@arcjet/bun 1.5.0 → 1.6.0

package/README.md

@@ -31,9 +31,9 @@ an HTTP request), see [`@arcjet/guard`](https://github.com/arcjet/arcjet-js/tree
    ```sh
    npx @arcjet/cli auth login
    ```
-2. Install the request protection skill to give your coding agent the docs it needs:
+2. Install the Arcjet skill to give your coding agent the docs it needs:
    ```sh
-   npx skills add arcjet/skills --skill add-request-protection
+   npx skills add arcjet/skills
    ```
 3. Tell your agent what to protect — it handles the rest.
 

package/index.d.ts

@@ -97,7 +97,9 @@ export interface ArcjetBun<Props extends PlainObject> {
      *   Promise that resolves to an {@linkcode ArcjetDecision} indicating
      *   Arcjet’s decision about the request.
      */
-    protect(request: Request, ...properties: MaybeProperties<Props>): Promise<ArcjetDecision>;
+    protect(request: Request, ...properties: MaybeProperties<Props & {
+        correlationId?: string;
+    }>): Promise<ArcjetDecision>;
     /**
      * Augment the client with another rule.
      *

package/index.js

@@ -27,7 +27,7 @@ function createRemoteClient(options) {
     // Transport is the HTTP client that the client uses to make requests.
     const transport = createTransport(url);
     const sdkStack = "BUN";
-    const sdkVersion = "1.5.0";
+    const sdkVersion = "1.6.0";
     return createClient({
         transport,
         baseUrl: url,
@@ -110,8 +110,11 @@ function arcjet(options) {
                 return withClient(client);
             },
             async protect(request, props) {
+                // `correlationId` is a request-independent option, not a rule prop, so
+                // pull it out before building the request from the rule properties.
+                const { correlationId, ...properties } = props ?? {};
                 // Cast of `{}` because here we switch from `undefined` to `Properties`.
-                const req = toArcjetRequest(request, props || {});
+                const req = toArcjetRequest(request, (properties || {}));
                 const getBody = async () => {
                     if (request.bodyUsed) {
                         throw new Error("Cannot read body: already read");
@@ -132,7 +135,7 @@ function arcjet(options) {
                     }
                     return readBodyWeb(clonedRequest.body, { expectedLength });
                 };
-                return aj.protect({ getBody }, req);
+                return aj.protect({ getBody }, { ...req, correlationId });
             },
             handler(fetch) {
                 return async function (request, server) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arcjet/bun",
-  "version": "1.5.0",
+  "version": "1.6.0",
   "description": "Arcjet runtime security SDK for Bun — bot protection, rate limiting, prompt injection detection, PII blocking, and WAF",
   "keywords": [
     "ai",
@@ -51,23 +51,23 @@
     "test": "npm run build && npm run lint"
   },
   "dependencies": {
-    "@arcjet/body": "1.5.0",
-    "@arcjet/env": "1.5.0",
-    "@arcjet/headers": "1.5.0",
-    "@arcjet/ip": "1.5.0",
-    "@arcjet/logger": "1.5.0",
-    "@arcjet/protocol": "1.5.0",
-    "@arcjet/transport": "1.5.0",
-    "arcjet": "1.5.0"
+    "@arcjet/body": "1.6.0",
+    "@arcjet/env": "1.6.0",
+    "@arcjet/headers": "1.6.0",
+    "@arcjet/ip": "1.6.0",
+    "@arcjet/logger": "1.6.0",
+    "@arcjet/protocol": "1.6.0",
+    "@arcjet/transport": "1.6.0",
+    "arcjet": "1.6.0"
   },
   "devDependencies": {
-    "@arcjet/eslint-config": "1.5.0",
-    "@arcjet/rollup-config": "1.5.0",
-    "@rollup/wasm-node": "4.61.0",
+    "@arcjet/eslint-config": "1.6.0",
+    "@arcjet/rollup-config": "1.6.0",
+    "@rollup/wasm-node": "4.62.2",
     "bun-types": "1.3.14",
     "eslint": "9.39.4",
     "typescript": "5.9.3",
-    "undici-types": "7.27.0"
+    "undici-types": "7.28.0"
   },
   "publishConfig": {
     "access": "public",