@patchstack/connect 0.2.10 → 0.3.0

package/dist/cli.js

@@ -1161,13 +1161,17 @@ function injectMarker(html, snippet) {
 
 // src/protect/install.ts
 import { readFileSync, writeFileSync, existsSync as existsSync2, mkdirSync, copyFileSync } from "fs";
-import { join } from "path";
+import { join, dirname } from "path";
 import { fileURLToPath } from "url";
-var TEMPLATES = fileURLToPath(new URL("./protect/templates/", import.meta.url));
+var TEMPLATES = join(dirname(fileURLToPath(import.meta.url)), "protect", "templates");
+var APP = process.cwd();
+var PS_DIR = join(APP, "src/integrations/patchstack");
+var read = (p) => readFileSync(p, "utf8");
+var log = (msg) => console.log(`patchstack protect: ${msg}`);
 var CLIENT_TUNNEL = [
   "",
-  "    // PATCHSTACK auto-guard: in the browser, tunnel Supabase traffic through the app's own",
-  "    // server guard (same-origin) so payloads are inspected before they reach Supabase.",
+  "    // PATCHSTACK: in the browser, tunnel Supabase traffic through the app's own server guard",
+  "    // (same-origin) so payloads are inspected before they reach Supabase.",
   "    if (typeof window !== 'undefined') {",
   "      const target = typeof input === 'string' ? input : input instanceof Request ? input.url : String(input);",
   "      const method = init?.method ?? (input instanceof Request ? input.method : 'GET');",
@@ -1183,7 +1187,7 @@ var START_IMPORTS = [
 ].join("\n");
 var START_MIDDLEWARE = [
   "",
-  "// Patchstack auto-guard: intercept the tunneled data traffic before anything else runs.",
+  "// Patchstack guard: intercept the tunneled Supabase traffic before anything else runs.",
   "const patchstackGuard = createMiddleware().server(async ({ next }) => {",
   "  const request = getRequest();",
   "  if (request) {",
@@ -1194,76 +1198,38 @@ var START_MIDDLEWARE = [
   "});",
   ""
 ].join("\n");
-var PS_DIR_REL = "src/integrations/patchstack";
-function log(msg) {
-  console.log(`patchstack protect: ${msg}`);
-}
 function detectSupportedStack(cwd) {
   const pkgPath = join(cwd, "package.json");
   if (!existsSync2(pkgPath)) return false;
-  const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
+  const pkg = JSON.parse(read(pkgPath));
   const deps = { ...pkg.dependencies, ...pkg.devDependencies };
   return Boolean(deps["@tanstack/react-start"]) && existsSync2(join(cwd, "src/start.ts")) && existsSync2(join(cwd, "src/integrations/supabase/client.ts"));
 }
-function generateManifest(cwd) {
-  const pkg = JSON.parse(readFileSync(join(cwd, "package.json"), "utf8"));
-  const deps = { ...pkg.dependencies, ...pkg.devDependencies };
-  const packages = {};
-  for (const name of Object.keys(deps)) {
-    let version = String(deps[name]).replace(/^[^\d]*/, "");
-    const installed = join(cwd, "node_modules", name, "package.json");
-    if (existsSync2(installed)) {
-      try {
-        version = JSON.parse(readFileSync(installed, "utf8")).version;
-      } catch {
-      }
-    }
-    packages[name] = version;
-  }
-  mkdirSync(join(cwd, PS_DIR_REL), { recursive: true });
-  const body = "// Patchstack auto-guard manifest \u2014 generated from the lockfile.\n// Do not edit; regenerated by `patchstack-connect protect --manifest` (wired into prebuild).\nexport const manifest = " + JSON.stringify({ packages }, null, 2) + ";\n";
-  writeFileSync(join(cwd, PS_DIR_REL, "manifest.js"), body);
-  log(`wrote manifest.js (${Object.keys(packages).length} packages)`);
-}
 function scaffold(cwd) {
-  const dst = join(cwd, PS_DIR_REL);
+  const dst = join(cwd, "src/integrations/patchstack");
   mkdirSync(dst, { recursive: true });
-  copyFileSync(join(TEMPLATES, "engine.js"), join(dst, "engine.js"));
-  copyFileSync(join(TEMPLATES, "engine.d.ts"), join(dst, "engine.d.ts"));
-  copyFileSync(join(TEMPLATES, "manifest.d.ts"), join(dst, "manifest.d.ts"));
-  copyFileSync(join(TEMPLATES, "rules.json"), join(dst, "rules.json"));
   copyFileSync(join(TEMPLATES, "guard.ts"), join(dst, "guard.ts"));
-  log("scaffolded engine.js (+types), rules.json, guard.ts");
+  copyFileSync(join(TEMPLATES, "rules.json"), join(dst, "rules.json"));
+  log("scaffolded guard.ts + rules.json");
 }
 function patchClient(cwd) {
   const p = join(cwd, "src/integrations/supabase/client.ts");
-  let s = readFileSync(p, "utf8");
-  if (s.includes("x-ps-target")) {
-    log("client.ts already wired");
-    return;
-  }
+  let s = read(p);
+  if (s.includes("x-ps-target")) return log("client.ts already wired");
   const anchor = "headers.set('apikey', supabaseKey);";
-  if (!s.includes(anchor)) {
-    log("client.ts anchor not found (template changed?) \u2014 skipping client patch");
-    return;
-  }
-  s = s.replace(anchor, anchor + "\n" + CLIENT_TUNNEL);
-  writeFileSync(p, s);
+  if (!s.includes(anchor)) return log("client.ts anchor not found \u2014 skipping (template changed?)");
+  writeFileSync(p, s.replace(anchor, anchor + "\n" + CLIENT_TUNNEL));
   log("patched client.ts (tunnel Supabase through the guard)");
 }
 function patchStart(cwd) {
   const p = join(cwd, "src/start.ts");
-  let s = readFileSync(p, "utf8");
-  if (s.includes("patchstackGuard")) {
-    log("start.ts already wired");
-    return;
-  }
+  let s = read(p);
+  if (s.includes("patchstackGuard")) return log("start.ts already wired");
   const importAnchor = 'import { createStart, createMiddleware } from "@tanstack/react-start";';
   const exportAnchor = "export const startInstance";
   const rmAnchor = "requestMiddleware: [";
   if (!s.includes(importAnchor) || !s.includes(exportAnchor) || !s.includes(rmAnchor)) {
-    log("start.ts anchors not found (template changed?) \u2014 skipping start patch");
-    return;
+    return log("start.ts anchors not found \u2014 skipping (template changed?)");
   }
   s = s.replace(importAnchor, importAnchor + "\n" + START_IMPORTS);
   s = s.replace(exportAnchor, START_MIDDLEWARE + "\n" + exportAnchor);
@@ -1271,36 +1237,14 @@ function patchStart(cwd) {
   writeFileSync(p, s);
   log("patched start.ts (registered the guard as request middleware)");
 }
-function wirePrebuild(cwd) {
-  const p = join(cwd, "package.json");
-  const pkg = JSON.parse(readFileSync(p, "utf8"));
-  pkg.scripts = pkg.scripts || {};
-  const step = "patchstack-connect protect --manifest";
-  const prebuild = pkg.scripts.prebuild || "";
-  if (prebuild.includes(step)) {
-    log("prebuild already refreshes the manifest");
-    return;
-  }
-  pkg.scripts.prebuild = prebuild ? prebuild + " && " + step : step;
-  writeFileSync(p, JSON.stringify(pkg, null, 2) + "\n");
-  log("wired manifest refresh into prebuild");
-}
-function runProtect(cwd, opts = {}) {
-  if (opts.manifestOnly) {
-    generateManifest(cwd);
-    return;
-  }
+function runProtect(cwd) {
   if (!detectSupportedStack(cwd)) {
-    log(
-      "runtime protection currently supports TanStack Start + Supabase apps; stack not detected \u2014 skipping."
-    );
+    log("runtime protection currently supports TanStack Start + Supabase apps; stack not detected \u2014 skipping.");
     return;
   }
   scaffold(cwd);
   patchClient(cwd);
   patchStart(cwd);
-  generateManifest(cwd);
-  wirePrebuild(cwd);
   log("done \u2014 guard wired and always-on (blocks by default). Set PATCHSTACK_MODE=dry-run for log-only.");
 }
 
@@ -1316,9 +1260,8 @@ Usage:
   patchstack-connect status [options]                Show current configuration
   patchstack-connect mark-build [options]            Stamp built HTML with a production flag +
                                                      build fingerprint (run as a postbuild step)
-  patchstack-connect protect [--manifest]            Install runtime protection (the guard) into
-                                                     a server-side JS app. --manifest only
-                                                     regenerates the package manifest (prebuild).
+  patchstack-connect protect                         Install always-on runtime protection (the
+                                                     guard) into a TanStack Start + Supabase app.
   patchstack-connect help                            Print this message
 
 Options (for scan and status):
@@ -1456,9 +1399,9 @@ async function runScan(args) {
   }
   return 0;
 }
-async function runProtectCommand(args) {
+async function runProtectCommand(_args) {
   try {
-    runProtect(process.cwd(), { manifestOnly: args.flags.get("manifest") === true });
+    runProtect(process.cwd());
   } catch (err) {
     console.warn(`patchstack protect: skipped (${err.message}).`);
   }