@patchstack/connect 0.3.18 → 0.3.20

package/dist/protect.js

@@ -13,7 +13,7 @@ var PatchstackRuleClient = class {
   constructor({ token, baseUrl, cacheTtl, etag } = {}) {
     this.#token = token ?? process.env.PATCHSTACK_WAF_TOKEN;
     this.#baseUrl = baseUrl ?? process.env.PATCHSTACK_WAF_API_URL ?? DEFAULT_BASE_URL;
-    this.#cacheTtl = cacheTtl ?? DEFAULT_CACHE_TTL;
+    this.#cacheTtl = Number.isFinite(cacheTtl) && cacheTtl > 0 ? cacheTtl : DEFAULT_CACHE_TTL;
     this.#etag = etag ?? null;
     if (!this.#token) {
       throw new Error("Patchstack WAF token is required. Pass { token } or set PATCHSTACK_WAF_TOKEN env var.");
@@ -53,11 +53,14 @@ var PatchstackRuleClient = class {
         };
       }
       const data = await response.json();
+      if (!data || !Array.isArray(data.firewall)) {
+        return { success: false, error: "unexpected response shape (no firewall array)", firewall: [], whitelists: [], whitelist_keys: {} };
+      }
       const result = {
         success: true,
         notModified: false,
         etag: response.headers?.get?.("etag") ?? null,
-        firewall: Array.isArray(data.firewall) ? data.firewall : [],
+        firewall: data.firewall,
         whitelists: Array.isArray(data.whitelists) ? data.whitelists : [],
         whitelist_keys: data.whitelist_keys ?? {}
       };
@@ -383,13 +386,14 @@ var RequestResolver = class {
     if (typeof obj !== "object" || obj === null) {
       return void 0;
     }
-    if (key in obj) {
+    const own = (o, k) => o !== null && typeof o === "object" && Object.prototype.hasOwnProperty.call(o, k);
+    if (own(obj, key)) {
       return obj[key];
     }
     const parts = key.split(".");
     let current = obj;
     for (const part of parts) {
-      if (current === null || current === void 0 || typeof current !== "object") {
+      if (!own(current, part)) {
         return void 0;
       }
       current = current[part];
@@ -602,11 +606,8 @@ function normalizeObject(value, options = {}) {
 
 // src/protect/engine/engine.js
 var REDOS_PATTERNS = [
-  /\(\w\+\)\+/,
-  /\(\w\*\)\+/,
-  /\(\w\+\)\*/,
-  /\(\w\*\)\*/,
-  /\(\w\|\w\)\+/
+  /\([^)]*[+*}][^)]*\)\s*[+*]/,
+  /\([^)]*\|[^)]*\)\s*[+*]/
 ];
 function safeRegExp(pattern) {
   if (!pattern) {
@@ -634,6 +635,25 @@ function ctypeResult(strValue, isClass, matchVal) {
   const expected = typeof matchVal === "boolean" ? matchVal : true;
   return isClass === expected;
 }
+function walkLeaves(node, segments, cb) {
+  if (node === null || typeof node !== "object") return;
+  if (Array.isArray(node)) {
+    for (const el of node) walkLeaves(el, segments, cb);
+    return;
+  }
+  const [head, ...rest] = segments;
+  if (head === void 0 || !Object.prototype.hasOwnProperty.call(node, head)) return;
+  if (rest.length === 0) {
+    const leaf = node[head];
+    if (Array.isArray(leaf)) {
+      for (let i = 0; i < leaf.length; i++) cb({ parent: leaf, key: i, value: leaf[i] });
+    } else {
+      cb({ parent: node, key: head, value: leaf });
+    }
+  } else {
+    walkLeaves(node[head], rest, cb);
+  }
+}
 function arrayKeyValue(value, matchObj) {
   if (!matchObj || !matchObj.match || value === null || typeof value !== "object") {
     return false;
@@ -641,23 +661,11 @@ function arrayKeyValue(value, matchObj) {
   const keys = Array.isArray(matchObj.key) ? matchObj.key : [matchObj.key];
   const sub = matchObj.match;
   for (const key of keys) {
-    let node = value;
-    for (const part of String(key).split(".")) {
-      if (node === null || typeof node !== "object") {
-        node = void 0;
-        break;
-      }
-      node = node[part];
-    }
-    if (node === void 0) {
-      continue;
-    }
-    const candidates = Array.isArray(node) ? node : [node];
-    for (const candidate of candidates) {
-      if (matchValue(sub.type, candidate, sub.value, sub)) {
-        return true;
-      }
-    }
+    let matched = false;
+    walkLeaves(value, String(key).split("."), ({ value: leaf }) => {
+      if (!matched && matchValue(sub.type, leaf, sub.value, sub)) matched = true;
+    });
+    if (matched) return true;
   }
   return false;
 }
@@ -679,16 +687,68 @@ function isInternalHost(hostname) {
   if (host === "::1" || host === "::") return true;
   if (host.startsWith("fe80:") || host.startsWith("fc") || host.startsWith("fd")) return true;
   const v4 = host.match(/(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
-  if (v4) {
-    const a = Number(v4[1]);
-    const b = Number(v4[2]);
-    if (a === 127 || a === 10 || a === 0) return true;
-    if (a === 169 && b === 254) return true;
-    if (a === 172 && b >= 16 && b <= 31) return true;
-    if (a === 192 && b === 168) return true;
+  if (v4 && isPrivateV4(Number(v4[1]), Number(v4[2]))) return true;
+  const mapped = host.match(/^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/);
+  if (mapped) {
+    const g1 = parseInt(mapped[1], 16);
+    const g2 = parseInt(mapped[2], 16);
+    if (isPrivateV4(g1 >> 8 & 255, g1 & 255)) return true;
   }
   return false;
 }
+function isPrivateV4(a, b) {
+  if (a === 127 || a === 10 || a === 0) return true;
+  if (a === 169 && b === 254) return true;
+  if (a === 172 && b >= 16 && b <= 31) return true;
+  if (a === 192 && b === 168) return true;
+  return false;
+}
+function ruleAppliesTo(when, resolver) {
+  try {
+    if (when.method) {
+      const methods = (Array.isArray(when.method) ? when.method : [when.method]).map((m) => String(m).toUpperCase());
+      const actual = String(resolver.resolve("server.REQUEST_METHOD")[0] ?? "GET").toUpperCase();
+      if (!methods.includes(actual)) return false;
+    }
+    if (when.path) {
+      const uri = String(resolver.resolve("server.REQUEST_URI")[0] ?? "/");
+      if (!pathMatches(String(when.path), uri.split("?")[0])) return false;
+    }
+    return true;
+  } catch {
+    return true;
+  }
+}
+function pathMatches(pattern, path) {
+  if (pattern.length > 2 && pattern.startsWith("/") && pattern.endsWith("/")) {
+    const re = safeRegExp(pattern);
+    return re ? re.test(path) : false;
+  }
+  if (pattern.includes("*")) {
+    const re = safeRegExp("/^" + pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, "[^?]*") + "$/");
+    return re ? re.test(path) : false;
+  }
+  return path === pattern;
+}
+function isCrossOrigin(resolver) {
+  try {
+    const host = String(resolver.resolve("server.HTTP_HOST")[0] ?? "").toLowerCase();
+    if (!host) return false;
+    const src = resolver.resolve("server.HTTP_ORIGIN")[0] ?? resolver.resolve("server.HTTP_REFERER")[0];
+    if (!src) return false;
+    const srcHost = hostFromUrl(String(src));
+    return srcHost !== null && srcHost !== host;
+  } catch {
+    return false;
+  }
+}
+function hostFromUrl(value) {
+  try {
+    return new URL(value).host.toLowerCase();
+  } catch {
+    return null;
+  }
+}
 function matchValue(type, value, matchVal, matchObj) {
   if (value === null || value === void 0) {
     if (type === "isset") {
@@ -734,18 +794,19 @@ function matchValue(type, value, matchVal, matchObj) {
     case "isset":
       return true;
     case "in_array": {
-      const arr = Array.isArray(matchVal) ? matchVal : [matchVal];
+      const arr = (Array.isArray(matchVal) ? matchVal : [matchVal]).map((x) => String(x));
       return arr.includes(strValue);
     }
     case "not_in_array": {
-      const arr = Array.isArray(matchVal) ? matchVal : [matchVal];
+      const arr = (Array.isArray(matchVal) ? matchVal : [matchVal]).map((x) => String(x));
       return !arr.includes(strValue);
     }
     case "array_in_array": {
       if (!Array.isArray(value) || !Array.isArray(matchVal)) {
         return false;
       }
-      return value.some((v) => matchVal.includes(v));
+      const target = matchVal.map((x) => String(x));
+      return value.some((v) => target.includes(String(v)));
     }
     case "hostname": {
       try {
@@ -822,6 +883,9 @@ var RuleEngine = class {
     }
     for (const rule of this.#rules) {
       try {
+        if (rule.when && !ruleAppliesTo(rule.when, resolver)) {
+          continue;
+        }
         const conditions = rule.rule_v2;
         if (!Array.isArray(conditions) || conditions.length === 0) {
           continue;
@@ -868,6 +932,9 @@ var RuleEngine = class {
     if (parameter === "rules" && Array.isArray(condition.rules)) {
       return this.#evaluateRule(condition.rules, resolver);
     }
+    if (match && match.type === "cross_origin") {
+      return isCrossOrigin(resolver);
+    }
     const params = Array.isArray(parameter) ? parameter : [parameter];
     const values = params.flatMap((p) => resolver.resolve(p));
     if (values.length === 0) {
@@ -932,7 +999,7 @@ var PulseRuleClient = class {
   constructor({ siteUuid, baseUrl, cacheTtl, etag } = {}) {
     this.#siteUuid = siteUuid ?? process.env.PATCHSTACK_SITE_UUID;
     this.#baseUrl = baseUrl ?? process.env.PATCHSTACK_PULSE_RULES_URL ?? DEFAULT_BASE_URL2;
-    this.#cacheTtl = cacheTtl ?? DEFAULT_CACHE_TTL2;
+    this.#cacheTtl = Number.isFinite(cacheTtl) && cacheTtl > 0 ? cacheTtl : DEFAULT_CACHE_TTL2;
     this.#etag = etag ?? null;
     if (!this.#siteUuid) {
       throw new Error("Patchstack site UUID is required. Pass { siteUuid } or set PATCHSTACK_SITE_UUID.");
@@ -956,11 +1023,14 @@ var PulseRuleClient = class {
         return { success: false, error: `API returned ${response.status}`, firewall: [], whitelists: [], whitelist_keys: {} };
       }
       const data = await response.json();
+      if (!data || !Array.isArray(data.firewall)) {
+        return { success: false, error: "unexpected response shape (no firewall array)", firewall: [], whitelists: [], whitelist_keys: {} };
+      }
       const result = {
         success: true,
         notModified: false,
         etag: response.headers?.get?.("etag") ?? null,
-        firewall: Array.isArray(data.firewall) ? data.firewall : [],
+        firewall: data.firewall,
         whitelists: Array.isArray(data.whitelists) ? data.whitelists : [],
         whitelist_keys: data.whitelist_keys ?? {}
       };
@@ -1062,6 +1132,29 @@ async function readCappedText(request, max) {
   } catch {
     return "";
   }
+  const body = clone.body;
+  if (body && typeof body.getReader === "function") {
+    const reader = body.getReader();
+    const chunks = [];
+    let buffered = 0;
+    try {
+      for (; ; ) {
+        const { done, value } = await reader.read();
+        if (done) break;
+        if (!value || buffered >= max) continue;
+        const take = Math.min(value.byteLength, max - buffered);
+        chunks.push(take === value.byteLength ? value : value.subarray(0, take));
+        buffered += take;
+      }
+    } catch {
+      return "";
+    }
+    try {
+      return new TextDecoder().decode(concatChunks(chunks, buffered));
+    } catch {
+      return "";
+    }
+  }
   try {
     const text = await clone.text();
     return text.length > max ? text.slice(0, max) : text;
@@ -1069,6 +1162,15 @@ async function readCappedText(request, max) {
     return "";
   }
 }
+function concatChunks(chunks, total) {
+  const out = new Uint8Array(total);
+  let offset = 0;
+  for (const c of chunks) {
+    out.set(c, offset);
+    offset += c.byteLength;
+  }
+  return out;
+}
 function parseMultipart(rawBody, boundary) {
   const body = {};
   const files = {};
@@ -1113,7 +1215,16 @@ function fromNodeRequest(req, rawBody = "") {
     headers[key.toLowerCase()] = Array.isArray(value) ? value.join(", ") : value;
   }
   const host = headers.host || "localhost";
-  const url = new URL(req.url || "/", `http://${host}`);
+  let url;
+  try {
+    url = new URL(req.url || "/", `http://${host}`);
+  } catch {
+    try {
+      url = new URL(req.url || "/", "http://localhost");
+    } catch {
+      url = new URL("http://localhost/");
+    }
+  }
   const query = {};
   for (const [key, value] of url.searchParams) {
     if (key in query) {
@@ -1124,6 +1235,7 @@ function fromNodeRequest(req, rawBody = "") {
   }
   const contentType = headers["content-type"] || "";
   let body = {};
+  let files;
   if (rawBody) {
     if (contentType.includes("application/json")) {
       try {
@@ -1136,6 +1248,13 @@ function fromNodeRequest(req, rawBody = "") {
       for (const [k, v] of new URLSearchParams(rawBody)) {
         body[k] = k in body ? [].concat(body[k], v) : v;
       }
+    } else if (contentType.includes("multipart/form-data")) {
+      const boundary = /boundary=("?)([^";]+)\1/i.exec(contentType)?.[2];
+      if (boundary) {
+        const parsed = parseMultipart(rawBody, boundary);
+        body = parsed.body;
+        files = parsed.files;
+      }
     }
   }
   const uri = url.pathname + url.search;
@@ -1146,6 +1265,7 @@ function fromNodeRequest(req, rawBody = "") {
     originalUrl: uri,
     query,
     body,
+    files,
     headers,
     ip: forwarded.split(",")[0].trim() || req.socket && req.socket.remoteAddress || "",
     cookies: parseCookies2(headers.cookie),
@@ -1169,15 +1289,43 @@ function parseCookies2(header) {
 }
 
 // src/protect/egress.js
-async function installEgressGuard({ shouldBlock, onBlock } = {}) {
+async function installEgressGuard({ shouldBlock, onBlock, dnsScreen = true, lookup, allowHosts } = {}) {
   const restores = [];
   if (typeof shouldBlock !== "function") return () => {
   };
+  const exempt = new Set((allowHosts ?? []).map((h) => String(h).toLowerCase()));
   const block = (url, host, method) => {
     if (!shouldBlock(url, host, method)) return false;
     onBlock?.({ url, host, method });
     return true;
   };
+  let screen = null;
+  if (dnsScreen) {
+    try {
+      const resolveLookup = lookup ?? (await import("dns")).lookup;
+      const { isIP } = await import("net");
+      if (typeof resolveLookup === "function" && typeof isIP === "function") {
+        screen = { lookup: resolveLookup, isIP, isExempt: (h) => exempt.has(String(h).toLowerCase()) };
+      }
+    } catch {
+      screen = null;
+    }
+  }
+  const resolvesToDisallowed = (url, host, method) => new Promise((resolve) => {
+    if (!screen || !host || screen.isIP(host) !== 0 || screen.isExempt(host)) return resolve(false);
+    try {
+      screen.lookup(host, { all: true }, (err, addresses) => {
+        if (err || !Array.isArray(addresses)) return resolve(false);
+        for (const a of addresses) {
+          const ip = a && typeof a === "object" ? a.address : a;
+          if (ip && block(url, ip, method)) return resolve(true);
+        }
+        resolve(false);
+      });
+    } catch {
+      resolve(false);
+    }
+  });
   const originalFetch = globalThis.fetch;
   if (typeof originalFetch === "function" && !originalFetch.__patchstackGuarded) {
     const guarded = async (input, init) => {
@@ -1189,7 +1337,7 @@ async function installEgressGuard({ shouldBlock, onBlock } = {}) {
         host = null;
       }
       const method = init && init.method || input && input.method || "GET";
-      if (block(url, host, method)) {
+      if (block(url, host, method) || await resolvesToDisallowed(url, host, method)) {
         throw new Error(`Patchstack blocked an outbound request to a disallowed address: ${host ?? url}`);
       }
       return originalFetch(input, init);
@@ -1203,7 +1351,7 @@ async function installEgressGuard({ shouldBlock, onBlock } = {}) {
   for (const moduleName of ["node:http", "node:https"]) {
     try {
       const mod = await import(moduleName);
-      const restore = patchHttpModule(mod.default ?? mod, block);
+      const restore = patchHttpModule(mod.default ?? mod, block, screen);
       if (restore) restores.push(restore);
     } catch {
     }
@@ -1241,7 +1389,7 @@ async function installEgressGuard({ shouldBlock, onBlock } = {}) {
     }
   };
 }
-function patchHttpModule(http, block) {
+function patchHttpModule(http, block, screen) {
   if (!http || typeof http.request !== "function" || http.__patchstackGuarded) return null;
   const originalRequest = http.request;
   const originalGet = http.get;
@@ -1250,14 +1398,25 @@ function patchHttpModule(http, block) {
     if (target && block(target.url, target.host, target.method)) {
       throw new Error(`Patchstack blocked an outbound request to a disallowed address: ${target.host ?? target.url}`);
     }
+    if (target && screen && target.host && screen.isIP(target.host) === 0 && !screen.isExempt(target.host)) {
+      try {
+        args = withScreeningLookup(args, target, block, screen.lookup);
+      } catch {
+      }
+    }
     return original.apply(this, args);
   };
-  http.request = wrap(originalRequest);
-  if (typeof originalGet === "function") http.get = wrap(originalGet);
+  const guardedRequest = wrap(originalRequest);
+  http.request = guardedRequest;
+  let guardedGet;
+  if (typeof originalGet === "function") {
+    guardedGet = wrap(originalGet);
+    http.get = guardedGet;
+  }
   http.__patchstackGuarded = true;
   return () => {
-    http.request = originalRequest;
-    if (typeof originalGet === "function") http.get = originalGet;
+    if (http.request === guardedRequest) http.request = originalRequest;
+    if (guardedGet && http.get === guardedGet) http.get = originalGet;
     delete http.__patchstackGuarded;
   };
 }
@@ -1270,7 +1429,7 @@ function extractHttpTarget(args) {
       return { url: url.href, host: url.hostname, method: opts && opts.method || "GET" };
     }
     if (first && typeof first === "object") {
-      const host = normalizeHost(first.hostname || first.host);
+      const host = normalizeHost(first.hostname || first.host) || "localhost";
       const protocol = first.protocol || "http:";
       const port = first.port ? `:${first.port}` : "";
       const path = first.path || "/";
@@ -1287,6 +1446,61 @@ function normalizeHost(raw) {
   if ((host.match(/:/g) || []).length > 1) return host;
   return host.split(":")[0];
 }
+function screenResolved(addresses, target, block) {
+  for (const a of addresses || []) {
+    const ip = a && typeof a === "object" ? a.address : a;
+    if (ip && block(target.url, ip, target.method)) return ip;
+  }
+  return null;
+}
+function withScreeningLookup(args, target, block, lookup) {
+  const screeningLookup = (hostname, options, callback) => {
+    let opts = options;
+    let cb = callback;
+    if (typeof opts === "function") {
+      cb = opts;
+      opts = {};
+    }
+    if (!opts || typeof opts !== "object") opts = {};
+    try {
+      lookup(hostname, { ...opts, all: true }, (err, addresses) => {
+        if (err) return cb(err);
+        const list = Array.isArray(addresses) ? addresses : [];
+        const blocked = screenResolved(list, target, block);
+        if (blocked) {
+          return cb(new Error(`Patchstack blocked an outbound request to a disallowed address: ${target.host} resolved to ${blocked}`));
+        }
+        if (opts.all) return cb(null, list);
+        const first = list[0];
+        if (!first) return cb(new Error(`Patchstack: could not resolve ${hostname}`));
+        return cb(null, first.address, first.family);
+      });
+    } catch {
+      try {
+        lookup(hostname, opts, cb);
+      } catch {
+        cb(new Error(`Patchstack: lookup failed for ${hostname}`));
+      }
+    }
+  };
+  return injectLookupOption(args, screeningLookup);
+}
+function injectLookupOption(args, lookup) {
+  const first = args[0];
+  if (first && typeof first === "object" && !(first instanceof URL)) {
+    return [{ ...first, lookup }, ...args.slice(1)];
+  }
+  const rest = args.slice(1);
+  const optIdx = rest.findIndex((a) => a && typeof a === "object" && !(a instanceof URL));
+  if (optIdx !== -1) {
+    const next = [...rest];
+    next[optIdx] = { ...rest[optIdx], lookup };
+    return [first, ...next];
+  }
+  const cbIdx = rest.findIndex((a) => typeof a === "function");
+  if (cbIdx === -1) return [first, { lookup }, ...rest];
+  return [first, ...rest.slice(0, cbIdx), { lookup }, ...rest.slice(cbIdx)];
+}
 
 // src/protect/defaults.js
 var DEFAULT_RESPONSE_RULES = [
@@ -1530,22 +1744,33 @@ async function createProtection(options = {}) {
   const onError = options.onError;
   const onDetect = options.onDetect ?? defaultOnDetect;
   const bundle = await resolveRules(options);
-  const incoming = bundle.firewall ?? [];
-  const requestRules = byPhase(incoming, "request");
-  const responseRules = [...options.responseRules ?? DEFAULT_RESPONSE_RULES, ...byPhase(incoming, "response")];
-  const egressRules = [...options.egressRules ?? DEFAULT_EGRESS_RULES, ...byPhase(incoming, "egress")];
-  const engine = new RuleEngine({
-    firewall: requestRules,
-    whitelists: bundle.whitelists,
-    whitelist_keys: bundle.whitelist_keys,
-    onError
-  });
-  const responseRuleSet = responseRules.map((rule) => ({
-    rule,
-    engine: new RuleEngine({ firewall: [rule], onError }),
-    redactors: rule.action === "redact" ? extractRedactors(rule) : null
-  }));
-  const egressEngine = new RuleEngine({ firewall: egressRules, onError });
+  let requestRules;
+  let responseRules;
+  let egressRules;
+  let screenCap;
+  let engine;
+  let responseRuleSet;
+  let egressEngine;
+  const applyBundle = (delivered) => {
+    const incoming = delivered.firewall ?? [];
+    requestRules = byPhase(incoming, "request");
+    responseRules = [...options.responseRules ?? DEFAULT_RESPONSE_RULES, ...byPhase(incoming, "response")];
+    screenCap = responseScreenCap(responseRules);
+    egressRules = [...options.egressRules ?? DEFAULT_EGRESS_RULES, ...byPhase(incoming, "egress")];
+    engine = new RuleEngine({
+      firewall: requestRules,
+      whitelists: delivered.whitelists,
+      whitelist_keys: delivered.whitelist_keys,
+      onError
+    });
+    responseRuleSet = responseRules.map((rule) => ({
+      rule,
+      engine: new RuleEngine({ firewall: [rule], onError }),
+      redactors: rule.action === "redact" || rule.action === "encode" ? extractRedactors(rule) : null
+    }));
+    egressEngine = new RuleEngine({ firewall: egressRules, onError });
+  };
+  applyBundle(bundle);
   const maskFn = typeof options.maskWith === "function" ? options.maskWith : () => typeof options.maskWith === "string" ? options.maskWith : "[REDACTED]";
   const decide = (phase, result, block, allow2) => {
     if (!result || !result.blocked) return allow2();
@@ -1579,20 +1804,26 @@ async function createProtection(options = {}) {
     const headers = { ...meta.headers || {} };
     for (const { rule, redactors } of redactions) {
       const mask = maskFn(rule.category);
-      body = applyRedactors(body, redactors, mask);
+      const transform = rule.action === "encode" ? htmlEscape : null;
+      const pathRedactors = redactors.filter((r) => r.jsonPath);
+      const spanRedactors = redactors.filter((r) => !r.jsonPath);
+      if (pathRedactors.length) body = applyPathRedactors(body, pathRedactors, mask, screenCap, transform);
+      if (!spanRedactors.length) continue;
+      body = applyRedactors(body, spanRedactors, mask, transform);
+      if (transform) continue;
       for (const name of Object.keys(headers)) {
         const value = headers[name];
         if (typeof value === "string") {
-          headers[name] = applyRedactors(value, redactors, mask);
+          headers[name] = applyRedactors(value, spanRedactors, mask);
         } else if (Array.isArray(value)) {
-          headers[name] = value.map((item) => typeof item === "string" ? applyRedactors(item, redactors, mask) : item);
+          headers[name] = value.map((item) => typeof item === "string" ? applyRedactors(item, spanRedactors, mask) : item);
         }
       }
     }
     return { verdict: "redact", body, headers };
   };
   const screenResp = async (response) => {
-    const text = await readTextResponse(response);
+    const text = await readTextResponse(response, screenCap);
     if (text == null) return response;
     const r = screenText(text, { status: response.status, headers: headerObject(response.headers) });
     if (r.verdict === "block") return leakResponse();
@@ -1605,12 +1836,15 @@ async function createProtection(options = {}) {
     const chunks = [];
     let size = 0;
     let overflow = false;
-    const MAX = 512 * 1024;
+    const MAX = screenCap;
     const collect = (chunk, enc) => {
       if (chunk == null) return;
       const buf = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk, typeof enc === "string" ? enc : "utf8");
       size += buf.length;
       if (size > MAX) {
+        for (const c of chunks) origWrite(c);
+        chunks.length = 0;
+        origWrite(buf);
         overflow = true;
         return;
       }
@@ -1637,6 +1871,7 @@ async function createProtection(options = {}) {
         return origEnd(cb);
       }
       collect(chunk, enc);
+      if (overflow) return origEnd(cb);
       const text = Buffer.concat(chunks).toString("utf8");
       let ct = res.getHeader ? res.getHeader("content-type") : void 0;
       if (Array.isArray(ct)) ct = ct[0];
@@ -1668,6 +1903,7 @@ async function createProtection(options = {}) {
         if (r.headers && res.setHeader) {
           const current = res.getHeaders ? res.getHeaders() : {};
           for (const [name, value] of Object.entries(r.headers)) {
+            if (name.toLowerCase() === "content-length") continue;
             if (Array.isArray(value)) {
               try {
                 res.setHeader(name, value);
@@ -1703,7 +1939,9 @@ async function createProtection(options = {}) {
   };
   const protection = {
     mode,
-    rules: { request: requestRules, response: responseRules, egress: egressRules },
+    get rules() {
+      return { request: requestRules, response: responseRules, egress: egressRules };
+    },
     // Screen a fetch Response through the response-phase rules (redact/block). Used by
     // .fetch(), and by the Supabase guard on its forwarded upstream response.
     screenResponse: (response) => screenResp(response),
@@ -1814,27 +2052,101 @@ async function createProtection(options = {}) {
     }
   };
   if (options.egress) {
-    protection.uninstallEgress = await installEgressGuard({ shouldBlock: egressShouldBlock, onBlock: options.onEgressBlock });
+    protection.uninstallEgress = await installEgressGuard({
+      shouldBlock: egressShouldBlock,
+      onBlock: options.onEgressBlock,
+      dnsScreen: options.screenDns !== false,
+      allowHosts: options.allowHosts
+    });
+  }
+  if (options.refreshMs > 0 && (options.siteUuid || options.token)) {
+    const cwd = options.cwd ?? (typeof process !== "undefined" ? process.cwd() : void 0);
+    let reportManifest = null;
+    if (options.siteUuid && options.reportManifest !== false && cwd) {
+      try {
+        ({ reportManifest } = await import("./refresh-manifest-XBOGN446.js"));
+      } catch (err) {
+        onError?.(err);
+      }
+    }
+    const timer = setInterval(() => {
+      (async () => {
+        if (reportManifest) {
+          try {
+            await reportManifest(cwd);
+          } catch (err) {
+            onError?.(err);
+          }
+        }
+        applyBundle(await resolveRules(options));
+      })().catch((err) => onError?.(err));
+    }, options.refreshMs);
+    timer.unref?.();
+    protection.stopRefresh = () => clearInterval(timer);
   }
   return protection;
 }
 function byPhase(rules, phase) {
   return (rules ?? []).filter((r) => (r.phase ?? "request") === phase);
 }
-async function readTextResponse(response) {
+async function readTextResponse(response, cap = DEFAULT_SCREEN_CAP) {
   if (!response || typeof response.clone !== "function") return null;
   const ct = (response.headers?.get?.("content-type") || "").toLowerCase();
   const isText = ct === "" || /(json|text|xml|html|javascript|csv|yaml|x-www-form-urlencoded)/.test(ct);
   if (!isText) return null;
   const len = Number(response.headers?.get?.("content-length") || 0);
-  if (len && len > 512 * 1024) return null;
+  if (len && len > cap) return null;
+  let clone;
   try {
-    const text = await response.clone().text();
-    return text.length > 512 * 1024 ? null : text;
+    clone = response.clone();
+  } catch {
+    return null;
+  }
+  const body = clone.body;
+  if (body && typeof body.getReader === "function") {
+    const reader = body.getReader();
+    const chunks = [];
+    let size = 0;
+    let over = false;
+    try {
+      for (; ; ) {
+        const { done, value } = await reader.read();
+        if (done) break;
+        if (!value) continue;
+        size += value.byteLength;
+        if (over) continue;
+        if (size > cap) {
+          over = true;
+          continue;
+        }
+        chunks.push(value);
+      }
+    } catch {
+      return null;
+    }
+    if (over) return null;
+    try {
+      return new TextDecoder().decode(concatBytes(chunks, size));
+    } catch {
+      return null;
+    }
+  }
+  try {
+    const text = await clone.text();
+    return text.length > cap ? null : text;
   } catch {
     return null;
   }
 }
+function concatBytes(chunks, total) {
+  const out = new Uint8Array(total);
+  let offset = 0;
+  for (const c of chunks) {
+    out.set(c, offset);
+    offset += c.byteLength;
+  }
+  return out;
+}
 function headerObject(headers) {
   const out = {};
   headers?.forEach?.((v, k) => {
@@ -1852,30 +2164,137 @@ function extractRedactors(rule) {
       const m = c.match;
       if (!m) continue;
       if (m.type === "regex" && typeof m.value === "string") {
-        const parsed = m.value.match(/^\/(.+)\/([a-z]*)$/is);
-        if (parsed) {
-          const flags = parsed[2].includes("g") ? parsed[2] : parsed[2] + "g";
+        const safe = safeRegExp(m.value);
+        if (safe) {
+          const flags = safe.flags.includes("g") ? safe.flags : safe.flags + "g";
           try {
-            out.push({ re: new RegExp(parsed[1], flags) });
+            out.push({ re: new RegExp(safe.source, flags) });
           } catch {
           }
         }
       } else if ((m.type === "contains" || m.type === "stripos") && m.value != null) {
         out.push({ literal: String(m.value) });
+      } else if (m.type === "array_key_value" && m.match && isBodyParam(c.parameter)) {
+        const keys = Array.isArray(m.key) ? m.key : [m.key];
+        for (const key of keys) {
+          out.push({ jsonPath: String(key).split("."), condition: m.match });
+        }
       }
     }
   };
   walk(rule.rule_v2);
   return out;
 }
-function applyRedactors(body, redactors, mask) {
+function htmlEscape(str) {
+  return String(str).replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
+}
+function applyRedactors(body, redactors, mask, transform) {
   let out = body;
   for (const r of redactors) {
-    if (r.re) out = out.replace(r.re, mask);
-    else if (r.literal) out = out.split(r.literal).join(mask);
+    if (r.re) out = out.replace(r.re, transform ? (m) => transform(m) : mask);
+    else if (r.literal) out = out.split(r.literal).join(transform ? transform(r.literal) : mask);
   }
   return out;
 }
+function isBodyParam(parameter) {
+  return parameter == null || parameter === "response.body" || parameter === "raw" || parameter === "response.raw";
+}
+function conditionPredicate(condition) {
+  if (!condition || !condition.type) return () => true;
+  return (value) => {
+    try {
+      return matchValue(condition.type, value, condition.value, condition);
+    } catch {
+      return false;
+    }
+  };
+}
+var DEFAULT_SCREEN_CAP = 512 * 1024;
+function responseScreenCap(rules) {
+  let cap = DEFAULT_SCREEN_CAP;
+  for (const r of rules ?? []) {
+    if (r && r.bypass_limit === true) return Infinity;
+    const n = Number(r && r.max_bytes);
+    if (Number.isFinite(n) && n > cap) cap = n;
+  }
+  return cap;
+}
+function applyPathRedactors(text, pathRedactors, mask, cap, transform) {
+  if (!pathRedactors.length || typeof text !== "string" || text.length > cap) return text;
+  const head = text.trimStart()[0];
+  if (head !== "{" && head !== "[") return text;
+  const preserved = preserveBigInts(text);
+  let obj;
+  try {
+    obj = JSON.parse(preserved);
+  } catch {
+    return text;
+  }
+  let changed = false;
+  for (const r of pathRedactors) {
+    const pred = conditionPredicate(r.condition);
+    walkLeaves(obj, r.jsonPath, (loc) => {
+      try {
+        if (pred(loc.value)) {
+          loc.parent[loc.key] = transform ? transform(String(loc.value)) : mask;
+          changed = true;
+        }
+      } catch {
+      }
+    });
+  }
+  return changed ? restoreBigInts(JSON.stringify(obj)) : text;
+}
+var BIGINT_OPEN = "__PSBIGINT_9c2f__";
+var BIGINT_CLOSE = "__DNEGIB__";
+function preserveBigInts(text) {
+  let out = "";
+  let inStr = false;
+  for (let i = 0; i < text.length; ) {
+    const ch = text[i];
+    if (inStr) {
+      out += ch;
+      if (ch === "\\") {
+        out += text[i + 1] ?? "";
+        i += 2;
+        continue;
+      }
+      if (ch === '"') inStr = false;
+      i++;
+      continue;
+    }
+    if (ch === '"') {
+      inStr = true;
+      out += ch;
+      i++;
+      continue;
+    }
+    if (ch === "-" || ch >= "0" && ch <= "9") {
+      let j = ch === "-" ? i + 1 : i;
+      let digits = 0;
+      while (j < text.length && text[j] >= "0" && text[j] <= "9") {
+        digits++;
+        j++;
+      }
+      const next = text[j];
+      const isIntToken = digits > 0 && next !== "." && next !== "e" && next !== "E";
+      if (isIntToken && digits >= 16) {
+        out += `"${BIGINT_OPEN}${text.slice(i, j)}${BIGINT_CLOSE}"`;
+      } else {
+        out += text.slice(i, j || i + 1);
+      }
+      i = j > i ? j : i + 1;
+      continue;
+    }
+    out += ch;
+    i++;
+  }
+  return out;
+}
+function restoreBigInts(text) {
+  if (!text.includes(BIGINT_OPEN)) return text;
+  return text.replace(new RegExp(`"${BIGINT_OPEN}(-?\\d+)${BIGINT_CLOSE}"`, "g"), "$1");
+}
 function rebuildResponse(response, body, redactedHeaders) {
   const headers = new Headers(response.headers);
   headers.delete("content-length");