@patchstack/connect 0.3.19 → 0.3.21

package/dist/protect.d.ts

@@ -23,6 +23,13 @@ export interface Protection {
   node(options?: { maxBodyBytes?: number; screenResponses?: boolean }): (req: unknown, res: unknown, next: () => void) => void;
   /** Present when `egress: true` — restores the original global fetch. */
   uninstallEgress?: () => void;
+  /** Present with a live source — re-fetch + hot-swap the rules once (used by the loop + push). */
+  refresh?: () => Promise<void>;
+  /** Present with a live source — a fetch handler that runs `refresh()` when the request carries
+   *  the configured refresh secret (a push/zero-day trigger). No secret set → the handler 404s. */
+  refreshHandler?: () => (request: Request) => Promise<Response>;
+  /** Present when `refreshMs > 0` — stops the live rule-refresh loop. */
+  stopRefresh?: () => void;
 }
 
 export interface CreateProtectionOptions {
@@ -37,6 +44,28 @@ export interface CreateProtectionOptions {
   siteUuid?: string;
   /** Override the Pulse rules API base URL. */
   pulseRulesUrl?: string;
+  /**
+   * Re-fetch and hot-swap the live rules every N ms. For long-lived runtimes that aren't restarted
+   * on change (an AI builder's sandbox/preview) so a rule that becomes relevant after boot still
+   * applies. Default 0 (off) — a real deploy restarts the process, which re-fetches anyway. Only
+   * meaningful with a live source (`siteUuid`/`token`).
+   */
+  refreshMs?: number;
+  /**
+   * Shared secret gating the push refresh endpoint (`refreshHandler()`): the platform/SaaS hits the
+   * endpoint with this secret to trigger an immediate refresh. Falls back to `PATCHSTACK_REFRESH_SECRET`.
+   * Unset → the endpoint 404s (never an open refresh trigger).
+   */
+  refreshSecret?: string;
+  /**
+   * During a refresh, also re-post the dependency manifest (the runtime counterpart to `scan`) so a
+   * dependency added after boot — e.g. via `npm install <pkg>`, which fires no npm lifecycle hook —
+   * is reported and enforced without a restart. Defaults on when a `siteUuid` is set; set false to
+   * refresh rules only. Only meaningful with `refreshMs > 0` and a Pulse `siteUuid`.
+   */
+  reportManifest?: boolean;
+  /** Directory the manifest re-scan reads the lockfile from during a refresh. Default process.cwd(). */
+  cwd?: string;
   /** Directory for the last-known-good rule cache (disk — the default cache backend). */
   cacheDir?: string;
   /**
@@ -55,6 +84,12 @@ export interface CreateProtectionOptions {
   egress?: boolean;
   /** Hosts exempt from egress screening. */
   allowHosts?: string[];
+  /**
+   * Screen the Node http/https path against DNS rebinding: resolve outbound hostnames and block +
+   * pin to the vetted address when they map to a disallowed (internal/metadata) IP. Default true;
+   * only active when `egress` is on and node:dns is available (a no-op on edge runtimes).
+   */
+  screenDns?: boolean;
   /** Redaction mask (string or per-category function). Default "[REDACTED]". */
   maskWith?: string | ((category?: string) => string);
   onError?: (err: unknown) => void;