vpndetection 1.6.0 → 1.8.0

package/dist/client.d.ts

@@ -32,6 +32,13 @@ export interface Options {
     concurrency?: number;
     /** Retry attempts for a transient failure. Default 2. */
     retries?: number;
+    /**
+     * How long one request may take before it is abandoned, in milliseconds.
+     * Default 30000. Applies per attempt, so a retried call may take longer in
+     * total. A dataset transfer is deliberately exempt: it is expected to run
+     * for minutes.
+     */
+    timeoutMs?: number;
     /** Override the HTTP implementation, mostly for tests. */
     fetch?: typeof globalThis.fetch;
 }
@@ -39,6 +46,8 @@ export interface Options {
 export interface LookupOptions {
     /** Retry attempts for a transient failure. */
     retries?: number;
+    /** How long one attempt may take before it is abandoned, in milliseconds. */
+    timeoutMs?: number;
 }
 /** Per-call overrides for one batch. Anything omitted falls back to the client's setting. */
 export interface BatchOptions extends LookupOptions {
@@ -56,6 +65,7 @@ export declare class VPNDetection {
     private readonly cache;
     private readonly limit;
     private readonly retries;
+    private readonly timeoutMs;
     /** The licensed dataset downloads, for keys that carry the `db.download` scope. */
     readonly database: DatabaseApi;
     constructor(options?: Options);
@@ -90,8 +100,9 @@ export declare class VPNDetection {
 export declare class DatabaseApi {
     private readonly client;
     private readonly retries;
+    private readonly timeoutMs;
     private readonly fetchImpl;
-    constructor(client: Client, retries: number, fetchImpl: typeof globalThis.fetch);
+    constructor(client: Client, retries: number, timeoutMs: number, fetchImpl: typeof globalThis.fetch);
     list(): Promise<LicensedDataset[]>;
     metadata(id: string): Promise<DatasetMetadata>;
     /**

package/dist/client.js

@@ -7,6 +7,10 @@ import { bogonResult, isBogon } from './bogon.js';
 import { errorFromResponse, VPNDetectionError } from './errors.js';
 import { toResult } from './types.js';
 export const DEFAULT_BASE_URL = 'https://api.vpndetection.io';
+// Matches the other SDKs, whose HTTP clients default to 30s. Node's global
+// fetch has no whole-request limit of its own, so without this a hung API holds
+// a caller until undici's 300s headers timeout - which is why this exists.
+const DEFAULT_TIMEOUT_MS = 30_000;
 /**
  * A client for the VPNDetection API.
  *
@@ -18,6 +22,7 @@ export class VPNDetection {
     cache;
     limit;
     retries;
+    timeoutMs;
     /** The licensed dataset downloads, for keys that carry the `db.download` scope. */
     database;
     constructor(options = {}) {
@@ -36,7 +41,8 @@ export class VPNDetection {
         });
         this.limit = pLimit(options.concurrency ?? 8);
         this.retries = options.retries ?? 2;
-        this.database = new DatabaseApi(this.client, this.retries, fetchImpl);
+        this.timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        this.database = new DatabaseApi(this.client, this.retries, this.timeoutMs, fetchImpl);
     }
     /**
      * Whether an address is private, loopback, link-local, documentation,
@@ -64,8 +70,11 @@ export class VPNDetection {
         if (hit !== undefined) {
             return hit;
         }
+        const timeoutMs = options.timeoutMs ?? this.timeoutMs;
         const result = await withRetry(options.retries ?? this.retries, async () => {
-            const res = await lookupIp({ client: this.client, path: { ip: ip } });
+            const res = await deadline(timeoutMs, (signal) => lookupIp({
+                client: this.client, path: { ip: ip }, signal: signal,
+            }));
             const body = unwrap(res);
             return toResult(body);
         });
@@ -105,21 +114,27 @@ export class VPNDetection {
 export class DatabaseApi {
     client;
     retries;
+    timeoutMs;
     fetchImpl;
-    constructor(client, retries, fetchImpl) {
+    constructor(client, retries, timeoutMs, fetchImpl) {
         this.client = client;
         this.retries = retries;
+        this.timeoutMs = timeoutMs;
         this.fetchImpl = fetchImpl;
     }
     async list() {
         return withRetry(this.retries, async () => {
-            const res = await listDatabases({ client: this.client });
+            const res = await deadline(this.timeoutMs, (signal) => listDatabases({
+                client: this.client, signal: signal,
+            }));
             return unwrap(res).datasets;
         });
     }
     async metadata(id) {
         return withRetry(this.retries, async () => {
-            const res = await databaseMetadata({ client: this.client, query: { id: id } });
+            const res = await deadline(this.timeoutMs, (signal) => databaseMetadata({
+                client: this.client, query: { id: id }, signal: signal,
+            }));
             return unwrap(res);
         });
     }
@@ -132,15 +147,17 @@ export class DatabaseApi {
      */
     async checksums(id, format) {
         return withRetry(this.retries, async () => {
-            const res = await databaseChecksum({
-                client: this.client, query: { id: id, format: format },
-            });
+            const res = await deadline(this.timeoutMs, (signal) => databaseChecksum({
+                client: this.client, query: { id: id, format: format }, signal: signal,
+            }));
             return unwrap(res).checksums;
         });
     }
     async downloads() {
         return withRetry(this.retries, async () => {
-            const res = await listDownloads({ client: this.client });
+            const res = await deadline(this.timeoutMs, (signal) => listDownloads({
+                client: this.client, signal: signal,
+            }));
             return unwrap(res).downloads;
         });
     }
@@ -154,11 +171,12 @@ export class DatabaseApi {
      */
     async downloadUrl(id, format) {
         return withRetry(this.retries, async () => {
-            const res = await downloadRedirect({
+            const res = await deadline(this.timeoutMs, (signal) => downloadRedirect({
                 client: this.client,
                 query: { id: id, format: format },
                 redirect: 'manual',
-            });
+                signal: signal,
+            }));
             if (res.response === undefined) {
                 throw new VPNDetectionError('network', 'no response from the API');
             }
@@ -267,6 +285,32 @@ function unwrap(res) {
 // server-supplied Retry-After, which p-retry has no way to know about. A 429
 // carrying that header is the only 429 worth retrying, which is why the wait
 // and the retry decision both key off the same field.
+/**
+ * Bound one attempt, and report an expiry as our own error rather than the
+ * runtime's `TimeoutError`, whose message says nothing about which call gave up.
+ *
+ * The signal is built per call, so a retried request gets a fresh budget - the
+ * same per-attempt semantics the Go and Python clients have.
+ */
+async function deadline(timeoutMs, fn) {
+    const controller = new AbortController();
+    let timer;
+    // Raced, not left to the signal alone: aborting releases the socket, but only
+    // a transport that HONORS the signal then settles, and a substituted `fetch`
+    // need not. Clearing the timer stops the losing side rejecting into nothing.
+    const expiry = new Promise((_, reject) => {
+        timer = setTimeout(() => {
+            controller.abort();
+            reject(new VPNDetectionError('network', `request timed out after ${timeoutMs}ms`));
+        }, timeoutMs);
+    });
+    try {
+        return await Promise.race([fn(controller.signal), expiry]);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
 async function withRetry(retries, fn) {
     try {
         return await pRetry(fn, {

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,MAAM,MAAM,SAAS,CAAC;AAC7B,OAAO,MAAM,MAAM,SAAS,CAAC;AAK7B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEzE,OAAO,EACH,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,IAAI,gBAAgB,EACxE,aAAa,EAAE,aAAa,EAAE,QAAQ,GACzC,MAAM,wBAAwB,CAAC;AAMhC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAe,MAAM,YAAY,CAAC;AAcnD,MAAM,CAAC,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AAsC9D;;;;;GAKG;AACH,MAAM,OAAO,YAAY;IACJ,MAAM,CAAS;IACf,KAAK,CAAkC;IACvC,KAAK,CAA4B;IACjC,OAAO,CAAS;IAEjC,mFAAmF;IAC1E,QAAQ,CAAc;IAE/B,YAAY,UAAmB,EAAE;QAC7B,gEAAgE;QAChE,qEAAqE;QACrE,8CAA8C;QAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC;YACpC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,gBAAgB;YAC5C,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACvE,KAAK,EAAE,SAAS;SACnB,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAiB;YACvE,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,IAAI,MAAM;YACjC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAU;QACd,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,UAAyB,EAAE;QAChD,IAAI,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YACd,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACpB,OAAO,GAAG,CAAC;QACf,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YACtE,MAAM,IAAI,GAAG,MAAM,CAAiB,GAAG,CAAC,CAAC;YACzC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,WAAW,CACb,GAAqB,EAAE,UAAwB,EAAE;QAEjD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,oEAAoE;QACpE,sEAAsE;QACtE,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,KAAK,SAAS;YAC3C,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAsC,CAAC;QAC1D,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE;YAClD,IAAI,CAAC;gBACD,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9B,CAAC;QACL,CAAC,CAAC,CAAC,CAAC,CAAC;QACL,sEAAsE;QACtE,iEAAiE;QACjE,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;CACJ;AAED,qFAAqF;AACrF,MAAM,OAAO,WAAW;IAEC;IACA;IACA;IAHrB,YACqB,MAAc,EACd,OAAe,EACf,SAAkC;QAFlC,WAAM,GAAN,MAAM,CAAQ;QACd,YAAO,GAAP,OAAO,CAAQ;QACf,cAAS,GAAT,SAAS,CAAyB;IACpD,CAAC;IAEJ,KAAK,CAAC,IAAI;QACN,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YACtC,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACzD,OAAO,MAAM,CAA8B,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC7D,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU;QACrB,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YACtC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/E,OAAO,MAAM,CAAiC,GAAG,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CAAC,EAAU,EAAE,MAAqB;QAC7C,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YACtC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC;gBAC/B,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;aACzD,CAAC,CAAC;YACH,OAAO,MAAM,CAAiC,GAAG,CAAC,CAAC,SAAS,CAAC;QACjE,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,SAAS;QACX,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YACtC,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACzD,OAAO,MAAM,CAA8B,GAAG,CAAC,CAAC,SAAS,CAAC;QAC9D,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,WAAW,CAAC,EAAU,EAAE,MAAqB;QAC/C,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YACtC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC;gBAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;gBACjC,QAAQ,EAAE,QAAQ;aACZ,CAAC,CAAC;YACZ,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,IAAI,iBAAiB,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACtD,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACnD,OAAO,QAAQ,CAAC;YACpB,CAAC;YACD,MAAM,CAAU,GAAG,CAAC,CAAC;YACrB,MAAM,IAAI,iBAAiB,CACvB,cAAc,EAAE,uCAAuC,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAC/E,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,QAAQ,CACV,EAAU,EAAE,MAAqB,EAAE,WAAgC;QAEnE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,iBAAiB,CACvB,cAAc,EAAE,sCAAsC,EAAE,GAAG,CAAC,MAAM,CACrE,CAAC;QACN,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QACjD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAC1D,uEAAuE;QACvE,uDAAuD;QACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAgD,CAAC,CAAC;QAEtF,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,SAAS,CAAC,CAAC,OAAO;YACnB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC/B,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;gBACtB,MAAM,KAAK,CAAC;YAChB,CAAC;QACL,CAAC;QAED,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,QAAQ,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;YACvC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,GAAG,WAAW,OAAO,CAAC;QACtC,IAAI,CAAC;YACD,MAAM,QAAQ,CAAC,OAAO,EAAE,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACtC,MAAM,GAAG,CAAC;QACd,CAAC;QACD,MAAM,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACnC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,aAAa,CAAC,EAAU,EAAE,MAAqB;QACjD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,wDAAwD;IAChD,KAAK,CAAC,gBAAgB,CAAC,EAAU,EAAE,MAAqB;QAC5D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YACtC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACV,+DAA+D;gBAC/D,0DAA0D;gBAC1D,KAAK,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBACxB,MAAM,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE;oBAC7C,KAAK,EAAE,wDAAwD,GAAG,CAAC,MAAM,EAAE;iBAC9E,CAAC,CAAC;YACP,CAAC;YACD,OAAO,GAAG,CAAC;QACf,CAAC,CAAC,CAAC;IACP,CAAC;CACJ;AAMD,SAAS,MAAM,CAAI,GAAQ;IACvB,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,iBAAiB,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACnB,MAAM,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,GAAG,CAAC,IAAS,CAAC;AACzB,CAAC;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,sDAAsD;AACtD,KAAK,UAAU,SAAS,CAAI,OAAe,EAAE,EAAoB;IAC7D,IAAI,CAAC;QACD,OAAO,MAAM,MAAM,CAAC,EAAE,EAAE;YACpB,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,YAAY,iBAAiB,CAAC,IAAI,KAAK,CAAC,SAAS;YACpF,eAAe,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACjC,MAAM,OAAO,GAAG,KAAK,YAAY,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;gBACzF,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;oBACvC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;gBAC5D,CAAC;YACL,CAAC;SACJ,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,GAAY;IACzB,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;QACnC,OAAO,GAAG,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAI,GAA2B,EAAE,KAAK,CAAC;IAClD,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,iBAAiB,CAAC,SAAS,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9F,CAAC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,MAAM,MAAM,SAAS,CAAC;AAC7B,OAAO,MAAM,MAAM,SAAS,CAAC;AAK7B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEzE,OAAO,EACH,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,IAAI,gBAAgB,EACxE,aAAa,EAAE,aAAa,EAAE,QAAQ,GACzC,MAAM,wBAAwB,CAAC;AAMhC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAe,MAAM,YAAY,CAAC;AAcnD,MAAM,CAAC,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AAE9D,2EAA2E;AAC3E,gFAAgF;AAChF,2EAA2E;AAC3E,MAAM,kBAAkB,GAAG,MAAM,CAAC;AA+ClC;;;;;GAKG;AACH,MAAM,OAAO,YAAY;IACJ,MAAM,CAAS;IACf,KAAK,CAAkC;IACvC,KAAK,CAA4B;IACjC,OAAO,CAAS;IAChB,SAAS,CAAS;IAEnC,mFAAmF;IAC1E,QAAQ,CAAc;IAE/B,YAAY,UAAmB,EAAE;QAC7B,gEAAgE;QAChE,qEAAqE;QACrE,8CAA8C;QAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC;YACpC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,gBAAgB;YAC5C,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACvE,KAAK,EAAE,SAAS;SACnB,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAiB;YACvE,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,IAAI,MAAM;YACjC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACzD,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC1F,CAAC;IAED;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAU;QACd,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,UAAyB,EAAE;QAChD,IAAI,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YACd,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACpB,OAAO,GAAG,CAAC;QACf,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC;gBACvD,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM;aACxD,CAAC,CAAC,CAAC;YACJ,MAAM,IAAI,GAAG,MAAM,CAAiB,GAAG,CAAC,CAAC;YACzC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,WAAW,CACb,GAAqB,EAAE,UAAwB,EAAE;QAEjD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,oEAAoE;QACpE,sEAAsE;QACtE,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,KAAK,SAAS;YAC3C,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAsC,CAAC;QAC1D,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE;YAClD,IAAI,CAAC;gBACD,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9B,CAAC;QACL,CAAC,CAAC,CAAC,CAAC,CAAC;QACL,sEAAsE;QACtE,iEAAiE;QACjE,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;CACJ;AAED,qFAAqF;AACrF,MAAM,OAAO,WAAW;IAEC;IACA;IACA;IACA;IAJrB,YACqB,MAAc,EACd,OAAe,EACf,SAAiB,EACjB,SAAkC;QAHlC,WAAM,GAAN,MAAM,CAAQ;QACd,YAAO,GAAP,OAAO,CAAQ;QACf,cAAS,GAAT,SAAS,CAAQ;QACjB,cAAS,GAAT,SAAS,CAAyB;IACpD,CAAC;IAEJ,KAAK,CAAC,IAAI;QACN,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YACtC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC;gBACjE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM;aACtC,CAAC,CAAC,CAAC;YACJ,OAAO,MAAM,CAA8B,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC7D,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU;QACrB,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YACtC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC;gBACpE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM;aACzD,CAAC,CAAC,CAAC;YACJ,OAAO,MAAM,CAAiC,GAAG,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CAAC,EAAU,EAAE,MAAqB;QAC7C,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YACtC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC;gBACpE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM;aACzE,CAAC,CAAC,CAAC;YACJ,OAAO,MAAM,CAAiC,GAAG,CAAC,CAAC,SAAS,CAAC;QACjE,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,SAAS;QACX,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YACtC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC;gBACjE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM;aACtC,CAAC,CAAC,CAAC;YACJ,OAAO,MAAM,CAA8B,GAAG,CAAC,CAAC,SAAS,CAAC;QAC9D,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,WAAW,CAAC,EAAU,EAAE,MAAqB;QAC/C,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YACtC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC;gBACpE,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;gBACjC,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,MAAM;aACR,CAAC,CAAC,CAAC;YACb,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,IAAI,iBAAiB,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACtD,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACnD,OAAO,QAAQ,CAAC;YACpB,CAAC;YACD,MAAM,CAAU,GAAG,CAAC,CAAC;YACrB,MAAM,IAAI,iBAAiB,CACvB,cAAc,EAAE,uCAAuC,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAC/E,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,QAAQ,CACV,EAAU,EAAE,MAAqB,EAAE,WAAgC;QAEnE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,iBAAiB,CACvB,cAAc,EAAE,sCAAsC,EAAE,GAAG,CAAC,MAAM,CACrE,CAAC;QACN,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QACjD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAC1D,uEAAuE;QACvE,uDAAuD;QACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAgD,CAAC,CAAC;QAEtF,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,SAAS,CAAC,CAAC,OAAO;YACnB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC/B,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;gBACtB,MAAM,KAAK,CAAC;YAChB,CAAC;QACL,CAAC;QAED,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,QAAQ,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;YACvC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,GAAG,WAAW,OAAO,CAAC;QACtC,IAAI,CAAC;YACD,MAAM,QAAQ,CAAC,OAAO,EAAE,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACtC,MAAM,GAAG,CAAC;QACd,CAAC;QACD,MAAM,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACnC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,aAAa,CAAC,EAAU,EAAE,MAAqB;QACjD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,wDAAwD;IAChD,KAAK,CAAC,gBAAgB,CAAC,EAAU,EAAE,MAAqB;QAC5D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YACtC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACV,+DAA+D;gBAC/D,0DAA0D;gBAC1D,KAAK,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBACxB,MAAM,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE;oBAC7C,KAAK,EAAE,wDAAwD,GAAG,CAAC,MAAM,EAAE;iBAC9E,CAAC,CAAC;YACP,CAAC;YACD,OAAO,GAAG,CAAC;QACf,CAAC,CAAC,CAAC;IACP,CAAC;CACJ;AAMD,SAAS,MAAM,CAAI,GAAQ;IACvB,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,iBAAiB,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACnB,MAAM,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,GAAG,CAAC,IAAS,CAAC;AACzB,CAAC;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,sDAAsD;AACtD;;;;;;GAMG;AACH,KAAK,UAAU,QAAQ,CAAI,SAAiB,EAAE,EAAuC;IACjF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,KAAoC,CAAC;IACzC,8EAA8E;IAC9E,6EAA6E;IAC7E,6EAA6E;IAC7E,MAAM,MAAM,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAC5C,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACpB,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,iBAAiB,CAAC,SAAS,EAAE,2BAA2B,SAAS,IAAI,CAAC,CAAC,CAAC;QACvF,CAAC,EAAE,SAAS,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACD,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/D,CAAC;YAAS,CAAC;QACP,YAAY,CAAC,KAAM,CAAC,CAAC;IACzB,CAAC;AACL,CAAC;AAED,KAAK,UAAU,SAAS,CAAI,OAAe,EAAE,EAAoB;IAC7D,IAAI,CAAC;QACD,OAAO,MAAM,MAAM,CAAC,EAAE,EAAE;YACpB,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,YAAY,iBAAiB,CAAC,IAAI,KAAK,CAAC,SAAS;YACpF,eAAe,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACjC,MAAM,OAAO,GAAG,KAAK,YAAY,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;gBACzF,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;oBACvC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;gBAC5D,CAAC;YACL,CAAC;SACJ,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,GAAY;IACzB,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;QACnC,OAAO,GAAG,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAI,GAA2B,EAAE,KAAK,CAAC;IAClD,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,iBAAiB,CAAC,SAAS,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9F,CAAC"}

package/dist/generated/types.gen.d.ts

@@ -37,15 +37,15 @@ export type LookupResponse = {
      */
     is_cdn?: boolean;
     /**
-     * Whether the address was seen in a residential proxy pool. Max only.
+     * Whether the address was seen in a residential proxy pool. Scale and above.
      */
     is_resproxy?: boolean;
     /**
-     * Whether the address was seen in a datacenter proxy pool. Max only.
+     * Whether the address was seen in a datacenter proxy pool. Scale and above.
      */
     is_dcproxy?: boolean;
     /**
-     * Whether the address was seen in a mobile proxy pool. Max only.
+     * Whether the address was seen in a mobile proxy pool. Scale and above.
      */
     is_mobproxy?: boolean;
     /**
@@ -105,7 +105,16 @@ export type VpnDetail = {
      */
     confidence?: string;
     /**
-     * How the address was attributed to the provider. Max only.
+     * The class of evidence the attribution rests on, one of four values.
+     * Max only.
+     *
+     * `scan` - we spoke the VPN protocol to the address ourselves and got a
+     * valid server response. `scrape` - the operator published the address
+     * through its own API, client or configuration. `registry` - public
+     * registration or naming records attribute it to the operator.
+     * `infer` - the address was extrapolated from confirmed neighbours in
+     * the same block.
+     *
      */
     method?: string;
 };

package/dist/middleware/condition.d.ts

@@ -0,0 +1,59 @@
+import type { Result } from '../types.js';
+/**
+ * A bound on a numeric member. Every key present must hold, so
+ * `{ gte: 5, lt: 100 }` is a range.
+ */
+export interface NumericBound {
+    gte?: number;
+    gt?: number;
+    lte?: number;
+    lt?: number;
+}
+type LeafCondition<T> = T extends number ? number | number[] | NumericBound : T extends string ? string | string[] : T extends boolean ? boolean : never;
+type ConditionOn<T> = {
+    [K in keyof T]?: NonNullable<T[K]> extends object ? ConditionOn<NonNullable<T[K]>> : LeafCondition<NonNullable<T[K]>> | false | null;
+};
+/**
+ * What makes a request worth blocking, written in the shape of a `Result`.
+ *
+ * Only the members you name are considered, and they must all hold. A member
+ * set to `false` or `null` is ignored entirely - a condition states the
+ * positive signals you act on, so there is no way to write "block when this is
+ * false", which would otherwise read as blocking everybody.
+ *
+ * ```ts
+ * { isVpn: true, vpn: { provider: 'nordvpn' } }
+ * { isResproxy: true, resproxy: { hits: { gte: 5 } } }
+ * { isTor: true, vpn: { confidence: ['high', 'medium'] } }
+ * ```
+ *
+ * A list means OR, so any one of its entries blocking is enough.
+ */
+export type BlockCondition = ConditionOn<Omit<Result, 'raw'>>;
+/** Whether an answer satisfies the condition, and should therefore be blocked. */
+export declare function matchesCondition(condition: BlockCondition | BlockCondition[], result: Result): boolean;
+/**
+ * The top-level members a condition names that this answer did not carry.
+ *
+ * A field your plan does not include is absent rather than false, so a
+ * condition naming one can never match and the block would silently never
+ * fire. Gating is per top-level member, which is why only the first segment of
+ * each path is checked: `vpn` present but empty is a real answer meaning the
+ * flag is false, not a plan gap.
+ *
+ * A locally answered bogon needs no special case: it is synthesized in the
+ * widest shape, so every member is present and nothing reads as missing. The
+ * corpus pins that, because narrowing the synthesized shape would start
+ * reporting a plan gap on every private address.
+ */
+export declare function missingMembers(condition: BlockCondition | BlockCondition[], result: Result): string[];
+/**
+ * How many leaf constraints a condition actually carries.
+ *
+ * Callers use this to reject a condition that constrains nothing: with every
+ * entry ignored there is nothing left to satisfy, so it would match every
+ * answer and block all traffic. Nobody writes that on purpose, and failing at
+ * construction beats discovering it in production.
+ */
+export declare function constraintCount(condition: unknown): number;
+export {};

package/dist/middleware/condition.js

@@ -0,0 +1,112 @@
+/** Whether an answer satisfies the condition, and should therefore be blocked. */
+export function matchesCondition(condition, result) {
+    const any = Array.isArray(condition) ? condition : [condition];
+    return any.some((one) => matchesObject(one, result));
+}
+/**
+ * The top-level members a condition names that this answer did not carry.
+ *
+ * A field your plan does not include is absent rather than false, so a
+ * condition naming one can never match and the block would silently never
+ * fire. Gating is per top-level member, which is why only the first segment of
+ * each path is checked: `vpn` present but empty is a real answer meaning the
+ * flag is false, not a plan gap.
+ *
+ * A locally answered bogon needs no special case: it is synthesized in the
+ * widest shape, so every member is present and nothing reads as missing. The
+ * corpus pins that, because narrowing the synthesized shape would start
+ * reporting a plan gap on every private address.
+ */
+export function missingMembers(condition, result) {
+    const any = Array.isArray(condition) ? condition : [condition];
+    const missing = new Set();
+    for (const one of any) {
+        for (const [member, want] of Object.entries(one)) {
+            if (constraintCount(want) > 0 && !(member in result)) {
+                missing.add(member);
+            }
+        }
+    }
+    return [...missing];
+}
+/**
+ * How many leaf constraints a condition actually carries.
+ *
+ * Callers use this to reject a condition that constrains nothing: with every
+ * entry ignored there is nothing left to satisfy, so it would match every
+ * answer and block all traffic. Nobody writes that on purpose, and failing at
+ * construction beats discovering it in production.
+ */
+export function constraintCount(condition) {
+    if (condition === false || condition === null || condition === undefined) {
+        return 0;
+    }
+    if (Array.isArray(condition)) {
+        return condition.reduce((n, entry) => n + constraintCount(entry), 0);
+    }
+    if (isNumericBound(condition)) {
+        return 1;
+    }
+    if (typeof condition === 'object') {
+        return Object.values(condition).reduce((n, v) => n + constraintCount(v), 0);
+    }
+    return 1;
+}
+function matchesObject(condition, value) {
+    for (const [key, want] of Object.entries(condition)) {
+        if (constraintCount(want) === 0) {
+            continue;
+        }
+        if (!(key in value) || !matchesValue(want, value[key])) {
+            return false;
+        }
+    }
+    return true;
+}
+function matchesValue(want, got) {
+    if (Array.isArray(want)) {
+        return want.some((entry) => matchesValue(entry, got));
+    }
+    if (isNumericBound(want)) {
+        return matchesBound(want, got);
+    }
+    if (typeof want === 'object' && want !== null) {
+        return isRecord(got) && matchesObject(want, got);
+    }
+    // Providers are lowercase slugs on the wire and a caller should not have to
+    // know that, so a string compares without case.
+    if (typeof want === 'string' && typeof got === 'string') {
+        return want.toLowerCase() === got.toLowerCase();
+    }
+    return want === got;
+}
+function matchesBound(bound, got) {
+    if (typeof got !== 'number') {
+        return false;
+    }
+    if (bound.gte !== undefined && got < bound.gte) {
+        return false;
+    }
+    if (bound.gt !== undefined && got <= bound.gt) {
+        return false;
+    }
+    if (bound.lte !== undefined && got > bound.lte) {
+        return false;
+    }
+    if (bound.lt !== undefined && got >= bound.lt) {
+        return false;
+    }
+    return true;
+}
+const BOUND_KEYS = ['gte', 'gt', 'lte', 'lt'];
+function isNumericBound(value) {
+    if (!isRecord(value)) {
+        return false;
+    }
+    const keys = Object.keys(value);
+    return keys.length > 0 && keys.every((k) => BOUND_KEYS.includes(k));
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=condition.js.map

package/dist/middleware/condition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"condition.js","sourceRoot":"","sources":["../../src/middleware/condition.ts"],"names":[],"mappings":"AA2CA,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAC5B,SAA4C,EAAE,MAAc;IAE5D,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC/D,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAClC,GAA8B,EAAE,MAA4C,CAC/E,CAAC,CAAC;AACP,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAC1B,SAA4C,EAAE,MAAc;IAE5D,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;YAC1E,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC;gBACnD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxB,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,SAAkB;IAC9C,IAAI,SAAS,KAAK,KAAK,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACvE,OAAO,CAAC,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC,MAAM,CAAS,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,CAAC;IACb,CAAC;IACD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAS,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,CAAC,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAClB,SAAkC,EAAE,KAA8B;IAElE,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAClD,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,SAAS;QACb,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,IAAa,EAAE,GAAY;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,OAAO,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,IAA+B,EAAE,GAAG,CAAC,CAAC;IAChF,CAAC;IACD,4EAA4E;IAC5E,gDAAgD;IAChD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,IAAI,KAAK,GAAG,CAAC;AACxB,CAAC;AAED,SAAS,YAAY,CAAC,KAAmB,EAAE,GAAY;IACnD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS,IAAI,GAAG,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS,IAAI,GAAG,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAE9C,SAAS,cAAc,CAAC,KAAc;IAClC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAChF,CAAC"}

package/dist/middleware/core.d.ts

@@ -0,0 +1,128 @@
+import { VPNDetection, type CacheOptions } from '../client.js';
+import { VPNDetectionError } from '../errors.js';
+import type { Result } from '../types.js';
+import { type BlockCondition } from './condition.js';
+/**
+ * Enough of an incoming request for a selector to work with, whatever
+ * framework it came from. An adapter supplies one of these per request.
+ */
+export interface RequestView {
+    /** A request header by name, case-insensitively. */
+    header(name: string): string | undefined;
+    /** The framework's own client-address accessor, whatever that resolves to here. */
+    frameworkIp(): string | undefined;
+}
+/**
+ * How the client address is decided.
+ *
+ * There is no portable answer: a framework's own accessor may return the
+ * socket peer, or may already have walked a proxy chain, depending on the
+ * framework and on how the application configured it. You know your framework
+ * and your edge, so this is yours to choose.
+ */
+export type IpSelector<Req> = (request: Req) => string | undefined;
+/** What a lookup attached to the request, whether or not it succeeded. */
+export interface Lookup {
+    /** The address that was classified, as the selector resolved it. */
+    ip?: string;
+    /** The answer. Absent when the lookup failed. */
+    result?: Result;
+    /** Why the lookup failed. Absent when it succeeded. */
+    error?: VPNDetectionError;
+    /** Whether the condition matched. Always false when no condition was configured. */
+    blocked: boolean;
+}
+/** What to do when a condition names a member the plan does not serve. */
+export type MissingFieldAction = 'warn' | 'throw' | 'ignore';
+export interface MiddlewareOptions<Req> {
+    /**
+     * An existing client to use. Prefer this if you already hold one: two
+     * clients mean two caches, and a cache is per instance because two keys can
+     * be on different plans and entitled to different fields.
+     */
+    client?: VPNDetection;
+    /** Your API key. Ignored when `client` is given. */
+    apiKey?: string;
+    /** Ignored when `client` is given. */
+    baseUrl?: string;
+    /** Ignored when `client` is given. Pass `false` to disable caching. */
+    cache?: CacheOptions | false;
+    /**
+     * How long a lookup may hold the request, in milliseconds. Default 2500.
+     *
+     * This sits on the request path, so it is a much tighter bound than the
+     * client's own 30s default.
+     */
+    timeoutMs?: number;
+    /**
+     * Retry attempts for a transient failure. Default 0, unlike the client's 2:
+     * on a request path, failing open quickly beats holding a visitor while we
+     * try again.
+     */
+    retries?: number;
+    /** How the client address is decided. Defaults to the framework's own accessor. */
+    ipSelector?: IpSelector<Req>;
+    /**
+     * What to block on. Omit it to only enrich the request and leave the
+     * decision to your own code.
+     */
+    blockCondition?: BlockCondition | BlockCondition[];
+    /**
+     * Block when the lookup itself fails. Default false, so our outage does not
+     * become yours.
+     */
+    failClosed?: boolean;
+    /** What to do when the condition names a member your plan does not serve. Default `warn`. */
+    onMissingField?: MissingFieldAction;
+    /** Skip classification for this request entirely. */
+    skip?: (request: Req) => boolean;
+    /** Where warnings go. Defaults to `console.warn`. */
+    onWarn?: (message: string) => void;
+}
+export interface Core<Req> {
+    /** Classify one request. Answers `undefined` when `skip` claimed it. */
+    evaluate(request: Req): Promise<Lookup | undefined>;
+}
+/**
+ * The framework-agnostic half of a middleware: resolve an address, classify it,
+ * and decide whether the condition matched.
+ *
+ * Adapters own the framework-shaped parts - reading a request, attaching the
+ * answer, and refusing a request - and share everything here.
+ */
+export declare function createCore<Req>(options: MiddlewareOptions<Req>, defaultIpSelector: IpSelector<Req>): Core<Req>;
+/**
+ * Selectors bound to one framework's request type.
+ *
+ * An adapter calls this once with a function that exposes its own request, and
+ * gets the shared implementations back under its own signature - so a caller
+ * writing a custom selector still works with the request object they know.
+ */
+export declare function bindSelectors<Req>(view: (request: Req) => RequestView): {
+    /**
+     * The framework's own client-address accessor. What that resolves to
+     * depends on the framework and on how you configured it.
+     */
+    defaultIpSelector: (request: Req) => string | undefined;
+    /**
+     * An address from `X-Forwarded-For`.
+     *
+     * **The left-most entry is whatever the caller sent.** Proxies append,
+     * so a visitor who sets the header themselves appears first in the list
+     * and this returns their forgery. It is only trustworthy when an edge
+     * you control overwrites the header rather than appending to it. When
+     * you know how many proxies sit in front, count from the right with
+     * `depth` instead: `depth: 1` is the address your nearest proxy saw.
+     */
+    xffIpSelector: (options?: {
+        depth?: number;
+    }) => (request: Req) => string | undefined;
+    /**
+     * An address from a single-value header, by name - for an edge that
+     * writes one. `headerIpSelector('CF-Connecting-IP')` behind Cloudflare,
+     * `headerIpSelector('True-Client-IP')` behind Akamai, and so on.
+     *
+     * Falls back to the framework's accessor when the header is absent.
+     */
+    headerIpSelector: (name: string) => (request: Req) => string | undefined;
+};

package/dist/middleware/core.js

@@ -0,0 +1,149 @@
+import { isBogon } from '../bogon.js';
+import { VPNDetection } from '../client.js';
+import { VPNDetectionError } from '../errors.js';
+import { constraintCount, matchesCondition, missingMembers } from './condition.js';
+/**
+ * The framework-agnostic half of a middleware: resolve an address, classify it,
+ * and decide whether the condition matched.
+ *
+ * Adapters own the framework-shaped parts - reading a request, attaching the
+ * answer, and refusing a request - and share everything here.
+ */
+export function createCore(options, defaultIpSelector) {
+    const condition = options.blockCondition;
+    if (condition !== undefined && constraintCount(condition) === 0) {
+        throw new Error('vpndetection: blockCondition constrains nothing, which would block every request. '
+            + 'A member set to false or null is ignored; state the positive signals you act on.');
+    }
+    const client = options.client ?? new VPNDetection({
+        apiKey: options.apiKey,
+        baseUrl: options.baseUrl,
+        cache: options.cache,
+    });
+    const selector = options.ipSelector ?? defaultIpSelector;
+    const lookupOptions = {
+        timeoutMs: options.timeoutMs ?? 2500,
+        retries: options.retries ?? 0,
+    };
+    const warn = onceEach(options.onWarn ?? ((message) => console.warn(message)));
+    return {
+        evaluate: async (request) => {
+            if (options.skip?.(request) === true) {
+                return undefined;
+            }
+            const ip = selector(request)?.trim();
+            if (ip === undefined || ip === '') {
+                warn('could not resolve a client address from this request; '
+                    + 'pass an ipSelector that knows where yours comes from');
+                return {
+                    error: new VPNDetectionError('bad_request', 'no client address on the request'),
+                    blocked: options.failClosed === true,
+                };
+            }
+            if (isBogon(ip)) {
+                // Expected in local development. Anywhere else it means a proxy
+                // sits in front and its own address is what reached us.
+                warn(`resolved the client address as ${ip}, which is not a public address. `
+                    + 'If this application runs behind a proxy or load balancer, configure its '
+                    + 'trusted-proxy setting or pass an ipSelector that reads your edge\'s header.');
+            }
+            let result;
+            try {
+                result = await client.lookup(ip, lookupOptions);
+            }
+            catch (err) {
+                return {
+                    ip: ip,
+                    error: err instanceof VPNDetectionError
+                        ? err
+                        : new VPNDetectionError('network', String(err)),
+                    blocked: options.failClosed === true,
+                };
+            }
+            if (condition !== undefined) {
+                reportMissing(condition, result, options.onMissingField ?? 'warn', warn);
+            }
+            return {
+                ip: ip,
+                result: result,
+                blocked: condition !== undefined && matchesCondition(condition, result),
+            };
+        },
+    };
+}
+/**
+ * Selectors bound to one framework's request type.
+ *
+ * An adapter calls this once with a function that exposes its own request, and
+ * gets the shared implementations back under its own signature - so a caller
+ * writing a custom selector still works with the request object they know.
+ */
+export function bindSelectors(view) {
+    return {
+        /**
+         * The framework's own client-address accessor. What that resolves to
+         * depends on the framework and on how you configured it.
+         */
+        defaultIpSelector: (request) => view(request).frameworkIp(),
+        /**
+         * An address from `X-Forwarded-For`.
+         *
+         * **The left-most entry is whatever the caller sent.** Proxies append,
+         * so a visitor who sets the header themselves appears first in the list
+         * and this returns their forgery. It is only trustworthy when an edge
+         * you control overwrites the header rather than appending to it. When
+         * you know how many proxies sit in front, count from the right with
+         * `depth` instead: `depth: 1` is the address your nearest proxy saw.
+         */
+        xffIpSelector: (options = {}) => (request) => {
+            const v = view(request);
+            const chain = (v.header('x-forwarded-for') ?? '')
+                .split(',').map((e) => e.trim()).filter((e) => e !== '');
+            if (chain.length === 0) {
+                return v.frameworkIp();
+            }
+            const depth = options.depth ?? 0;
+            return depth <= 0 ? chain[0] : chain[chain.length - depth];
+        },
+        /**
+         * An address from a single-value header, by name - for an edge that
+         * writes one. `headerIpSelector('CF-Connecting-IP')` behind Cloudflare,
+         * `headerIpSelector('True-Client-IP')` behind Akamai, and so on.
+         *
+         * Falls back to the framework's accessor when the header is absent.
+         */
+        headerIpSelector: (name) => (request) => {
+            const v = view(request);
+            return v.header(name)?.trim() || v.frameworkIp();
+        },
+    };
+}
+function reportMissing(condition, result, action, warn) {
+    if (action === 'ignore') {
+        return;
+    }
+    const missing = missingMembers(condition, result);
+    if (missing.length === 0) {
+        return;
+    }
+    const message = `blockCondition names ${missing.join(', ')}, which your plan does not `
+        + 'include, so those terms can never match. An absent member means "not in your plan", '
+        + 'not "checked, and no".';
+    if (action === 'throw') {
+        throw new Error(`vpndetection: ${message}`);
+    }
+    warn(message);
+}
+// A misconfiguration is the same on every request, so saying so once is a
+// warning and saying so a million times is an outage of its own.
+function onceEach(sink) {
+    const seen = new Set();
+    return (message) => {
+        if (seen.has(message)) {
+            return;
+        }
+        seen.add(message);
+        sink(`[vpndetection] ${message}`);
+    };
+}
+//# sourceMappingURL=core.js.map

package/dist/middleware/core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../../src/middleware/core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,YAAY,EAAqB,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGjD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAuB,MAAM,gBAAgB,CAAC;AAyFxG;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CACtB,OAA+B,EAC/B,iBAAkC;IAElC,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC;IACzC,IAAI,SAAS,KAAK,SAAS,IAAI,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CACX,oFAAoF;cAClF,kFAAkF,CACvF,CAAC;IACN,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,YAAY,CAAC;QAC9C,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;KACvB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC;IACzD,MAAM,aAAa,GAAG;QAClB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;QACpC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,CAAC;KAChC,CAAC;IACF,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAE9E,OAAO;QACH,QAAQ,EAAE,KAAK,EAAE,OAAY,EAA+B,EAAE;YAC1D,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;gBACnC,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;YACrC,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBAChC,IAAI,CAAC,wDAAwD;sBACvD,sDAAsD,CAAC,CAAC;gBAC9D,OAAO;oBACH,KAAK,EAAE,IAAI,iBAAiB,CAAC,aAAa,EAAE,kCAAkC,CAAC;oBAC/E,OAAO,EAAE,OAAO,CAAC,UAAU,KAAK,IAAI;iBACvC,CAAC;YACN,CAAC;YACD,IAAI,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBACd,gEAAgE;gBAChE,wDAAwD;gBACxD,IAAI,CAAC,kCAAkC,EAAE,mCAAmC;sBACtE,0EAA0E;sBAC1E,6EAA6E,CAAC,CAAC;YACzF,CAAC;YAED,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACD,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,OAAO;oBACH,EAAE,EAAE,EAAE;oBACN,KAAK,EAAE,GAAG,YAAY,iBAAiB;wBACnC,CAAC,CAAC,GAAG;wBACL,CAAC,CAAC,IAAI,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;oBACnD,OAAO,EAAE,OAAO,CAAC,UAAU,KAAK,IAAI;iBACvC,CAAC;YACN,CAAC;YACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC1B,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,cAAc,IAAI,MAAM,EAAE,IAAI,CAAC,CAAC;YAC7E,CAAC;YACD,OAAO;gBACH,EAAE,EAAE,EAAE;gBACN,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,SAAS,KAAK,SAAS,IAAI,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC;aAC1E,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAM,IAAmC;IAClE,OAAO;QACH;;;WAGG;QACH,iBAAiB,EAAE,CAAC,OAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE;QAEhE;;;;;;;;;WASG;QACH,aAAa,EAAE,CAAC,UAA8B,EAAE,EAAE,EAAE,CAAC,CAAC,OAAY,EAAE,EAAE;YAClE,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;iBAC5C,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC7D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YAC3B,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;YACjC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;QAC/D,CAAC;QAED;;;;;;WAMG;QACH,gBAAgB,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,OAAY,EAAE,EAAE;YACjD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACrD,CAAC;KACJ,CAAC;AACN,CAAC;AAED,SAAS,aAAa,CAClB,SAA4C,EAAE,MAAc,EAC5D,MAA0B,EAAE,IAA+B;IAE3D,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO;IACX,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;IACX,CAAC;IACD,MAAM,OAAO,GAAG,wBAAwB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B;UACjF,sFAAsF;UACtF,wBAAwB,CAAC;IAC/B,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,CAAC;AAClB,CAAC;AAED,0EAA0E;AAC1E,iEAAiE;AACjE,SAAS,QAAQ,CAAC,IAA+B;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,CAAC,OAAO,EAAE,EAAE;QACf,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACpB,OAAO;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC;AACN,CAAC"}

package/dist/middleware/index.d.ts

@@ -0,0 +1,4 @@
+export { bindSelectors, createCore } from './core.js';
+export type { Core, IpSelector, Lookup, MiddlewareOptions, MissingFieldAction, RequestView, } from './core.js';
+export { constraintCount, matchesCondition, missingMembers } from './condition.js';
+export type { BlockCondition, NumericBound } from './condition.js';

package/dist/middleware/index.js

@@ -0,0 +1,3 @@
+export { bindSelectors, createCore } from './core.js';
+export { constraintCount, matchesCondition, missingMembers } from './condition.js';
+//# sourceMappingURL=index.js.map

package/dist/middleware/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAItD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vpndetection",
-  "version": "1.6.0",
+  "version": "1.8.0",
   "description": "Official Node.js client library for the VPNDetection API. Detect VPNs, proxies, Tor, hosting and CDN IPs.",
   "type": "module",
   "license": "MIT",
@@ -34,6 +34,10 @@
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
+    "./middleware": {
+      "types": "./dist/middleware/index.d.ts",
+      "default": "./dist/middleware/index.js"
+    },
     "./package.json": "./package.json"
   },
   "files": [