@arcjet/astro 1.14.0 → 1.15.0

package/README.md

@@ -344,39 +344,60 @@ if (decision.isDenied() && decision.reason.isRateLimit()) {
 
 ## Sensitive information detection
 
-Detect and block PII in request content. Pass the content to scan via
-`sensitiveInfoValue` on each `protect()` call. Built-in entity types:
-`CREDIT_CARD_NUMBER`, `EMAIL`, `PHONE_NUMBER`, `IP_ADDRESS`. You can also
-provide a custom `detect` callback for additional patterns.
-
-```js
-import arcjet, { sensitiveInfo } from "@arcjet/astro";
-
-// In astro.config.mjs:
-arcjet({
-  rules: [
-    sensitiveInfo({
-      mode: "LIVE", // Blocks requests. Use "DRY_RUN" to log only
-      deny: ["CREDIT_CARD_NUMBER", "EMAIL", "PHONE_NUMBER"],
-    }),
-  ],
-});
+Detect and block PII in request content on-device with
+[`@arcjet/sensitive-info-rampart`](https://www.npmjs.com/package/@arcjet/sensitive-info-rampart),
+which runs the Rampart named-entity-recognition model locally, so no data
+leaves your environment. Pass the content to scan via `sensitiveInfoValue` on
+each `protect()` call. Rampart detects names, addresses, government and
+financial identifiers, email addresses, phone numbers, IP addresses, and card
+numbers. Add a recognizer to detect custom patterns.
+
+The backend is a runtime object, so add the rule in your route with
+`withRule()` rather than in `astro.config.mjs`. Import the rule from the
+`arcjet` core package, which `@arcjet/astro` already depends on:
+
+```sh
+npm install arcjet @arcjet/sensitive-info-rampart
 ```
 
 ```ts
-// In your API route:
-const decision = await aj.protect(request, {
-  sensitiveInfoValue: userMessage, // The text content to scan
-});
+// src/pages/api/chat.ts
+import { rampart } from "@arcjet/sensitive-info-rampart";
+import type { APIRoute } from "astro";
+// The client generated by the Astro integration
+import aj from "arcjet:client";
+// The core package, for rules that take a runtime backend
+import { sensitiveInfo } from "arcjet";
+
+const routeAj = aj.withRule(
+  sensitiveInfo({
+    mode: "LIVE", // Blocks requests. Use "DRY_RUN" to log only
+    deny: ["CREDIT_CARD_NUMBER", "EMAIL", "PHONE_NUMBER"],
+    backend: rampart(),
+  }),
+);
 
-if (decision.isDenied() && decision.reason.isSensitiveInfo()) {
-  return Response.json(
-    { error: "Sensitive information detected" },
-    { status: 400 },
-  );
-}
+export const POST: APIRoute = async ({ request }) => {
+  const { message } = await request.json();
+  const decision = await routeAj.protect(request, {
+    sensitiveInfoValue: message, // The text content to scan
+  });
+
+  if (decision.isDenied() && decision.reason.isSensitiveInfo()) {
+    return Response.json(
+      { error: "Sensitive information detected" },
+      { status: 400 },
+    );
+  }
+
+  return Response.json({ ok: true });
+};
 ```
 
+Rampart runs on Node.js, Bun, and Deno, and loads its model from
+`node_modules` at runtime, so keep it out of your server bundle. See
+[Bundlers and frameworks](https://github.com/arcjet/arcjet-js/tree/main/sensitive-info-rampart#bundlers-and-frameworks).
+
 ## Shield WAF
 
 Protect your application against common web attacks, including the OWASP

package/dist/internal.js

@@ -10,7 +10,7 @@ import { ARCJET_BASE_URL, ARCJET_ENV, ARCJET_KEY, ARCJET_LOG_LEVEL, FIREBASE_CON
 export * from "arcjet";
 //#region src/internal.ts
 /** SDK version. Updated by the release process. */
-const VERSION = "1.14.0";
+const VERSION = "1.15.0";
 let warnedForAutomaticBodyRead = false;
 const ipSymbol = Symbol.for("arcjet.ip");
 const env = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arcjet/astro",
-  "version": "1.14.0",
+  "version": "1.15.0",
   "description": "Arcjet runtime security SDK for Astro — bot protection, rate limiting, prompt injection detection, PII blocking, and WAF",
   "keywords": [
     "ai",
@@ -62,18 +62,18 @@
     "test": "npm run build && npm run test-coverage"
   },
   "dependencies": {
-    "@arcjet/body": "1.14.0",
-    "@arcjet/env": "1.14.0",
-    "@arcjet/headers": "1.14.0",
-    "@arcjet/ip": "1.14.0",
-    "@arcjet/logger": "1.14.0",
-    "@arcjet/protocol": "1.14.0",
-    "@arcjet/transport": "1.14.0",
-    "arcjet": "1.14.0"
+    "@arcjet/body": "1.15.0",
+    "@arcjet/env": "1.15.0",
+    "@arcjet/headers": "1.15.0",
+    "@arcjet/ip": "1.15.0",
+    "@arcjet/logger": "1.15.0",
+    "@arcjet/protocol": "1.15.0",
+    "@arcjet/transport": "1.15.0",
+    "arcjet": "1.15.0"
   },
   "devDependencies": {
-    "astro": "7.3.2",
-    "tsdown": "0.23.0",
+    "astro": "7.4.2",
+    "tsdown": "0.23.1",
     "typescript": "7.0.2"
   },
   "peerDependencies": {