;CACX,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEhE,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE;IACtB,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE;IACtB,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE;IACrB,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;IACvB,aAAa,EAAE,KAAK,CAAC,QAAQ,EAAE;IAC/B,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3D,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;QACf,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,OAAO,GACX,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC;QAC9D,MAAM,iBAAiB,GACrB,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC;QAC9D,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,CAAC,CAAC;SACD,QAAQ,EAAE;IACb,eAAe,EAAE,KAAK,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;QACf,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QAC/B,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IAC5C,CAAC,CAAC;SACD,QAAQ,EAAE;IACb,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CACf,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAC7D;SACA,QAAQ,EAAE;IACb,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAClE,IAAI,EAAE,IAAI,CAAC,IAAI;IACf,IAAI,EAAE,IAAI,CAAC,IAAI;IACf,GAAG,EAAE,IAAI,CAAC,GAAG;IACb,UAAU,EAAE,IAAI,CAAC,UAAU;IAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;IACjB,YAAY,EAAE,IAAI,CAAC,aAAa;IAChC,WAAW,EAAE,IAAI,CAAC,YAAY;IAC9B,KAAK,EAAE,IAAI,CAAC,KAAK;IACjB,OAAO,EAAE,IAAI,CAAC,OAAO;IACrB,OAAO,EAAE,IAAI,CAAC,OAAO;IACrB,cAAc,EAAE,IAAI,CAAC,eAAe;IACpC,QAAQ,EAAE,IAAI,CAAC,QAAQ;IACvB,YAAY,EAAE,IAAI,CAAC,aAAa;IAChC,IAAI,EAAE,IAAI,CAAC,IAAI;CAChB,CAAC,CAAC,CAAC;AAkCJ,oMAAoM;AACpM,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3B,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;SAC5D,QAAQ,EAAE;IACb,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAkC,CAAC;AAEpC,MAAM,kBAAkB,GAA2B;IACjD,GAAG,EAAE,SAAS;IACd,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,mBAAmB;IACzB,GAAG,EAAE,oBAAoB;IACzB,EAAE,EAAE,cAAc;CACnB,CAAC;AAEF,MAAM,cAAc,GAA2B;IAC7C,GAAG,eAAe;IAClB,GAAG,kBAAkB;CACtB,CAAC;AAEF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;IAC9B,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;IAChC,MAAM;IACN,MAAM;IACN,KAAK;CACN,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC3C,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;QACf,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;IAC3D,CAAC,CAAC;SACD,QAAQ,EAAE;IACb,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChE,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACxE,OAAO,EAAE,IAAI,CAAC,OAAO;IACrB,OAAO,EAAE,IAAI,CAAC,OAAO;IACrB,cAAc,EAAE,IAAI,CAAC,iBAAiB;IACtC,gBAAgB,EAAE,IAAI,CAAC,kBAAkB;CAC1C,CAAC,CAAC,CAAC;AAcJ,0MAA0M;AAC1M,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAqC,CAAC;AAYvC,iKAAiK;AACjK,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,OAA0B;IAE1B,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE9C,IAAI,WAAmB,CAAC;IACxB,IAAI,SAAiB,CAAC;IACtB,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAE7C,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,QAAQ,IAAI,MAAM,CAAC,EAAE,CAAC;QAC7D,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAClE,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC;SAAM,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACzB,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAChE,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACxD,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,SAAS,CACjB,8DAA8D,EAC9D,EAAE,IAAI,EAAE,aAAa,EAAE,CACxB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CACjB,qEAAqE,EACrE,EAAE,IAAI,EAAE,aAAa,EAAE,CACxB,CAAC;QACJ,CAAC;QACD,SAAS,GAAG,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACrE,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,MAAM,UAAU,GAA2B,EAAE,CAAC;IAE9C,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;QAE/C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAE1C,IAAI,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,UAAU,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,uBAAuB,CAAC,KAAK,CAC/C,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CACjC,CAAC;IACF,MAAM,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAC9C,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CACvC,CAAC;IAEF,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,OAAO,EAAE,CAAC;AAChD,CAAC"}