@appwarden/middleware 3.13.4 → 3.14.1

package/README.md

@@ -4,7 +4,7 @@
 [![GitHub](https://img.shields.io/badge/GitHub-appwarden%2Fmiddleware-181717?logo=github&logoColor=white)](https://github.com/appwarden/middleware)
 [![npm version](https://img.shields.io/npm/v/@appwarden/middleware.svg)](https://www.npmjs.com/package/@appwarden/middleware)
 [![npm provenance](https://img.shields.io/badge/npm-provenance-green)](https://docs.npmjs.com/generating-provenance-statements)
-![Test Coverage](https://img.shields.io/badge/coverage-93.24%25-brightgreen)
+![Test Coverage](https://img.shields.io/badge/coverage-93.34%25-brightgreen)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
 
 ## Core Features

package/{chunk-PSOS33UD.js → chunk-2FSRHIPY.js}

@@ -9,8 +9,9 @@ import {
   HEARTBEAT_CONTRACT_VERSION,
   HEARTBEAT_RESPONSE_BODY_MAX_SERIALIZED_BYTES,
   LOCKDOWN_TEST_EXPIRY_MS,
+  MIDDLEWARE_VERSION,
   validateHeartbeatResponseBody
-} from "./chunk-OIEAURS7.js";
+} from "./chunk-LDKC5DRW.js";
 
 // src/utils/build-lock-page-url.ts
 function normalizeLockPageSlug(lockPageSlug) {
@@ -121,9 +122,6 @@ var MemoryCache = class {
   };
 };
 
-// src/version.ts
-var MIDDLEWARE_VERSION = "3.13.2";
-
 // src/utils/heartbeat.ts
 var DEFAULT_HEARTBEAT_CONFIG_ERROR_CODE = "custom";
 var DEFAULT_HEARTBEAT_CONFIG_ERROR_MESSAGE = "Appwarden configuration validation failed";

package/{chunk-2ZF7A6Z3.js → chunk-7BZFEX4Z.js}

@@ -1,6 +1,6 @@
 import {
   useContentSecurityPolicy
-} from "./chunk-HZRLFCGV.js";
+} from "./chunk-DM57ZOTI.js";
 
 // src/utils/apply-content-security-policy-to-response.ts
 var applyContentSecurityPolicyToResponse = async ({

package/{chunk-HZRLFCGV.js → chunk-DM57ZOTI.js}

@@ -1,10 +1,10 @@
 import {
   isHTMLResponse,
   makeCSPHeader
-} from "./chunk-PSOS33UD.js";
+} from "./chunk-2FSRHIPY.js";
 import {
   UseCSPInputSchema
-} from "./chunk-OIEAURS7.js";
+} from "./chunk-LDKC5DRW.js";
 
 // src/middlewares/use-content-security-policy.ts
 var AppendAttribute = (attribute, nonce) => ({

package/{chunk-UBWPR24M.js → chunk-JJOX4UAG.js}

@@ -3,7 +3,7 @@ import {
   AppwardenApiTokenSchema,
   BooleanSchema,
   UseCSPInputSchema
-} from "./chunk-OIEAURS7.js";
+} from "./chunk-LDKC5DRW.js";
 
 // src/schemas/use-appwarden.ts
 import { z } from "zod";

package/{chunk-OIEAURS7.js → chunk-LDKC5DRW.js}

@@ -1,3 +1,6 @@
+// src/version.ts
+var MIDDLEWARE_VERSION = "3.14.0";
+
 // src/constants.ts
 var LOCKDOWN_TEST_EXPIRY_MS = 5 * 60 * 1e3;
 var errors = { badCacheConnection: "BAD_CACHE_CONNECTION" };
@@ -14,6 +17,8 @@ var HEARTBEAT_CONFIG_ERRORS_MAX_SERIALIZED_BYTES = 12 * 1024;
 var HEARTBEAT_RESPONSE_BODY_MAX_SERIALIZED_BYTES = 32 * 1024;
 var HEARTBEAT_CONFIG_ERROR_MAX_PATH_SEGMENT_LENGTH = 100;
 var APPWARDEN_CACHE_KEY = "appwarden-lock";
+var APPWARDEN_MIDDLEWARE_USER_AGENT_PREFIX = "Appwarden/";
+var APPWARDEN_MIDDLEWARE_USER_AGENT = `${APPWARDEN_MIDDLEWARE_USER_AGENT_PREFIX}${MIDDLEWARE_VERSION}`;
 var HEARTBEAT_SERVICE_VALUES = [
   "cloudflare",
   "cloudflare-astro",
@@ -192,6 +197,7 @@ var UseCSPInputSchema = z4.object({
 });
 
 export {
+  MIDDLEWARE_VERSION,
   LOCKDOWN_TEST_EXPIRY_MS,
   errors,
   globalErrors,
@@ -207,6 +213,8 @@ export {
   HEARTBEAT_RESPONSE_BODY_MAX_SERIALIZED_BYTES,
   HEARTBEAT_CONFIG_ERROR_MAX_PATH_SEGMENT_LENGTH,
   APPWARDEN_CACHE_KEY,
+  APPWARDEN_MIDDLEWARE_USER_AGENT_PREFIX,
+  APPWARDEN_MIDDLEWARE_USER_AGENT,
   HEARTBEAT_SERVICE_VALUES,
   HEARTBEAT_SERVICES,
   BooleanSchema,

package/{chunk-BIGBX7II.js → chunk-PCWFMNHW.js}

@@ -2,12 +2,13 @@ import {
   MemoryCache,
   debug,
   printMessage
-} from "./chunk-PSOS33UD.js";
+} from "./chunk-2FSRHIPY.js";
 import {
   APPWARDEN_CACHE_KEY,
+  APPWARDEN_MIDDLEWARE_USER_AGENT,
   APPWARDEN_TEST_ROUTE,
   LockValue
-} from "./chunk-OIEAURS7.js";
+} from "./chunk-LDKC5DRW.js";
 
 // src/utils/cloudflare/cloudflare-cache.ts
 var store = {
@@ -127,7 +128,10 @@ var syncEdgeValue = async (context) => {
   try {
     const response = await fetch(new URL("/v1/appwarden/status", apiHostname), {
       method: "POST",
-      headers: { "content-type": "application/json" },
+      headers: {
+        "content-type": "application/json",
+        "user-agent": APPWARDEN_MIDDLEWARE_USER_AGENT
+      },
       body: JSON.stringify({
         service: "cloudflare",
         provider: context.provider,

package/cloudflare/astro.d.ts

@@ -1,4 +1,3 @@
-import { Runtime } from '@astrojs/cloudflare';
 import { MiddlewareHandler } from 'astro';
 import { z } from 'zod';
 
@@ -352,12 +351,19 @@ type AstroCloudflareConfig = z.infer<typeof AstroCloudflareConfigSchema>;
 type AstroCloudflareConfigInput = z.input<typeof AstroCloudflareConfigSchema>;
 
 /**
- * Cloudflare runtime context provided by Astro on Cloudflare Workers.
- * This is extracted from the locals object when using @astrojs/cloudflare adapter.
+ * Normalized Cloudflare runtime context exposed to Appwarden config functions.
  *
- * Note: Uses generic CloudflareEnv which should be defined in the user's project.
+ * Astro v6 no longer exposes the old `locals.runtime` shape, so we compose the
+ * runtime from current Cloudflare primitives instead:
+ * - bindings from `cloudflare:workers`
+ * - cache storage from the global `caches`
+ * - execution context from `context.locals.cfContext`
  */
-type AstroCloudflareRuntime = Runtime<CloudflareEnv>["runtime"];
+interface AstroCloudflareRuntime {
+    env: CloudflareEnv;
+    caches: CacheStorage;
+    ctx: ExecutionContext;
+}
 /**
  * Configuration for the Appwarden middleware.
  *

package/cloudflare/astro.js

@@ -1,15 +1,15 @@
 import {
   applyContentSecurityPolicyToResponse,
   isResponseLike
-} from "../chunk-2ZF7A6Z3.js";
-import "../chunk-HZRLFCGV.js";
+} from "../chunk-7BZFEX4Z.js";
+import "../chunk-DM57ZOTI.js";
 import {
   getNowMs,
   logElapsed
 } from "../chunk-G6BMPIYD.js";
 import {
   checkLockStatus
-} from "../chunk-BIGBX7II.js";
+} from "../chunk-PCWFMNHW.js";
 import {
   TEMPORARY_REDIRECT_STATUS,
   buildLockPageUrl,
@@ -22,17 +22,17 @@ import {
   isOnLockPage,
   printMessage,
   sanitizeConfigErrors
-} from "../chunk-PSOS33UD.js";
+} from "../chunk-2FSRHIPY.js";
 import {
   AppwardenApiHostnameSchema,
   AppwardenApiTokenSchema,
   BooleanSchema,
   HEARTBEAT_SERVICES,
   UseCSPInputSchema
-} from "../chunk-OIEAURS7.js";
+} from "../chunk-LDKC5DRW.js";
 
 // src/adapters/astro-cloudflare.ts
-import { waitUntil } from "cloudflare:workers";
+import { env as cloudflareEnv, waitUntil } from "cloudflare:workers";
 
 // src/schemas/astro-cloudflare.ts
 import { z } from "zod";
@@ -87,6 +87,16 @@ var createAstroHeartbeatResponse = (request, runtime, configFn) => {
     );
   }
 };
+var getAstroCloudflareRuntime = (locals) => {
+  if (!locals.cfContext) {
+    return void 0;
+  }
+  return {
+    env: cloudflareEnv,
+    caches,
+    ctx: locals.cfContext
+  };
+};
 function createAppwardenMiddleware(configFn) {
   return async (context, next) => {
     const startTime = getNowMs();
@@ -117,15 +127,15 @@ function createAppwardenMiddleware(configFn) {
       }
     };
     const locals = context.locals;
+    const runtime = getAstroCloudflareRuntime(locals);
     if (isHeartbeatRequest(request, requestUrl)) {
-      return createAstroHeartbeatResponse(request, locals.runtime, configFn);
+      return createAstroHeartbeatResponse(request, runtime, configFn);
     }
     try {
-      const runtime = locals.runtime;
       if (!runtime) {
         console.error(
           printMessage(
-            "Cloudflare runtime not found. Ensure @astrojs/cloudflare adapter is configured."
+            "Cloudflare context not found. Ensure @astrojs/cloudflare adapter is configured."
           )
         );
         return next();

package/cloudflare/nextjs.js

@@ -7,7 +7,7 @@ import {
 } from "../chunk-G6BMPIYD.js";
 import {
   checkLockStatus
-} from "../chunk-BIGBX7II.js";
+} from "../chunk-PCWFMNHW.js";
 import {
   TEMPORARY_REDIRECT_STATUS,
   buildLockPageUrl,
@@ -20,14 +20,14 @@ import {
   makeCSPHeader,
   printMessage,
   sanitizeConfigErrors
-} from "../chunk-PSOS33UD.js";
+} from "../chunk-2FSRHIPY.js";
 import {
   AppwardenApiHostnameSchema,
   AppwardenApiTokenSchema,
   BooleanSchema,
   HEARTBEAT_SERVICES,
   UseCSPInputSchema
-} from "../chunk-OIEAURS7.js";
+} from "../chunk-LDKC5DRW.js";
 
 // src/adapters/nextjs-cloudflare.ts
 import { getCloudflareContext } from "@opennextjs/cloudflare";

package/cloudflare/react-router.js

@@ -1,15 +1,15 @@
 import {
   applyContentSecurityPolicyToResponse,
   isResponseLike
-} from "../chunk-2ZF7A6Z3.js";
-import "../chunk-HZRLFCGV.js";
+} from "../chunk-7BZFEX4Z.js";
+import "../chunk-DM57ZOTI.js";
 import {
   getNowMs,
   logElapsed
 } from "../chunk-G6BMPIYD.js";
 import {
   checkLockStatus
-} from "../chunk-BIGBX7II.js";
+} from "../chunk-PCWFMNHW.js";
 import {
   buildLockPageUrl,
   createHeartbeatConfigError,
@@ -21,14 +21,14 @@ import {
   isOnLockPage,
   printMessage,
   sanitizeConfigErrors
-} from "../chunk-PSOS33UD.js";
+} from "../chunk-2FSRHIPY.js";
 import {
   AppwardenApiHostnameSchema,
   AppwardenApiTokenSchema,
   BooleanSchema,
   HEARTBEAT_SERVICES,
   UseCSPInputSchema
-} from "../chunk-OIEAURS7.js";
+} from "../chunk-LDKC5DRW.js";
 
 // src/adapters/react-router-cloudflare.ts
 import { waitUntil } from "cloudflare:workers";

package/cloudflare/tanstack-start.js

@@ -1,15 +1,15 @@
 import {
   applyContentSecurityPolicyToResponse,
   isResponseLike
-} from "../chunk-2ZF7A6Z3.js";
-import "../chunk-HZRLFCGV.js";
+} from "../chunk-7BZFEX4Z.js";
+import "../chunk-DM57ZOTI.js";
 import {
   getNowMs,
   logElapsed
 } from "../chunk-G6BMPIYD.js";
 import {
   checkLockStatus
-} from "../chunk-BIGBX7II.js";
+} from "../chunk-PCWFMNHW.js";
 import {
   buildLockPageUrl,
   createHeartbeatConfigError,
@@ -21,14 +21,14 @@ import {
   isOnLockPage,
   printMessage,
   sanitizeConfigErrors
-} from "../chunk-PSOS33UD.js";
+} from "../chunk-2FSRHIPY.js";
 import {
   AppwardenApiHostnameSchema,
   AppwardenApiTokenSchema,
   BooleanSchema,
   HEARTBEAT_SERVICES,
   UseCSPInputSchema
-} from "../chunk-OIEAURS7.js";
+} from "../chunk-LDKC5DRW.js";
 
 // src/adapters/tanstack-start-cloudflare.ts
 import { waitUntil } from "cloudflare:workers";

package/cloudflare.js

@@ -1,16 +1,16 @@
 import {
   UseAppwardenInputSchema,
   lockPageSlugRefinement
-} from "./chunk-UBWPR24M.js";
+} from "./chunk-JJOX4UAG.js";
 import {
   getErrors
 } from "./chunk-NV7K5PRA.js";
 import {
   useContentSecurityPolicy
-} from "./chunk-HZRLFCGV.js";
+} from "./chunk-DM57ZOTI.js";
 import {
   checkLockStatus
-} from "./chunk-BIGBX7II.js";
+} from "./chunk-PCWFMNHW.js";
 import {
   buildLockPageUrl,
   createHeartbeatConfigError,
@@ -22,10 +22,10 @@ import {
   isOnLockPage,
   printMessage,
   sanitizeConfigErrors
-} from "./chunk-PSOS33UD.js";
+} from "./chunk-2FSRHIPY.js";
 import {
   HEARTBEAT_SERVICES
-} from "./chunk-OIEAURS7.js";
+} from "./chunk-LDKC5DRW.js";
 
 // src/runners/appwarden-on-cloudflare.ts
 import { ZodError } from "zod";

package/index.d.ts

@@ -33,6 +33,8 @@ declare const HEARTBEAT_RESPONSE_BODY_MAX_SERIALIZED_BYTES: number;
  */
 declare const HEARTBEAT_CONFIG_ERROR_MAX_PATH_SEGMENT_LENGTH = 100;
 declare const APPWARDEN_CACHE_KEY: "appwarden-lock";
+declare const APPWARDEN_MIDDLEWARE_USER_AGENT_PREFIX = "Appwarden/";
+declare const APPWARDEN_MIDDLEWARE_USER_AGENT: string;
 declare const HEARTBEAT_SERVICE_VALUES: readonly ["cloudflare", "cloudflare-astro", "cloudflare-react-router", "cloudflare-tanstack-start", "cloudflare-nextjs", "vercel"];
 /**
  * Service identifiers for different middleware adapters.
@@ -936,4 +938,4 @@ declare const LockValue: z.ZodObject<{
 }>;
 type LockValueType = z.infer<typeof LockValue>;
 
-export { APPWARDEN_CACHE_KEY, APPWARDEN_HEARTBEAT_ROUTE, HEARTBEAT_CONFIG_ERRORS_MAX_SERIALIZED_BYTES, HEARTBEAT_CONFIG_ERROR_MAX_CODE_LENGTH, HEARTBEAT_CONFIG_ERROR_MAX_COUNT, HEARTBEAT_CONFIG_ERROR_MAX_MESSAGE_LENGTH, HEARTBEAT_CONFIG_ERROR_MAX_PATH_DEPTH, HEARTBEAT_CONFIG_ERROR_MAX_PATH_SEGMENT_LENGTH, HEARTBEAT_CONTRACT_VERSION, HEARTBEAT_RESPONSE_BODY_MAX_SERIALIZED_BYTES, HEARTBEAT_SERVICES, HEARTBEAT_SERVICE_VALUES, HEARTBEAT_VERSION_MAX_LENGTH, type HeartbeatConfigError, HeartbeatConfigErrorSchema, type HeartbeatResponseBody, HeartbeatResponseBodySchema, type HeartbeatService, LOCKDOWN_TEST_EXPIRY_MS, type LockValueType, UseAppwardenInputSchema, getEdgeConfigId, isCacheUrl, isValidCacheUrl, validateHeartbeatResponseBody };
+export { APPWARDEN_CACHE_KEY, APPWARDEN_HEARTBEAT_ROUTE, APPWARDEN_MIDDLEWARE_USER_AGENT, APPWARDEN_MIDDLEWARE_USER_AGENT_PREFIX, HEARTBEAT_CONFIG_ERRORS_MAX_SERIALIZED_BYTES, HEARTBEAT_CONFIG_ERROR_MAX_CODE_LENGTH, HEARTBEAT_CONFIG_ERROR_MAX_COUNT, HEARTBEAT_CONFIG_ERROR_MAX_MESSAGE_LENGTH, HEARTBEAT_CONFIG_ERROR_MAX_PATH_DEPTH, HEARTBEAT_CONFIG_ERROR_MAX_PATH_SEGMENT_LENGTH, HEARTBEAT_CONTRACT_VERSION, HEARTBEAT_RESPONSE_BODY_MAX_SERIALIZED_BYTES, HEARTBEAT_SERVICES, HEARTBEAT_SERVICE_VALUES, HEARTBEAT_VERSION_MAX_LENGTH, type HeartbeatConfigError, HeartbeatConfigErrorSchema, type HeartbeatResponseBody, HeartbeatResponseBodySchema, type HeartbeatService, LOCKDOWN_TEST_EXPIRY_MS, type LockValueType, UseAppwardenInputSchema, getEdgeConfigId, isCacheUrl, isValidCacheUrl, validateHeartbeatResponseBody };

package/index.js

@@ -5,10 +5,12 @@ import {
 } from "./chunk-QEFORWCW.js";
 import {
   UseAppwardenInputSchema
-} from "./chunk-UBWPR24M.js";
+} from "./chunk-JJOX4UAG.js";
 import {
   APPWARDEN_CACHE_KEY,
   APPWARDEN_HEARTBEAT_ROUTE,
+  APPWARDEN_MIDDLEWARE_USER_AGENT,
+  APPWARDEN_MIDDLEWARE_USER_AGENT_PREFIX,
   CSPDirectivesSchema,
   CSPModeSchema,
   HEARTBEAT_CONFIG_ERRORS_MAX_SERIALIZED_BYTES,
@@ -26,10 +28,12 @@ import {
   HeartbeatResponseBodySchema,
   LOCKDOWN_TEST_EXPIRY_MS,
   validateHeartbeatResponseBody
-} from "./chunk-OIEAURS7.js";
+} from "./chunk-LDKC5DRW.js";
 export {
   APPWARDEN_CACHE_KEY,
   APPWARDEN_HEARTBEAT_ROUTE,
+  APPWARDEN_MIDDLEWARE_USER_AGENT,
+  APPWARDEN_MIDDLEWARE_USER_AGENT_PREFIX,
   CSPDirectivesSchema,
   CSPModeSchema,
   HEARTBEAT_CONFIG_ERRORS_MAX_SERIALIZED_BYTES,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@appwarden/middleware",
-  "version": "3.13.4",
+  "version": "3.14.1",
   "description": "Instantly disable all user interaction with your app deployed on Cloudflare or Vercel",
   "type": "module",
   "license": "MIT",
@@ -55,7 +55,7 @@
   },
   "packageManager": "pnpm@10.4.1",
   "engines": {
-    "node": ">=24"
+    "node": ">=22.14.0"
   },
   "dependencies": {
     "@upstash/redis": "^1.37.0",
@@ -104,12 +104,18 @@
       "body-parser@>=2.2.0 <2.2.1": ">=2.2.1",
       "cookie@<0.7.0": ">=0.7.0",
       "devalue@<5.6.4": ">=5.6.4",
+      "dompurify@<=3.3.1": ">=3.3.2",
       "esbuild@<=0.24.2": ">=0.25.0",
-      "fast-xml-parser@>=4.0.0-beta.3 <=5.5.5": ">=5.5.6",
+      "fast-xml-parser@5.3.4": "5.5.10",
+      "flatted@<3.4.2": ">=3.4.2",
       "h3@<1.15.6": ">=1.15.6",
       "h3@>=2.0.0 <=2.0.1-rc.14": ">=2.0.1-rc.15",
+      "handlebars@4.7.8": "4.7.9",
       "js-yaml@<3.14.2": ">=3.14.2",
       "jws@=4.0.0": ">=4.0.1",
+      "lodash@>=4.0.0 <=4.17.23": ">=4.18.1",
+      "lodash-es@>=4.0.0 <=4.17.23": ">=4.18.1",
+      "mermaid@<10.9.5": ">=10.9.5",
       "minimatch@<10.2.1": ">=10.2.3",
       "next@>=10.0.0 <16.1.7": ">=16.1.7",
       "npm@<=11.8.0": ">=11.9.0",
@@ -122,7 +128,17 @@
       "tar@<=7.5.10": ">=7.5.11",
       "undici@<7.24.0": ">=7.24.0",
       "wrangler@>=4.0.0 <4.59.1": ">=4.59.1",
-      "@tanstack/start-server-core@1.163.2>h3-v2": "npm:h3@2.0.1-rc.16"
+      "@tanstack/start-server-core@1.163.2>h3-v2": "npm:h3@2.0.1-rc.16",
+      "h3@>=2.0.0-beta.0 <=2.0.1-rc.16": ">=2.0.1-rc.17",
+      "h3@>=2.0.0-beta.4 <2.0.1-rc.18": ">=2.0.1-rc.18",
+      "h3@>=2.0.1-alpha.0 <=2.0.1-rc.16": ">=2.0.1-rc.17",
+      "defu@<=6.1.4": ">=6.1.5",
+      "vite@<=6.4.1": ">=6.4.2",
+      "vite@>=7.0.0 <=7.3.1": ">=7.3.2",
+      "vite@>=7.1.0 <=7.3.1": ">=7.3.2",
+      "vite@>=6.0.0 <=6.4.1": ">=6.4.2",
+      "next@>=16.0.0-beta.0 <16.2.3": ">=16.2.3",
+      "follow-redirects@<=1.15.11": ">=1.16.0"
     }
   }
 }

package/vercel.js

@@ -20,9 +20,10 @@ import {
   makeCSPHeader,
   printMessage,
   sanitizeConfigErrors
-} from "./chunk-PSOS33UD.js";
+} from "./chunk-2FSRHIPY.js";
 import {
   APPWARDEN_CACHE_KEY,
+  APPWARDEN_MIDDLEWARE_USER_AGENT,
   AppwardenApiHostnameSchema,
   CSPDirectivesSchema,
   CSPModeSchema,
@@ -30,7 +31,7 @@ import {
   LockValue,
   errors,
   globalErrors
-} from "./chunk-OIEAURS7.js";
+} from "./chunk-LDKC5DRW.js";
 
 // src/runners/appwarden-on-vercel.ts
 import { waitUntil } from "@vercel/functions";
@@ -116,7 +117,10 @@ var syncEdgeValue = async (context) => {
     const apiHostname = context.appwardenApiHostname ?? "https://api.appwarden.io";
     const response = await fetch(new URL("/v1/appwarden/status", apiHostname), {
       method: "POST",
-      headers: { "content-type": "application/json" },
+      headers: {
+        "content-type": "application/json",
+        "user-agent": APPWARDEN_MIDDLEWARE_USER_AGENT
+      },
       body: JSON.stringify({
         service: "vercel",
         cacheUrl: context.cacheUrl,