@arcjet/astro 1.6.1 → 1.7.0-rc.0

package/dist/internal.js

@@ -0,0 +1,118 @@
+import { findIp, parseProxies } from "@arcjet/ip";
+import { readBodyWeb } from "@arcjet/body";
+import { baseUrl, isDevelopment, logLevel, platform } from "@arcjet/env";
+import { ArcjetHeaders } from "@arcjet/headers";
+import { Logger } from "@arcjet/logger";
+import { createClient } from "@arcjet/protocol/client.js";
+import { createTransport } from "@arcjet/transport";
+import core from "arcjet";
+import { ARCJET_BASE_URL, ARCJET_ENV, ARCJET_KEY, ARCJET_LOG_LEVEL, FIREBASE_CONFIG, FLY_APP_NAME, RENDER, VERCEL } from "astro:env/server";
+export * from "arcjet";
+//#region src/internal.ts
+let warnedForAutomaticBodyRead = false;
+const ipSymbol = Symbol.for("arcjet.ip");
+const env = {
+	ARCJET_BASE_URL,
+	ARCJET_ENV,
+	ARCJET_KEY,
+	ARCJET_LOG_LEVEL,
+	FIREBASE_CONFIG,
+	FLY_APP_NAME,
+	MODE: import.meta.env.MODE,
+	RENDER,
+	VERCEL
+};
+/**
+* Create a remote client.
+*
+* @param options
+*   Configuration (optional).
+* @returns
+*   Client.
+*/
+function createRemoteClient(options) {
+	const url = options?.baseUrl ?? baseUrl(env);
+	const timeout = options?.timeout ?? (isDevelopment(env) ? 1e3 : 500);
+	return createClient({
+		transport: createTransport(url),
+		baseUrl: url,
+		timeout,
+		sdkStack: "ASTRO",
+		sdkVersion: "__ARCJET_SDK_VERSION__"
+	});
+}
+/**
+* Create a new Astro integration of Arcjet.
+*
+* @template Rules
+*   List of rules.
+* @template Characteristics
+*   Characteristics to track a user by.
+* @param options
+*   Configuration.
+* @returns
+*   Astro integration of Arcjet.
+*/
+function createArcjetClient(options) {
+	const client = options.client ?? createRemoteClient();
+	const log = options.log ? options.log : new Logger({ level: logLevel(env) });
+	const proxies = Array.isArray(options.proxies) ? parseProxies(options.proxies) : void 0;
+	if (isDevelopment(process.env)) log.warn("Arcjet will use 127.0.0.1 when missing public IP address in development mode");
+	function toArcjetRequest(request, props) {
+		const clientAddress = Reflect.get(request, ipSymbol);
+		if (!clientAddress) throw new Error("`protect()` cannot be used in prerendered pages");
+		const cookies = request.headers.get("cookie") ?? "";
+		const headers = new ArcjetHeaders(request.headers);
+		const url = new URL(request.url);
+		let ip = (isDevelopment(env) ? headers.get("x-arcjet-ip") : void 0) || findIp({
+			ip: clientAddress,
+			headers
+		}, {
+			platform: platform(env),
+			proxies
+		});
+		if (ip === "") if (isDevelopment(env)) ip = "127.0.0.1";
+		else log.warn(`Client IP address is missing. If this is a dev environment set the ARCJET_ENV env var to "development"`);
+		return {
+			...props,
+			ip,
+			method: request.method,
+			protocol: url.protocol,
+			host: url.host,
+			path: url.pathname,
+			headers,
+			cookies,
+			query: url.search
+		};
+	}
+	function withClient(aj) {
+		return Object.freeze({
+			withRule(rule) {
+				return withClient(aj.withRule(rule));
+			},
+			async protect(request, props) {
+				const req = toArcjetRequest(request, props || {});
+				const getBody = async () => {
+					const clonedRequest = request.clone();
+					let expectedLength;
+					const expectedLengthString = request.headers.get("content-length");
+					if (typeof expectedLengthString === "string") expectedLength = parseInt(expectedLengthString, 10);
+					if (!clonedRequest.body) throw new Error("Cannot read body: body is missing");
+					if (!warnedForAutomaticBodyRead) {
+						warnedForAutomaticBodyRead = true;
+						log.warn("Automatically reading the request body is deprecated; please pass an explicit `sensitiveInfoValue` field. See <https://docs.arcjet.com/upgrading/sdk-migration>.");
+					}
+					return readBodyWeb(clonedRequest.body, { expectedLength });
+				};
+				return aj.protect({ getBody }, req);
+			}
+		});
+	}
+	return withClient(core({
+		...options,
+		client,
+		log
+	}));
+}
+//#endregion
+export { createArcjetClient, createRemoteClient };

package/dist/middleware.d.ts

@@ -0,0 +1,4 @@
+//#region src/middleware.d.ts
+declare const onRequest: import("astro").MiddlewareHandler;
+//#endregion
+export { onRequest };

package/dist/middleware.js

@@ -0,0 +1,9 @@
+import { defineMiddleware } from "astro/middleware";
+//#region src/middleware.ts
+const ipSymbol = Symbol.for("arcjet.ip");
+const onRequest = defineMiddleware((ctx, next) => {
+	if (!ctx.isPrerendered) Reflect.set(ctx.request, ipSymbol, ctx.clientAddress);
+	return next();
+});
+//#endregion
+export { onRequest };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@arcjet/astro",
-  "version": "1.6.1",
-  "description": "Arcjet runtime security SDK for Astro — bot protection, rate limiting, prompt injection detection, PII blocking, and WAF",
+  "version": "1.7.0-rc.0",
+  "description": "Arcjet runtime security SDK for Astro \u2014 bot protection, rate limiting, prompt injection detection, PII blocking, and WAF",
   "keywords": [
     "ai",
     "analyze",
@@ -22,64 +22,63 @@
     "waf",
     "withastro"
   ],
-  "license": "Apache-2.0",
   "homepage": "https://arcjet.com",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/arcjet/arcjet-js.git",
-    "directory": "arcjet-astro"
-  },
   "bugs": {
     "url": "https://github.com/arcjet/arcjet-js/issues",
     "email": "support@arcjet.com"
   },
+  "license": "Apache-2.0",
   "author": {
     "name": "Arcjet",
     "email": "support@arcjet.com",
     "url": "https://arcjet.com"
   },
-  "engines": {},
-  "type": "module",
-  "main": "./index.js",
-  "types": "./index.d.ts",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/arcjet/arcjet-js.git",
+    "directory": "arcjet-astro"
+  },
   "files": [
-    "index.d.ts",
-    "index.js",
-    "internal.d.ts",
-    "internal.js",
-    "middleware.d.ts",
-    "middleware.js"
+    "dist"
   ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "publishConfig": {
+    "access": "public",
+    "tag": "latest"
+  },
   "scripts": {
-    "build": "rollup --config rollup.config.js",
-    "lint": "eslint .",
-    "test-api": "node --test -- test/*.test.js",
-    "test-coverage": "node --experimental-test-coverage --test -- test/*.test.js",
-    "test": "npm run build && npm run lint && npm run test-coverage"
+    "build": "tsdown",
+    "typecheck": "tsgo --noEmit",
+    "test-api": "node --test -- test/*.test.ts",
+    "test-coverage": "node --experimental-test-coverage --test -- test/*.test.ts",
+    "test": "npm run build && npm run test-coverage"
   },
   "dependencies": {
-    "@arcjet/body": "1.6.1",
-    "@arcjet/env": "1.6.1",
-    "@arcjet/headers": "1.6.1",
-    "@arcjet/ip": "1.6.1",
-    "@arcjet/logger": "1.6.1",
-    "@arcjet/protocol": "1.6.1",
-    "@arcjet/transport": "1.6.1",
-    "arcjet": "1.6.1"
-  },
-  "peerDependencies": {
-    "astro": "^5.9.3 || ^6.0.0 || ^7.0.0"
+    "@arcjet/body": "1.7.0-rc.0",
+    "@arcjet/env": "1.7.0-rc.0",
+    "@arcjet/headers": "1.7.0-rc.0",
+    "@arcjet/ip": "1.7.0-rc.0",
+    "@arcjet/logger": "1.7.0-rc.0",
+    "@arcjet/protocol": "1.7.0-rc.0",
+    "@arcjet/transport": "1.7.0-rc.0",
+    "arcjet": "1.7.0-rc.0"
   },
   "devDependencies": {
-    "@arcjet/eslint-config": "1.6.1",
-    "@arcjet/rollup-config": "1.6.1",
-    "@rollup/wasm-node": "4.62.2",
     "astro": "7.0.3",
-    "eslint": "9.39.4",
-    "typescript": "5.9.3"
+    "tsdown": "0.22.3",
+    "typescript": "6.0.3"
   },
-  "publishConfig": {
-    "access": "public",
-    "tag": "latest"
-  }
+  "peerDependencies": {
+    "astro": "^5.9.3 || ^6.0.0 || ^7.0.0"
+  },
+  "engines": {}
 }