@patchstack/connect 0.3.14 → 0.3.15

package/dist/protect.js

@@ -899,6 +899,64 @@ var RuleEngine = class {
   }
 };
 
+// src/protect/engine/pulse-client.js
+var DEFAULT_BASE_URL2 = "https://api.patchstack.com/monitor/pulse";
+var DEFAULT_CACHE_TTL2 = 3e5;
+var PulseRuleClient = class {
+  #siteUuid;
+  #baseUrl;
+  #cacheTtl;
+  #cache = null;
+  #cacheTime = null;
+  constructor({ siteUuid, baseUrl, cacheTtl } = {}) {
+    this.#siteUuid = siteUuid ?? process.env.PATCHSTACK_SITE_UUID;
+    this.#baseUrl = baseUrl ?? process.env.PATCHSTACK_PULSE_RULES_URL ?? DEFAULT_BASE_URL2;
+    this.#cacheTtl = cacheTtl ?? DEFAULT_CACHE_TTL2;
+    if (!this.#siteUuid) {
+      throw new Error("Patchstack site UUID is required. Pass { siteUuid } or set PATCHSTACK_SITE_UUID.");
+    }
+  }
+  async getRules() {
+    const now = Date.now();
+    if (this.#cache && this.#cacheTime && now - this.#cacheTime < this.#cacheTtl) {
+      return this.#cache;
+    }
+    const url = `${this.#baseUrl}/rules/${encodeURIComponent(this.#siteUuid)}`;
+    try {
+      const response = await fetch(url, {
+        method: "GET",
+        headers: { Accept: "application/json" },
+        signal: AbortSignal.timeout(3e4)
+      });
+      if (!response.ok) {
+        return { success: false, error: `API returned ${response.status}`, firewall: [], whitelists: [], whitelist_keys: {} };
+      }
+      const data = await response.json();
+      const result = {
+        success: true,
+        firewall: Array.isArray(data.firewall) ? data.firewall : [],
+        whitelists: Array.isArray(data.whitelists) ? data.whitelists : [],
+        whitelist_keys: data.whitelist_keys ?? {}
+      };
+      this.#cache = result;
+      this.#cacheTime = now;
+      return result;
+    } catch (err) {
+      return {
+        success: false,
+        error: err.name === "TimeoutError" ? "Request timed out" : err.message,
+        firewall: [],
+        whitelists: [],
+        whitelist_keys: {}
+      };
+    }
+  }
+  clearCache() {
+    this.#cache = null;
+    this.#cacheTime = null;
+  }
+};
+
 // src/protect/engine/fetch.js
 async function fromFetchRequest(request) {
   const url = new URL(request.url);
@@ -1521,8 +1579,25 @@ function leakResponse() {
   });
 }
 async function resolveRules(options) {
-  if (options.rules) {
-    return normalizeBundle(options.rules);
+  if (options.siteUuid) {
+    const client = new PulseRuleClient({ siteUuid: options.siteUuid, baseUrl: options.pulseRulesUrl });
+    const res = await client.getRules();
+    if (res.success) {
+      const bundle = normalizeBundle(res);
+      cacheWrite(options.cacheDir, bundle);
+      return bundle;
+    }
+    const cached = cacheRead(options.cacheDir);
+    if (cached) {
+      options.onError?.(new Error(`pulse rule fetch failed (${res.error}); using cached bundle`));
+      return normalizeBundle(cached);
+    }
+    if (options.rules) {
+      options.onError?.(new Error(`pulse rule fetch failed (${res.error}); using bundled fallback`));
+      return normalizeBundle(options.rules);
+    }
+    options.onError?.(new Error(`pulse rule fetch failed (${res.error}); no cache \u2014 running with no rules`));
+    return emptyBundle();
   }
   if (options.token) {
     const client = new PatchstackRuleClient({ token: options.token, baseUrl: options.baseUrl });
@@ -1540,6 +1615,9 @@ async function resolveRules(options) {
     options.onError?.(new Error(`rule fetch failed (${res.error}); no cache \u2014 running with no rules`));
     return emptyBundle();
   }
+  if (options.rules) {
+    return normalizeBundle(options.rules);
+  }
   return emptyBundle();
 }
 function normalizeBundle(b) {
@@ -1590,6 +1668,7 @@ function defaultOnDetect({ phase, mode, category, rule, message }) {
 }
 export {
   GUARD_PATH,
+  PulseRuleClient,
   createProtection,
   createServerFnGuard,
   createSupabaseGuard