@patchstack/connect 0.3.31 → 0.3.32

package/dist/protect.js

@@ -1,6 +1,221 @@
 import {
-  pulseAuthHeader
-} from "./chunk-LLKP5EJS.js";
+  pulseAuthHeader,
+  pulseFetch
+} from "./chunk-3G2I6QL6.js";
+
+// src/protect/client-ip.js
+var ZONE = /^[A-Za-z0-9._-]{1,64}$/;
+var POLICY_FIELDS = Object.freeze(["peers", "hops", "header", "isTrusted"]);
+var IP_SOURCES = Object.freeze(["runtime", "trusted-proxy", "unavailable"]);
+var DEFAULT_FORWARDED_HEADER = "x-forwarded-for";
+function parseIpv4(value) {
+  const parts = value.split(".");
+  if (parts.length !== 4) return null;
+  const octets = [];
+  for (const part of parts) {
+    if (!/^\d{1,3}$/.test(part)) return null;
+    if (part.length > 1 && part.startsWith("0")) return null;
+    const n = Number(part);
+    if (n > 255) return null;
+    octets.push(n);
+  }
+  return octets;
+}
+function parseIpv6(value) {
+  if (value === "" || value.includes(":::")) return null;
+  let head = value;
+  let embedded = null;
+  const lastColon = head.lastIndexOf(":");
+  const tail = lastColon === -1 ? "" : head.slice(lastColon + 1);
+  if (tail.includes(".")) {
+    embedded = parseIpv4(tail);
+    if (embedded === null) return null;
+    head = head.slice(0, lastColon + 1) + "0:0";
+  }
+  const halves = head.split("::");
+  if (halves.length > 2) return null;
+  const readGroups = (text) => {
+    if (text === "") return [];
+    const groups2 = [];
+    for (const g of text.split(":")) {
+      if (!/^[0-9a-fA-F]{1,4}$/.test(g)) return null;
+      groups2.push(Number.parseInt(g, 16));
+    }
+    return groups2;
+  };
+  const left = readGroups(halves[0]);
+  const right = halves.length === 2 ? readGroups(halves[1]) : [];
+  if (left === null || right === null) return null;
+  let groups;
+  if (halves.length === 2) {
+    const fill = 8 - (left.length + right.length);
+    if (fill < 1) return null;
+    groups = [...left, ...new Array(fill).fill(0), ...right];
+  } else {
+    groups = left;
+  }
+  if (groups.length !== 8) return null;
+  if (embedded !== null) {
+    groups[6] = embedded[0] << 8 | embedded[1];
+    groups[7] = embedded[2] << 8 | embedded[3];
+  }
+  return groups;
+}
+function toNumeric(value) {
+  const text = String(value).trim();
+  if (text === "") return null;
+  const zoneParts = text.split("%");
+  if (zoneParts.length > 2) return null;
+  const addr = zoneParts[0];
+  const zone = zoneParts.length === 2 ? zoneParts[1] : null;
+  if (zone !== null && (!ZONE.test(zone) || !addr.includes(":"))) return null;
+  const v4 = parseIpv4(addr);
+  if (v4 !== null) {
+    return {
+      bits: 32,
+      value: v4.reduce((acc, octet) => acc << 8n | BigInt(octet), 0n),
+      canonical: v4.join(".")
+    };
+  }
+  if (!addr.includes(":")) return null;
+  const v6 = parseIpv6(addr);
+  if (v6 === null) return null;
+  const mapped = v6.slice(0, 5).every((g) => g === 0) && v6[5] === 65535;
+  if (mapped) {
+    if (zone !== null) return null;
+    const octets = [v6[6] >> 8, v6[6] & 255, v6[7] >> 8, v6[7] & 255];
+    return { bits: 32, value: BigInt(v6[6]) << 16n | BigInt(v6[7]), canonical: octets.join(".") };
+  }
+  return {
+    bits: 128,
+    value: v6.reduce((acc, group) => acc << 16n | BigInt(group), 0n),
+    // The zone survives: without it a link-local address does not identify an interface.
+    canonical: zone === null ? canonicalIpv6(v6) : `${canonicalIpv6(v6)}%${zone}`
+  };
+}
+function canonicalIpv6(groups) {
+  let bestStart = -1;
+  let bestLength = 0;
+  let runStart = -1;
+  for (let i = 0; i <= groups.length; i++) {
+    if (i < groups.length && groups[i] === 0) {
+      if (runStart === -1) runStart = i;
+    } else if (runStart !== -1) {
+      const length = i - runStart;
+      if (length > bestLength) {
+        bestLength = length;
+        bestStart = runStart;
+      }
+      runStart = -1;
+    }
+  }
+  const hex = groups.map((g) => g.toString(16));
+  if (bestLength < 2) return hex.join(":");
+  const head = hex.slice(0, bestStart).join(":");
+  const tail = hex.slice(bestStart + bestLength).join(":");
+  return `${head}::${tail}`;
+}
+function canonicalIp(value) {
+  return toNumeric(value)?.canonical ?? null;
+}
+function parseCidr(entry) {
+  if (typeof entry !== "string") return null;
+  if (entry.includes("%")) return null;
+  const parts = entry.trim().split("/");
+  if (parts.length > 2) return null;
+  const numeric = toNumeric(parts[0]);
+  if (numeric === null) return null;
+  let length = numeric.bits;
+  if (parts.length === 2) {
+    if (!/^\d{1,3}$/.test(parts[1])) return null;
+    length = Number(parts[1]);
+    if (length > numeric.bits) return null;
+  }
+  const shift = BigInt(numeric.bits - length);
+  return { bits: numeric.bits, network: numeric.value >> shift, shift };
+}
+function readTrustPolicy(trustedProxy) {
+  if (trustedProxy === null || typeof trustedProxy !== "object" || Array.isArray(trustedProxy)) return null;
+  const has = (field) => Object.hasOwn(trustedProxy, field);
+  for (const key of Object.keys(trustedProxy)) {
+    if (!POLICY_FIELDS.includes(key)) return null;
+  }
+  if (has("header") && (typeof trustedProxy.header !== "string" || trustedProxy.header.trim() === "")) {
+    return null;
+  }
+  if (has("hops") && (!Number.isInteger(trustedProxy.hops) || trustedProxy.hops < 1)) return null;
+  if (has("isTrusted") && typeof trustedProxy.isTrusted !== "function") return null;
+  const header = has("header") ? trustedProxy.header.trim().toLowerCase() : DEFAULT_FORWARDED_HEADER;
+  const cidrs = [];
+  if (has("peers")) {
+    if (!Array.isArray(trustedProxy.peers) || trustedProxy.peers.length === 0) return null;
+    for (const entry of trustedProxy.peers) {
+      const parsed = parseCidr(entry);
+      if (parsed === null) return null;
+      cidrs.push(parsed);
+    }
+  }
+  const hops = has("hops") ? trustedProxy.hops : null;
+  const predicate = has("isTrusted") ? trustedProxy.isTrusted : null;
+  if (cidrs.length === 0 && hops === null && predicate === null) return null;
+  return { header, cidrs, hops, predicate };
+}
+function isTrustedPeer(policy, value) {
+  const numeric = toNumeric(value);
+  if (numeric === null) return false;
+  for (const cidr of policy.cidrs) {
+    if (cidr.bits === numeric.bits && numeric.value >> cidr.shift === cidr.network) return true;
+  }
+  if (policy.predicate !== null) {
+    try {
+      if (policy.predicate(String(value)) === true) return true;
+    } catch {
+      return false;
+    }
+  }
+  return false;
+}
+var UNSPECIFIED = /* @__PURE__ */ new Set(["0.0.0.0", "::"]);
+function identifyingIp(value) {
+  const canonical = canonicalIp(value);
+  return canonical === null || UNSPECIFIED.has(canonical) ? null : canonical;
+}
+function chainFrom(headers, header) {
+  if (headers === null || typeof headers !== "object" || !Object.hasOwn(headers, header)) return [];
+  const raw = headers[header];
+  const value = Array.isArray(raw) ? raw.join(",") : raw;
+  if (typeof value !== "string" || value.trim() === "") return [];
+  return value.split(",").map((entry) => entry.trim()).filter((entry) => entry !== "");
+}
+function resolveClientIp(input) {
+  const headers = input.headers ?? {};
+  const peer = identifyingIp(input.peer);
+  const policy = readTrustPolicy(input.trustedProxy);
+  if (peer === null) return { ip: null, source: "unavailable" };
+  if (policy === null) return { ip: peer, source: "runtime" };
+  const gatedByAddress = policy.cidrs.length > 0 || policy.predicate !== null;
+  const peerTrusted = gatedByAddress ? isTrustedPeer(policy, peer) : policy.hops !== null;
+  if (!peerTrusted) return { ip: peer, source: "runtime" };
+  const chain = chainFrom(headers, policy.header);
+  if (chain.length === 0) return { ip: peer, source: "runtime" };
+  if (policy.hops !== null) {
+    const index = chain.length - policy.hops;
+    const candidate = index >= 0 ? chain[index] : void 0;
+    const canonical = identifyingIp(candidate);
+    return canonical === null ? { ip: peer, source: "runtime" } : { ip: canonical, source: "trusted-proxy" };
+  }
+  for (let i = chain.length - 1; i >= 0; i--) {
+    const canonical = identifyingIp(chain[i]);
+    if (canonical === null) return { ip: peer, source: "runtime" };
+    if (!isTrustedPeer(policy, canonical)) return { ip: canonical, source: "trusted-proxy" };
+  }
+  return { ip: peer, source: "runtime" };
+}
+function clientIpFields(resolved) {
+  const established = resolved?.source === "runtime" || resolved?.source === "trusted-proxy";
+  const address = identifyingIp(resolved?.ip);
+  return established && address !== null ? { client_ip: address, client_ip_source: resolved.source } : { client_ip_source: "unavailable" };
+}
 
 // src/protect/safe-origin.js
 function isSafeOrigin(value) {
@@ -358,7 +573,7 @@ var RequestResolver = class {
         return req.headers?.host ? [req.headers.host] : [];
       case "REMOTE_ADDR":
       case "ip":
-        return [req.ip ?? req.socket?.remoteAddress ?? ""];
+        return [typeof req.ip === "string" ? req.ip : ""];
       case "CONTENT_TYPE":
         return req.headers?.["content-type"] ? [req.headers["content-type"]] : [];
       case "CONTENT_LENGTH":
@@ -699,14 +914,29 @@ function serializeForRawDetection(body, visited = /* @__PURE__ */ new Set(), isR
   });
   return "{" + parts.join(",") + "}";
 }
+var INHERITED_ACCESSORS = /* @__PURE__ */ new Set(["headers", "query"]);
+function requestField(req, key) {
+  if (req === null || typeof req !== "object") return void 0;
+  if (Object.hasOwn(req, key)) return req[key];
+  if (!INHERITED_ACCESSORS.has(key)) return void 0;
+  let holder = Object.getPrototypeOf(req);
+  while (holder !== null && !Object.hasOwn(holder, key)) holder = Object.getPrototypeOf(holder);
+  if (holder === null || holder === Object.prototype) return void 0;
+  const descriptor = Object.getOwnPropertyDescriptor(holder, key);
+  if (typeof descriptor?.get !== "function") return void 0;
+  return req[key];
+}
 function normalizeRequest(req, options = {}) {
-  const rawBody = typeof req._rawBody === "string" ? req._rawBody : serializeForRawDetection(req.body ?? null);
+  const ownRaw = Object.hasOwn(req ?? {}, "_rawBody") && typeof req._rawBody === "string";
+  const body = requestField(req, "body");
+  const url = requestField(req, "url");
+  const rawBody = ownRaw ? req._rawBody : serializeForRawDetection(body ?? null);
   return {
-    query: normalizeObject(req.query || {}, options),
-    body: normalizeObject(req.body || {}, options),
-    headers: normalizeObject(req.headers || {}, options),
-    url: normalize(req.url || "", options),
-    originalUrl: normalize(req.originalUrl || req.url || "", options),
+    query: normalizeObject(requestField(req, "query") || {}, options),
+    body: normalizeObject(body || {}, options),
+    headers: normalizeObject(requestField(req, "headers") || {}, options),
+    url: normalize(url || "", options),
+    originalUrl: normalize(requestField(req, "originalUrl") || url || "", options),
     _rawBody: rawBody
   };
 }
@@ -1268,7 +1498,12 @@ var RuleEngine = class {
           return {
             blocked: true,
             rule,
-            message: rule.message ?? `Blocked by Patchstack WAF rule: ${rule.title ?? rule.id}`
+            message: rule.message ?? `Blocked by Patchstack WAF rule: ${rule.title ?? rule.id}`,
+            // The resolver this match was decided by, for whatever needs to report on it. A consumer
+            // that re-read the request instead would be reading it a second time: a getter, a stream or
+            // anything else that answers once can give a different value, and evidence that disagrees
+            // with the match it belongs to is worse than none.
+            resolver
           };
         }
       } catch (err) {
@@ -1363,1396 +1598,1624 @@ var RuleEngine = class {
   }
 };
 
-// src/protect/engine/pulse-client.js
-var DEFAULT_BASE_URL2 = "https://api.patchstack.com/monitor/pulse";
-var DEFAULT_CACHE_TTL2 = 3e5;
-var JITTER_FRACTION2 = 0.1;
-var PulseRuleClient = class {
-  #siteUuid;
-  #timeoutMs;
-  #baseUrl;
-  #cacheTtl;
-  #cache = null;
-  #cacheTime = null;
-  #ttlEffective = 0;
-  #etag;
-  #pulseAuth;
-  #reportsDetections;
-  constructor({ siteUuid, baseUrl, cacheTtl, etag, timeoutMs, pulseAuth, reportsDetections } = {}) {
-    this.#timeoutMs = Number(timeoutMs) > 0 ? Number(timeoutMs) : 3e4;
-    this.#siteUuid = siteUuid ?? process.env.PATCHSTACK_SITE_UUID;
-    this.#baseUrl = safeBaseUrl(baseUrl ?? process.env.PATCHSTACK_PULSE_RULES_URL, DEFAULT_BASE_URL2, "rule endpoint");
-    this.#cacheTtl = Number.isFinite(cacheTtl) && cacheTtl > 0 ? cacheTtl : DEFAULT_CACHE_TTL2;
-    this.#etag = etag ?? null;
-    this.#pulseAuth = pulseAuth ?? null;
-    this.#reportsDetections = reportsDetections === true;
-    if (!this.#siteUuid) {
-      throw new Error("Patchstack site UUID is required. Pass { siteUuid } or set PATCHSTACK_SITE_UUID.");
+// src/protect/rules/contract.js
+var SOURCES = Object.freeze({
+  raw: Object.freeze({ keyed: false }),
+  all: Object.freeze({ keyed: false }),
+  false: Object.freeze({ keyed: false }),
+  rules: Object.freeze({ keyed: false, group: true }),
+  get: Object.freeze({ keyed: true, keys: "any", wildcard: true }),
+  post: Object.freeze({ keyed: true, keys: "any", wildcard: true }),
+  request: Object.freeze({ keyed: true, keys: "any", wildcard: true }),
+  cookie: Object.freeze({ keyed: true, keys: "any", wildcard: true }),
+  // A bare `files.<name>` resolves to the filename; an optional trailing attribute selects another part
+  // of the upload. Optional, not required — filename-scoped rules use the bare form.
+  files: Object.freeze({
+    keyed: true,
+    keys: "any",
+    wildcard: true,
+    optional_key_suffixes: Object.freeze(["content", "filename", "type"])
+  }),
+  server: Object.freeze({
+    keyed: true,
+    keys: Object.freeze([
+      "REQUEST_URI",
+      "REQUEST_METHOD",
+      "HTTP_USER_AGENT",
+      "HTTP_REFERER",
+      "HTTP_HOST",
+      "REMOTE_ADDR",
+      "ip",
+      "CONTENT_TYPE",
+      "CONTENT_LENGTH"
+    ]),
+    key_prefixes: Object.freeze(["HTTP_"])
+  }),
+  response: Object.freeze({
+    keyed: true,
+    keys: Object.freeze(["status", "body", "headers"]),
+    key_prefixes: Object.freeze(["header."])
+  }),
+  egress: Object.freeze({ keyed: true, keys: Object.freeze(["url", "host", "method"]) })
+});
+var MATCH_TYPES = Object.freeze([
+  "array_in_array",
+  "array_key_value",
+  "contains",
+  "cors_reflected",
+  "cross_origin",
+  "ctype_alnum",
+  "ctype_digit",
+  "ctype_special",
+  "equals",
+  "equals_strict",
+  "hostname",
+  "in_array",
+  "inline_js_xss",
+  "inline_xss",
+  "internal_host",
+  "is_numeric",
+  "isset",
+  "jwt_claim_equals",
+  "less_than",
+  "more_than",
+  "not_contains",
+  "not_in_array",
+  "off_origin",
+  "quotes",
+  "regex",
+  "stripos"
+]);
+var PARAMETERLESS_MATCH_TYPES = Object.freeze(["cross_origin", "off_origin", "cors_reflected"]);
+var OPERANDLESS_MATCH_TYPES = Object.freeze([
+  "isset",
+  "quotes",
+  "is_numeric",
+  "ctype_alnum",
+  "ctype_digit",
+  "ctype_special",
+  "inline_xss",
+  "inline_js_xss",
+  "internal_host",
+  "cross_origin",
+  "off_origin",
+  "cors_reflected"
+]);
+var OPERAND_SHAPES = Object.freeze([
+  "positive-number",
+  "boolean",
+  "non-empty-string",
+  "regex-literal",
+  "string-or-string-list",
+  "scalar",
+  "string",
+  "numeric",
+  "scalar-or-non-empty-list",
+  "non-empty-list",
+  "object",
+  "non-empty-object",
+  "non-empty-string-list",
+  "header-name-map",
+  "header-name-list",
+  "cookie-flags"
+]);
+var COOKIE_FLAGS = Object.freeze(["httpOnly", "secure", "sameSite"]);
+var SAME_SITE_VALUES = Object.freeze(["Strict", "Lax", "None"]);
+var HEADER_NAME = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
+var REGEX_LITERAL = /^\/(.+?)\/([gimsuy]*)$/s;
+var MATCH_OPERANDS = Object.freeze({
+  array_key_value: Object.freeze({
+    required: Object.freeze(["key", "match"]),
+    shapes: Object.freeze({ key: "string-or-string-list", match: "object" })
+  }),
+  // Decides on a JWT's DECODED payload rather than its shape, and yields the matching token spans so
+  // `redact` masks only those tokens. `claim` names an own, top-level claim; `value` is compared with
+  // exact string equality. Anything not positively identified — undecodable, not JSON, not an object,
+  // oversized, claim missing, claim not a string, or a different value — is a no-match.
+  jwt_claim_equals: Object.freeze({
+    required: Object.freeze(["claim", "value"]),
+    shapes: Object.freeze({ claim: "non-empty-string", value: "non-empty-string" })
+  }),
+  regex: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "regex-literal" }) }),
+  contains: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "non-empty-string" }) }),
+  stripos: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "non-empty-string" }) }),
+  not_contains: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "non-empty-string" }) }),
+  // A hostname is compared to `new URL(value).hostname`, so an empty one only ever equals the empty
+  // hostname of an opaque-scheme URL (`file:`, `mailto:`, `data:`) — never a host, and a false positive
+  // on those. The other three are the list-membership family: an empty list makes `in_array` and
+  // `array_in_array` inert and `not_in_array` true for every value.
+  hostname: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "non-empty-string" }) }),
+  in_array: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "scalar-or-non-empty-list" }) }),
+  not_in_array: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "scalar-or-non-empty-list" }) }),
+  array_in_array: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "non-empty-list" }) }),
+  // The comparison family. `equals` coerces, so any scalar can match. `equals_strict` does not, and its
+  // subject is always a string by the time it is compared — so a number operand is unconditionally
+  // inert, which is the trap the engine's own note about `'1' !== 1` describes.
+  equals: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "scalar" }) }),
+  equals_strict: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "string" }) }),
+  less_than: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "numeric" }) }),
+  more_than: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "numeric" }) })
+});
+function operandShapeProblem(shape, value) {
+  const isFilledString = (v) => typeof v === "string" && v.trim() !== "";
+  const isScalar = (v) => typeof v === "string" || typeof v === "number" || typeof v === "boolean";
+  const isHeaderName = (v) => typeof v === "string" && HEADER_NAME.test(v);
+  switch (shape) {
+    case "positive-number":
+      return typeof value === "number" && Number.isFinite(value) && value > 0 ? null : "must be a finite positive number";
+    case "boolean":
+      return typeof value === "boolean" ? null : "must be true or false";
+    case "non-empty-string":
+      return isFilledString(value) ? null : "must be a non-empty string";
+    case "regex-literal":
+      if (!isFilledString(value)) return "must be a non-empty string";
+      return REGEX_LITERAL.test(value) ? null : "must be a delimited pattern, as in /pattern/i";
+    case "string-or-string-list":
+      if (isFilledString(value)) return null;
+      if (Array.isArray(value) && value.length > 0 && value.every(isFilledString)) return null;
+      return "must be a non-empty string, or a non-empty list of them";
+    case "scalar":
+      return isScalar(value) ? null : "must be a string, number or boolean";
+    case "string":
+      return typeof value === "string" ? null : "must be a string (this comparison is type-strict)";
+    case "numeric":
+      return isScalar(value) && Number.isFinite(Number(value)) ? null : "must be a number";
+    case "scalar-or-non-empty-list":
+      if (isScalar(value)) return null;
+      if (Array.isArray(value) && value.length > 0 && value.every(isScalar)) return null;
+      return "must be a scalar, or a non-empty list of them";
+    case "non-empty-list":
+      return Array.isArray(value) && value.length > 0 && value.every(isScalar) ? null : "must be a non-empty list of scalars";
+    case "header-name-map": {
+      if (value === null || typeof value !== "object" || Array.isArray(value)) return "must be an object";
+      const names = Object.keys(value);
+      if (names.length === 0) return "must be an object with at least one entry";
+      const bad = names.find((name) => !isHeaderName(name));
+      return bad === void 0 ? null : `names an invalid HTTP header, ${JSON.stringify(bad)}`;
     }
-  }
-  async getRules() {
-    const now = Date.now();
-    if (this.#cache && this.#cacheTime !== null && now - this.#cacheTime < this.#ttlEffective) {
-      return this.#cache;
+    case "header-name-list": {
+      if (!Array.isArray(value) || value.length === 0) return "must be a non-empty list of HTTP header names";
+      const bad = value.find((name) => !isHeaderName(name));
+      return bad === void 0 ? null : `names an invalid HTTP header, ${JSON.stringify(bad)}`;
     }
-    const url = `${this.#baseUrl}/rules/${encodeURIComponent(this.#siteUuid)}`;
-    try {
-      const auth = await pulseAuthHeader(
-        { pulseAuth: this.#pulseAuth, endpoint: this.#baseUrl, timeoutMs: this.#timeoutMs },
-        fetch
-      );
-      const headers = { Accept: "application/json", ...auth };
-      if (this.#reportsDetections && typeof auth.Authorization === "string") {
-        headers["X-Patchstack-Detections"] = "enabled";
-      }
-      if (this.#etag) headers["If-None-Match"] = this.#etag;
-      const response = await fetch(url, { method: "GET", headers, signal: AbortSignal.timeout(this.#timeoutMs) });
-      if (response.status === 304) {
-        this.#touch(now);
-        return this.#cache ?? { success: true, notModified: true, etag: this.#etag, firewall: [], whitelists: [], whitelist_keys: {} };
+    case "cookie-flags": {
+      if (value === null || typeof value !== "object" || Array.isArray(value)) return "must be an object";
+      const unknown = Object.keys(value).filter((key) => !COOKIE_FLAGS.includes(key));
+      if (unknown.length > 0) return `has no flag named ${unknown.map((k) => JSON.stringify(k)).join(", ")}`;
+      for (const flag of ["httpOnly", "secure"]) {
+        if (value[flag] !== void 0 && typeof value[flag] !== "boolean") {
+          return `flag "${flag}" must be true or false`;
+        }
       }
-      if (!response.ok) {
-        return { success: false, error: `API returned ${response.status}`, firewall: [], whitelists: [], whitelist_keys: {} };
+      const sameSite = value.sameSite;
+      const sameSiteOff = sameSite === false;
+      if (sameSite !== void 0 && !sameSiteOff) {
+        if (typeof sameSite !== "string" || !SAME_SITE_VALUES.some((v) => v.toLowerCase() === sameSite.toLowerCase())) {
+          return `flag "sameSite" must be false, or one of ${SAME_SITE_VALUES.join(", ")}`;
+        }
       }
-      const data = await response.json();
-      if (!data || !Array.isArray(data.firewall)) {
-        return { success: false, error: "unexpected response shape (no firewall array)", firewall: [], whitelists: [], whitelist_keys: {} };
+      if (value.httpOnly === false && value.secure === false && sameSiteOff) {
+        return "turns off every flag, so it would harden nothing";
       }
-      const result = {
-        success: true,
-        notModified: false,
-        etag: response.headers?.get?.("etag") ?? null,
-        firewall: data.firewall,
-        whitelists: Array.isArray(data.whitelists) ? data.whitelists : [],
-        whitelist_keys: data.whitelist_keys ?? {},
-        ...enforcementField(data)
-      };
-      this.#cache = result;
-      this.#etag = result.etag;
-      this.#touch(now);
-      return result;
-    } catch (err) {
-      return {
-        success: false,
-        error: err.name === "TimeoutError" ? "Request timed out" : err.message,
-        firewall: [],
-        whitelists: [],
-        whitelist_keys: {}
-      };
+      return null;
     }
+    case "object":
+      return value !== null && typeof value === "object" && !Array.isArray(value) ? null : "must be an object";
+    case "non-empty-object":
+      return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).length > 0 ? null : "must be an object with at least one entry";
+    case "non-empty-string-list":
+      return Array.isArray(value) && value.length > 0 && value.every(isFilledString) ? null : "must be a non-empty list of non-empty strings";
+    default:
+      return null;
   }
-  #touch(now) {
-    this.#cacheTime = now;
-    this.#ttlEffective = this.#cacheTtl - Math.floor(Math.random() * this.#cacheTtl * JITTER_FRACTION2);
-  }
-  clearCache() {
-    this.#cache = null;
-    this.#cacheTime = null;
-    this.#etag = null;
+}
+var MUTATIONS = Object.freeze([
+  "base64_decode",
+  "getArrayValues",
+  "htmlentitydecode",
+  "intval",
+  "json_decode",
+  "json_encode",
+  "urldecode"
+]);
+var PHASES = Object.freeze(["request", "response", "egress"]);
+var ACTIONS = Object.freeze([
+  "block",
+  "redact",
+  "encode",
+  "set-header",
+  "remove-header",
+  "harden-cookie"
+]);
+var RULE_PROPERTY_SHAPES = Object.freeze({
+  max_bytes: "positive-number",
+  bypass_limit: "boolean",
+  ensure: "boolean",
+  prefilter: "non-empty-string-list"
+});
+var ENFORCEMENT_VALUES = Object.freeze(["dry-run"]);
+var WHEN_KEYS = Object.freeze(["path", "method"]);
+var RULE_PROPERTIES = Object.freeze([
+  "id",
+  "rule_id",
+  "title",
+  "category",
+  "phase",
+  "action",
+  "rule_v2",
+  "when",
+  "message",
+  "enforcement",
+  "source_revision",
+  "prefilter",
+  "max_bytes",
+  "bypass_limit",
+  "set_headers",
+  "remove_headers",
+  "cookie_flags",
+  "ensure",
+  "capture"
+]);
+var CAPTURE_VERSION = 1;
+var CAPTURE_KEYS = Object.freeze(["version", "raw_chars"]);
+var CAPTURE_RAW_CHARS_MAX = 512;
+var NULL_EXEMPT_PROPERTIES = Object.freeze(["capture"]);
+function captureProblem(capture) {
+  if (capture === void 0 || capture === null) return null;
+  if (typeof capture !== "object" || Array.isArray(capture)) return "capture must be an object";
+  for (const key of Object.keys(capture)) {
+    if (!CAPTURE_KEYS.includes(key)) return `capture has no "${key}" \u2014 it takes ${CAPTURE_KEYS.join(", ")}`;
+  }
+  if (!Object.hasOwn(capture, "version")) return "capture must name the version it was written against";
+  if (capture.version !== CAPTURE_VERSION) {
+    return `capture version ${String(capture.version)} is not one this guard understands`;
+  }
+  if (!Object.hasOwn(capture, "raw_chars")) return "capture must say what it is opting into";
+  const chars = capture.raw_chars;
+  if (typeof chars !== "number" || !Number.isInteger(chars) || chars <= 0) {
+    return "capture.raw_chars must be a positive whole number of characters";
   }
-};
-function enforcementField(data) {
-  if (!data || typeof data !== "object") return {};
-  const v = data.enforcement ?? data.mode;
-  return v === "block" || v === "dry-run" ? { enforcement: v } : {};
+  return null;
 }
-
-// src/protect/engine/fetch.js
-var MAX_BODY_BYTES = 1024 * 1024;
-async function fromFetchRequest(request, options = {}) {
-  const maxBodyBytes = options.maxBodyBytes ?? MAX_BODY_BYTES;
-  const url = new URL(request.url);
-  const method = (request.method || "GET").toUpperCase();
-  const headers = {};
-  request.headers.forEach((value, key) => {
-    headers[key.toLowerCase()] = value;
-  });
-  const query = {};
-  for (const [key, value] of url.searchParams) {
-    if (key in query) {
-      query[key] = Array.isArray(query[key]) ? [...query[key], value] : [query[key], value];
-    } else {
-      query[key] = value;
-    }
+var ACTION_PROPERTIES = Object.freeze({
+  block: Object.freeze({ required: Object.freeze([]), defaulted: Object.freeze([]), phases: Object.freeze(["request", "response", "egress"]) }),
+  redact: Object.freeze({ required: Object.freeze([]), defaulted: Object.freeze([]), phases: Object.freeze(["response"]) }),
+  encode: Object.freeze({ required: Object.freeze([]), defaulted: Object.freeze([]), phases: Object.freeze(["response"]) }),
+  "set-header": Object.freeze({
+    required: Object.freeze(["set_headers"]),
+    defaulted: Object.freeze(["ensure"]),
+    phases: Object.freeze(["response"]),
+    shapes: Object.freeze({ set_headers: "header-name-map" })
+  }),
+  "remove-header": Object.freeze({
+    required: Object.freeze(["remove_headers"]),
+    defaulted: Object.freeze([]),
+    phases: Object.freeze(["response"]),
+    shapes: Object.freeze({ remove_headers: "header-name-list" })
+  }),
+  "harden-cookie": Object.freeze({
+    required: Object.freeze([]),
+    defaulted: Object.freeze(["cookie_flags"]),
+    phases: Object.freeze(["response"]),
+    shapes: Object.freeze({ cookie_flags: "cookie-flags" })
+  })
+});
+var LIMITS = Object.freeze({
+  maxRules: 5e3,
+  maxWhitelists: 2e3,
+  maxConditionsPerRule: 250,
+  maxNestingDepth: 12,
+  maxRegexLength: 1e3,
+  maxValueLength: 8192
+});
+var GROUP_PARAMETER = "rules";
+function isGroup(condition) {
+  return condition?.parameter === GROUP_PARAMETER && Array.isArray(condition?.rules);
+}
+function conditionShapeProblem(condition) {
+  if (!condition || typeof condition !== "object") return "condition is not an object";
+  const named = condition.parameter === GROUP_PARAMETER;
+  const nested = Array.isArray(condition.rules);
+  if (named && !nested) {
+    return `parameter "${GROUP_PARAMETER}" is a group and needs a "rules" array`;
   }
-  let rawBody = "";
-  if (method !== "GET" && method !== "HEAD") {
-    rawBody = await readCappedText(request, maxBodyBytes);
+  if (nested && !named) {
+    return `condition carries nested rules but its parameter is ${JSON.stringify(condition.parameter)}; a group must be {"parameter":"${GROUP_PARAMETER}"}`;
   }
-  const contentType = headers["content-type"] || "";
-  let body = {};
-  let files;
-  if (rawBody) {
-    const parsed = parseBody(rawBody, contentType);
-    body = parsed.body;
-    files = parsed.files;
+  if (named && nested) {
+    if (condition.match !== void 0) return "a group carries no match of its own; the engine ignores it";
+    if (condition.mutations !== void 0) return "a group carries no mutations of its own; the engine ignores them";
+    if (condition.rules.length === 0) return "group has no conditions (would never match)";
   }
-  const uri = url.pathname + url.search;
-  const forwarded = headers["cf-connecting-ip"] || headers["x-forwarded-for"] || headers["x-real-ip"] || "";
-  return {
-    method,
-    url: uri,
-    originalUrl: uri,
-    query,
-    body,
-    files,
-    headers,
-    ip: forwarded.split(",")[0].trim(),
-    cookies: parseCookies(headers.cookie),
-    // Verbatim body text: preserves literal keys (e.g. `__proto__`) that JSON.stringify
-    // drops, so prototype-pollution rules on `raw` are robust.
-    _rawBody: rawBody
-  };
+  return null;
 }
-async function readCappedText(request, max) {
-  let clone;
-  try {
-    clone = request.clone();
-  } catch {
-    return "";
-  }
-  const body = clone.body;
-  if (body && typeof body.getReader === "function") {
-    const reader = body.getReader();
-    const chunks = [];
-    let buffered = 0;
-    try {
-      for (; ; ) {
-        const { done, value } = await reader.read();
-        if (done) break;
-        if (!value || buffered >= max) continue;
-        const take = Math.min(value.byteLength, max - buffered);
-        chunks.push(take === value.byteLength ? value : value.subarray(0, take));
-        buffered += take;
-      }
-    } catch {
-      return "";
-    }
-    try {
-      return new TextDecoder().decode(concatChunks(chunks, buffered));
-    } catch {
-      return "";
+function parameterProblem(parameter) {
+  if (parameter === void 0 || parameter === null) return null;
+  if (Array.isArray(parameter)) {
+    if (parameter.length === 0) return "parameter list is empty";
+    for (const member of parameter) {
+      if (Array.isArray(member)) return "a parameter list holds parameters, not more lists";
+      const problem = parameterProblem(member);
+      if (problem !== null) return problem;
     }
+    return null;
   }
-  try {
-    const text = await clone.text();
-    return text.length > max ? text.slice(0, max) : text;
-  } catch {
-    return "";
+  if (typeof parameter !== "string" || parameter === "") return "parameter must be a non-empty string";
+  if (parameter === GROUP_PARAMETER) {
+    return `"${GROUP_PARAMETER}" is the group source and is only valid as a whole group, not as a parameter`;
   }
-}
-function concatChunks(chunks, total) {
-  const out = new Uint8Array(total);
-  let offset = 0;
-  for (const c of chunks) {
-    out.set(c, offset);
-    offset += c.byteLength;
+  const dot = parameter.indexOf(".");
+  const name = dot === -1 ? parameter : parameter.slice(0, dot);
+  const source = SOURCES[name];
+  if (source === void 0) return `unknown parameter source "${name}"`;
+  if (dot === -1) {
+    return source.keyed === true ? `source "${name}" needs a key, e.g. "${name}.fieldname"` : null;
   }
-  return out;
+  if (source.keyed !== true) return `source "${name}" takes no key`;
+  const key = parameter.slice(dot + 1);
+  if (key === "") return `source "${name}" needs a key after the dot`;
+  return keyProblem(name, source, key);
 }
-function parseBody(rawBody, contentType) {
-  const ct = String(contentType || "").toLowerCase();
-  const isJson = ct.includes("application/json") || /\+json\b/.test(ct);
-  const isForm = ct.includes("application/x-www-form-urlencoded");
-  const isMultipart = ct.includes("multipart/form-data");
-  const isAmbiguous = ct === "" || ct.startsWith("text/plain") || ct.includes("csp-report") || ct.includes("/json");
-  if (isMultipart) {
-    const boundary = /boundary=("?)([^";]+)\1/i.exec(contentType)?.[2];
-    if (boundary) return parseMultipart(rawBody, boundary);
-    return { body: {}, files: void 0 };
+function keyProblem(name, source, key) {
+  if (key.endsWith("*") && source.wildcard !== true) {
+    return `"${name}" does not fan out over a wildcard key`;
   }
-  if (isForm) {
-    const body = {};
-    for (const [k, v] of new URLSearchParams(rawBody)) body[k] = k in body ? [].concat(body[k], v) : v;
-    return { body, files: void 0 };
+  const bare = key.endsWith("*") ? key.slice(0, -1) : key;
+  if (source.keys === "any") return null;
+  if (Array.isArray(source.keys) && source.keys.includes(bare)) return null;
+  for (const prefix of source.key_prefixes ?? []) {
+    if (bare.startsWith(prefix) && bare.length > prefix.length) return null;
   }
-  if (isJson || isAmbiguous) {
-    try {
-      const parsed = JSON.parse(rawBody);
-      if (parsed && typeof parsed === "object") return { body: parsed, files: void 0 };
-    } catch {
+  const accepted = [
+    ...Array.isArray(source.keys) ? source.keys : [],
+    ...(source.key_prefixes ?? []).map((p) => `${p}\u2026`)
+  ].join(", ");
+  return `"${name}" has no key "${key}" (expected one of: ${accepted})`;
+}
+function matchProblem(match, parameter) {
+  if (!match || typeof match !== "object") return "condition has no match object";
+  if (typeof match.type !== "string" || match.type === "") return "match.type must be a non-empty string";
+  if (!MATCH_TYPES.includes(match.type)) return `unknown match type "${match.type}"`;
+  const parameterless = PARAMETERLESS_MATCH_TYPES.includes(match.type);
+  if (!parameterless && (parameter === void 0 || parameter === null)) {
+    return `match type "${match.type}" needs a parameter`;
+  }
+  if (parameterless && parameter !== void 0 && parameter !== null) {
+    return `match type "${match.type}" reads the whole request and takes no parameter`;
+  }
+  const operands = MATCH_OPERANDS[match.type];
+  if (operands) {
+    for (const required of operands.required) {
+      if (match[required] === void 0 || match[required] === null) {
+        return `match type "${match.type}" needs "${required}"`;
+      }
+    }
+    for (const [operand, shape] of Object.entries(operands.shapes ?? {})) {
+      if (match[operand] === void 0) continue;
+      const problem = operandShapeProblem(shape, match[operand]);
+      if (problem) return `match type "${match.type}" operand "${operand}" ${problem}`;
     }
+  } else if (!OPERANDLESS_MATCH_TYPES.includes(match.type) && match.value === void 0) {
+    return `match type "${match.type}" needs a value`;
   }
-  return { body: {}, files: void 0 };
+  return null;
 }
-function parseMultipart(rawBody, boundary) {
-  const body = {};
-  const files = {};
-  for (const part of rawBody.split("--" + boundary)) {
-    const sep = /\r?\n\r?\n/.exec(part);
-    if (!sep) continue;
-    const rawHeaders = part.slice(0, sep.index);
-    const disposition = /content-disposition:[^\r\n]*/i.exec(rawHeaders)?.[0];
-    if (!disposition) continue;
-    const name = /name="([^"]*)"/i.exec(disposition)?.[1];
-    if (name == null) continue;
-    const content = part.slice(sep.index + sep[0].length).replace(/\r?\n$/, "");
-    const filename = /filename="([^"]*)"/i.exec(disposition)?.[1];
-    if (filename !== void 0) {
-      const partType = /content-type:\s*([^\r\n;]+)/i.exec(rawHeaders)?.[1]?.trim() || "";
-      const file = { filename, type: partType, content };
-      files[name] = name in files ? [].concat(files[name], file) : file;
-    } else {
-      body[name] = name in body ? [].concat(body[name], content) : content;
+function mutationsProblem(mutations) {
+  if (mutations === void 0 || mutations === null) return null;
+  if (!Array.isArray(mutations)) return "mutations must be an array";
+  for (const mutation of mutations) {
+    if (typeof mutation !== "string" || !MUTATIONS.includes(mutation)) {
+      return `unknown mutation "${String(mutation)}" \u2014 applied as a no-op, so the condition would test the untransformed value`;
     }
   }
-  return { body, files };
+  return null;
 }
-function parseCookies(header) {
-  const cookies = {};
-  if (!header) {
-    return cookies;
+function whenProblem(when) {
+  if (when === void 0 || when === null) return null;
+  if (typeof when !== "object" || Array.isArray(when)) return "when must be an object";
+  const keys = Object.keys(when);
+  if (keys.length === 0) return "when is empty \u2014 remove it, or name a path or method";
+  const unknown = keys.filter((key) => !WHEN_KEYS.includes(key));
+  if (unknown.length > 0) {
+    return `when names no supported key (${unknown.join(", ")}) \u2014 the engine understands ${WHEN_KEYS.join(" and ")}, and an unrecognised scope is ignored, so the rule would apply to every request`;
   }
-  for (const pair of header.split(";")) {
-    const idx = pair.indexOf("=");
-    if (idx === -1) {
-      continue;
+  if ("path" in when && !isNonEmptyString(when.path)) {
+    return "when.path must be a non-empty string";
+  }
+  if ("method" in when) {
+    const methods = Array.isArray(when.method) ? when.method : [when.method];
+    if (methods.length === 0) return "when.method is an empty list, so the rule would match no method";
+    if (!methods.every(isNonEmptyString)) return "when.method must be a non-empty string, or a list of them";
+  }
+  return null;
+}
+function isNonEmptyString(value) {
+  return typeof value === "string" && value.trim() !== "";
+}
+function nullPropertyProblem(rule) {
+  if (!rule || typeof rule !== "object") return null;
+  for (const property of RULE_PROPERTIES) {
+    if (NULL_EXEMPT_PROPERTIES.includes(property)) continue;
+    if (property in rule && rule[property] === null) {
+      return `"${property}" is present but null; omit it to mean the default, since a null is a value that was meant to be something and is not`;
     }
-    cookies[pair.slice(0, idx).trim()] = pair.slice(idx + 1).trim();
   }
-  return cookies;
+  return null;
 }
-
-// src/protect/engine/node.js
-function fromNodeRequest(req, rawBody = "") {
-  const method = (req.method || "GET").toUpperCase();
-  const headers = {};
-  for (const [key, value] of Object.entries(req.headers || {})) {
-    headers[key.toLowerCase()] = Array.isArray(value) ? value.join(", ") : value;
+function rulePropertyProblem(rule) {
+  if (!rule || typeof rule !== "object") return null;
+  for (const [property, shape] of Object.entries(RULE_PROPERTY_SHAPES)) {
+    if (rule[property] === void 0 || rule[property] === null) continue;
+    const problem = operandShapeProblem(shape, rule[property]);
+    if (problem) return `"${property}" ${problem}`;
   }
-  const host = headers.host || "localhost";
-  let url;
-  try {
-    url = new URL(req.url || "/", `http://${host}`);
-  } catch {
-    try {
-      url = new URL(req.url || "/", "http://localhost");
-    } catch {
-      url = new URL("http://localhost/");
+  return null;
+}
+function actionProblem(action, rule) {
+  if (action === void 0 || action === null) return null;
+  if (!ACTIONS.includes(action)) return `unknown action "${action}"`;
+  const spec = ACTION_PROPERTIES[action];
+  for (const required of spec?.required ?? []) {
+    if (rule?.[required] === void 0 || rule?.[required] === null) {
+      return `action "${action}" needs "${required}"`;
     }
   }
-  const query = {};
-  for (const [key, value] of url.searchParams) {
-    if (key in query) {
-      query[key] = Array.isArray(query[key]) ? [...query[key], value] : [query[key], value];
-    } else {
-      query[key] = value;
+  for (const [property, shape] of Object.entries(spec?.shapes ?? {})) {
+    if (rule?.[property] === void 0 || rule?.[property] === null) continue;
+    const problem = operandShapeProblem(shape, rule[property]);
+    if (problem) return `action "${action}" property "${property}" ${problem}`;
+  }
+  const phase = rule?.phase ?? "request";
+  if (spec !== void 0 && !spec.phases.includes(phase)) {
+    return `action "${action}" is carried out on the ${spec.phases.join("/")} phase; on "${phase}" the rule blocks instead`;
+  }
+  return null;
+}
+
+// src/protect/rules/validate.js
+var LIMITS2 = LIMITS;
+var PHASES2 = new Set(PHASES);
+var ACTIONS2 = new Set(ACTIONS);
+function validateBundle(bundle, opts = {}) {
+  const rejected = [];
+  const inFirewall = Array.isArray(bundle?.firewall) ? bundle.firewall : [];
+  const inWhitelists = Array.isArray(bundle?.whitelists) ? bundle.whitelists : [];
+  const firewall = [];
+  for (const rule of inFirewall) {
+    if (firewall.length >= LIMITS2.maxRules) {
+      rejected.push({ id: idOf(rule), reason: `bundle exceeds maxRules (${LIMITS2.maxRules})` });
+      continue;
     }
+    const reason = enforceableRuleProblem(rule);
+    if (reason) rejected.push({ id: idOf(rule), reason });
+    else firewall.push(rule);
   }
-  const contentType = headers["content-type"] || "";
-  let body = {};
-  let files;
-  if (rawBody) {
-    const parsed = parseBody(rawBody, contentType);
-    body = parsed.body;
-    files = parsed.files;
+  const whitelists = [];
+  for (const wl of inWhitelists) {
+    if (whitelists.length >= LIMITS2.maxWhitelists) {
+      rejected.push({ id: idOf(wl), reason: `bundle exceeds maxWhitelists (${LIMITS2.maxWhitelists})` });
+      continue;
+    }
+    if (!opts.allowGlobalWhitelists && wl && Array.isArray(wl.rule_v2) && !wl.rule_id) {
+      rejected.push({ id: idOf(wl), reason: "whitelist has no rule_id (would suppress every rule); set allowGlobalWhitelists to permit" });
+      continue;
+    }
+    const reason = conditionsProblem(wl?.rule_v2);
+    if (reason) rejected.push({ id: idOf(wl), reason: `whitelist: ${reason}` });
+    else whitelists.push(wl);
   }
-  const uri = url.pathname + url.search;
-  const forwarded = headers["cf-connecting-ip"] || headers["x-forwarded-for"] || headers["x-real-ip"] || "";
   return {
-    method,
-    url: uri,
-    originalUrl: uri,
-    query,
-    body,
-    files,
-    headers,
-    ip: forwarded.split(",")[0].trim() || req.socket && req.socket.remoteAddress || "",
-    cookies: parseCookies2(headers.cookie),
-    // Verbatim body text: preserves literal keys (e.g. `__proto__`) that JSON.stringify drops.
-    _rawBody: rawBody
+    bundle: { ...bundle, firewall, whitelists },
+    rejected
   };
 }
-function parseCookies2(header) {
-  const cookies = {};
-  if (!header) {
-    return cookies;
+function idOf(rule) {
+  const id = rule?.id ?? rule?.rule_id;
+  return id === void 0 || id === null ? "(unidentified)" : String(id);
+}
+function enforceableRuleProblem(rule) {
+  if (!rule || typeof rule !== "object") return "not an object";
+  const nullReason = nullPropertyProblem(rule);
+  if (nullReason) return nullReason;
+  if (rule.phase !== void 0 && !PHASES2.has(rule.phase)) return `unknown phase "${rule.phase}"`;
+  const actionReason = actionProblem(rule.action, rule);
+  if (actionReason) return actionReason;
+  const scopeReason = whenProblem(rule.when);
+  if (scopeReason) return scopeReason;
+  const propertyReason = rulePropertyProblem(rule);
+  if (propertyReason) return propertyReason;
+  return conditionsProblem(rule.rule_v2);
+}
+function conditionsProblem(conditions, depth = 0) {
+  if (!Array.isArray(conditions)) return "rule_v2 must be an array of conditions";
+  if (conditions.length === 0) return "rule_v2 is empty (would never match)";
+  if (depth > LIMITS2.maxNestingDepth) return `nesting deeper than ${LIMITS2.maxNestingDepth}`;
+  if (conditions.length > LIMITS2.maxConditionsPerRule) {
+    return `more than ${LIMITS2.maxConditionsPerRule} conditions`;
   }
-  for (const pair of header.split(";")) {
-    const idx = pair.indexOf("=");
-    if (idx === -1) {
+  for (const c of conditions) {
+    const shapeReason = conditionShapeProblem(c);
+    if (shapeReason) return shapeReason;
+    if (isGroup(c)) {
+      const nested = conditionsProblem(c.rules, depth + 1);
+      if (nested) return nested;
       continue;
     }
-    cookies[pair.slice(0, idx).trim()] = pair.slice(idx + 1).trim();
-  }
-  return cookies;
-}
-
-// src/protect/egress.js
-async function installEgressGuard({ shouldBlock, onBlock, onSkip, dnsScreen = true, lookup, allowHosts } = {}) {
-  const restores = [];
-  if (typeof shouldBlock !== "function") return () => {
-  };
-  const exempt = new Set((allowHosts ?? []).map((h) => String(h).toLowerCase()));
-  const block = (url, host, method) => {
-    if (!shouldBlock(url, host, method)) return false;
-    notify(onBlock, { url, host, method }, "onEgressBlock");
-    return true;
-  };
-  let screen = null;
-  if (dnsScreen) {
-    try {
-      const resolveLookup = lookup ?? (await import("dns")).lookup;
-      const { isIP } = await import("net");
-      if (typeof resolveLookup === "function" && typeof isIP === "function") {
-        screen = { lookup: resolveLookup, isIP, isExempt: (h) => exempt.has(String(h).toLowerCase()) };
-      }
-    } catch {
-      screen = null;
+    const parameterReason = parameterProblem(c.parameter);
+    if (parameterReason) return parameterReason;
+    const mutationReason = mutationsProblem(c.mutations);
+    if (mutationReason) return mutationReason;
+    const matchReason = matchProblem(c.match, c.parameter);
+    if (matchReason) return matchReason;
+    const m = c.match;
+    if (m.type === "regex") {
+      if (typeof m.value !== "string") return "regex match.value must be a string";
+      if (m.value.length > LIMITS2.maxRegexLength) return `regex longer than ${LIMITS2.maxRegexLength} chars`;
+    } else if (typeof m.value === "string" && m.value.length > LIMITS2.maxValueLength) {
+      return `match.value longer than ${LIMITS2.maxValueLength} chars`;
+    }
+    if (m.match) {
+      const nested = conditionsProblem([{ parameter: c.parameter, match: m.match }], depth + 1);
+      if (nested) return nested;
     }
   }
-  const skip = (reason, detail) => notify(onSkip, { phase: "egress", reason, detail }, "onSkip");
-  const resolvesToDisallowed = (url, host, method) => new Promise((resolve) => {
-    if (!screen) {
-      if (host && dnsScreen) skip("resolver-unavailable", { host });
-      return resolve(false);
+  return null;
+}
+
+// src/protect/capture-plan.js
+var NEVER_CAPTURABLE = /* @__PURE__ */ new Set(["response"]);
+var CAPTURE_LIMITS = Object.freeze({
+  /** Named and prefix values in one event, together. Raw has its own allowance. */
+  capturedValues: 10,
+  /** Characters of any single captured value. */
+  valueChars: 512,
+  /** Resolved values one prefix permission may contribute. */
+  prefixValues: 5
+});
+function parametersOf(rule) {
+  const out = /* @__PURE__ */ new Set();
+  const add = (parameter) => {
+    if (typeof parameter === "string" && parameter !== "rules") out.add(parameter);
+  };
+  const collect = (parameter) => {
+    if (Array.isArray(parameter)) {
+      for (const member of parameter) add(member);
+      return;
     }
-    if (!host || screen.isIP(host) !== 0 || screen.isExempt(host)) return resolve(false);
-    try {
-      screen.lookup(host, { all: true }, (err, addresses) => {
-        if (err || !Array.isArray(addresses)) {
-          skip("resolver-failed", { host });
-          return resolve(false);
-        }
-        for (const a of addresses) {
-          const ip = a && typeof a === "object" ? a.address : a;
-          if (ip && block(url, ip, method)) return resolve(true);
-        }
-        resolve(false);
-      });
-    } catch {
-      skip("resolver-failed", { host });
-      resolve(false);
+    add(parameter);
+  };
+  const walk = (conditions, depth) => {
+    if (!Array.isArray(conditions) || depth > 20) return;
+    for (const condition of conditions) {
+      if (!condition || typeof condition !== "object") continue;
+      collect(condition.parameter);
+      if (Array.isArray(condition.rules)) walk(condition.rules, depth + 1);
     }
-  });
-  const originalFetch = globalThis.fetch;
-  if (typeof originalFetch === "function" && !originalFetch.__patchstackGuarded) {
-    const REDIRECT_STATUSES = /* @__PURE__ */ new Set([301, 302, 303, 307, 308]);
-    const MAX_REDIRECTS = 20;
-    const screenUrl = async (u, method) => {
-      let host = null;
-      try {
-        host = new URL(u).hostname;
-      } catch {
-        host = null;
-      }
-      if (block(u, host, method) || await resolvesToDisallowed(u, host, method)) {
-        throw new Error(`Patchstack blocked an outbound request to a disallowed address: ${host ?? u}`);
-      }
-    };
-    const guarded = async (input, init) => {
-      let cur;
-      try {
-        cur = new Request(input, { ...init || {}, redirect: "manual" });
-      } catch {
-        return originalFetch(input, init);
-      }
-      const callerRedirect = init && init.redirect || input && input.redirect || "follow";
-      let url = cur.url;
-      let method = cur.method;
-      await screenUrl(url, method);
-      if (callerRedirect !== "follow") return originalFetch(input, init);
-      const headers = new Headers(cur.headers);
-      const signal = cur.signal;
-      let body = method === "GET" || method === "HEAD" ? void 0 : await cur.clone().arrayBuffer();
-      for (let hop = 0; ; hop++) {
-        const resp = await originalFetch(
-          hop === 0 ? cur : new Request(url, { method, headers, body, redirect: "manual", signal })
-        );
-        const location = REDIRECT_STATUSES.has(resp.status) ? resp.headers.get("location") : null;
-        if (!location) return resp;
-        if (hop >= MAX_REDIRECTS) throw new Error("Patchstack blocked an outbound request: too many redirects");
-        const next = new URL(location, url).href;
-        if (resp.status === 303 || (resp.status === 301 || resp.status === 302) && method === "POST") {
-          method = "GET";
-          body = void 0;
-          headers.delete("content-type");
-          headers.delete("content-length");
-        }
-        if (new URL(next).origin !== new URL(url).origin) {
-          headers.delete("authorization");
-          headers.delete("cookie");
-        }
-        await screenUrl(next, method);
-        url = next;
-      }
-    };
-    guarded.__patchstackGuarded = true;
-    globalThis.fetch = guarded;
-    restores.push(() => {
-      if (globalThis.fetch === guarded) globalThis.fetch = originalFetch;
-    });
-  }
-  for (const moduleName of ["node:http", "node:https"]) {
-    try {
-      const mod = await import(moduleName);
-      const restore = patchHttpModule(mod.default ?? mod, block, screen);
-      if (restore) restores.push(restore);
-    } catch {
+  };
+  walk(rule?.rule_v2, 0);
+  return [...out];
+}
+function rawOptIn(rule) {
+  if (!rule || typeof rule !== "object" || !Object.hasOwn(rule, "capture")) return null;
+  const capture = rule.capture;
+  if (capture === null || typeof capture !== "object") return null;
+  if (captureProblem(capture) !== null) return null;
+  return { chars: Math.min(capture.raw_chars, CAPTURE_RAW_CHARS_MAX) };
+}
+var NOTHING = Object.freeze({
+  named: Object.freeze([]),
+  prefixes: Object.freeze([]),
+  raw: null,
+  limits: CAPTURE_LIMITS
+});
+function derivePlan(rule) {
+  const named = /* @__PURE__ */ new Set();
+  const prefixes = /* @__PURE__ */ new Set();
+  if (enforceableRuleProblem(rule) !== null) return NOTHING;
+  const parameters = parametersOf(rule).filter((parameter) => parameterProblem(parameter) === null);
+  for (const parameter of parameters) {
+    const dot = parameter.indexOf(".");
+    if (dot === -1) continue;
+    const source = parameter.slice(0, dot);
+    const key = parameter.slice(dot + 1);
+    if (SOURCES[source]?.keyed !== true || NEVER_CAPTURABLE.has(source)) continue;
+    if (key.endsWith("*")) {
+      const prefix = key.slice(0, -1);
+      if (prefix !== "") prefixes.add(`${source}.${prefix}`);
+      continue;
     }
+    named.add(`${source}.${key}`);
   }
-  return () => {
-    for (const restore of restores) {
-      try {
-        restore();
-      } catch {
+  const raw = rawOptIn(rule);
+  return Object.freeze({
+    named: Object.freeze([...named].sort()),
+    prefixes: Object.freeze([...prefixes].sort()),
+    raw: raw === null ? null : Object.freeze(raw),
+    limits: CAPTURE_LIMITS
+  });
+}
+function permitsAnything(plan) {
+  return plan.named.length > 0 || plan.prefixes.length > 0 || plan.raw !== null;
+}
+var LANES = Object.freeze([2166136261, 16777619, 2654435769, 2246822507]);
+function planReference(plan) {
+  const limits = plan?.limits ?? {};
+  const canonical = JSON.stringify([
+    [...plan?.named ?? []].sort(),
+    [...plan?.prefixes ?? []].sort(),
+    plan?.raw?.chars ?? 0,
+    Object.entries(limits).map(([key, value]) => [key, value]).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)
+  ]);
+  const digest = LANES.map((base) => {
+    let hash = base >>> 0;
+    for (let i = 0; i < canonical.length; i++) {
+      hash ^= canonical.charCodeAt(i);
+      hash = Math.imul(hash, 16777619) >>> 0;
+    }
+    return hash.toString(16).padStart(8, "0");
+  }).join("");
+  return `cp2-${digest}`;
+}
+function createPlanCache() {
+  const byRule = /* @__PURE__ */ new WeakMap();
+  let derivations = 0;
+  return {
+    for(rule) {
+      if (rule === null || typeof rule !== "object") {
+        const plan2 = derivePlan(rule);
+        derivations += 1;
+        return Object.freeze({ plan: plan2, reference: planReference(plan2) });
       }
+      const hit = byRule.get(rule);
+      if (hit) return hit;
+      const plan = derivePlan(rule);
+      derivations += 1;
+      const entry = Object.freeze({ plan, reference: planReference(plan) });
+      byRule.set(rule, entry);
+      return entry;
+    },
+    /** How many plans have been derived — the observable difference between a hit and a miss. */
+    get derivations() {
+      return derivations;
     }
   };
 }
-function patchHttpModule(http, block, screen) {
-  if (!http || typeof http.request !== "function" || http.__patchstackGuarded) return null;
-  const originalRequest = http.request;
-  const originalGet = http.get;
-  const wrap = (original) => function(...args) {
-    const target = extractHttpTarget(args);
-    if (target && block(target.url, target.host, target.method)) {
-      throw new Error(`Patchstack blocked an outbound request to a disallowed address: ${target.host ?? target.url}`);
+function captureValues(plan, resolver) {
+  const nothing = { values: [], omitted: 0, unsupported: 0, failed: 0, unavailable: false, raw: null };
+  if (!plan || !permitsAnything(plan)) return nothing;
+  if (!resolver || typeof resolver.resolve !== "function") return { ...nothing, unavailable: true };
+  const limits = plan.limits ?? CAPTURE_LIMITS;
+  const values = [];
+  let omitted = 0;
+  let unsupported = 0;
+  let failed = 0;
+  let attempted = 0;
+  const read = (parameter) => {
+    attempted += 1;
+    try {
+      const resolved = resolver.resolve(parameter);
+      return Array.isArray(resolved) ? resolved : [];
+    } catch {
+      failed += 1;
+      return null;
     }
-    if (target && screen && target.host && screen.isIP(target.host) === 0 && !screen.isExempt(target.host)) {
-      try {
-        args = withScreeningLookup(args, target, block, screen.lookup);
-      } catch {
-      }
+  };
+  const classify = (value) => {
+    const text = asText(value);
+    if (text === null) {
+      unsupported += 1;
+      return null;
     }
-    return original.apply(this, args);
+    return text;
   };
-  const guardedRequest = wrap(originalRequest);
-  http.request = guardedRequest;
-  let guardedGet;
-  if (typeof originalGet === "function") {
-    guardedGet = wrap(originalGet);
-    http.get = guardedGet;
-  }
-  http.__patchstackGuarded = true;
-  return () => {
-    if (http.request === guardedRequest) http.request = originalRequest;
-    if (guardedGet && http.get === guardedGet) http.get = originalGet;
-    delete http.__patchstackGuarded;
+  const record = (parameter, text) => {
+    if (values.length >= limits.capturedValues) {
+      omitted += 1;
+      return false;
+    }
+    const capped = text.length > limits.valueChars;
+    values.push({
+      parameter,
+      value: capped ? text.slice(0, limits.valueChars) : text,
+      ...capped ? { truncated: true } : {}
+    });
+    return true;
   };
-}
-function extractHttpTarget(args) {
-  const first = args[0];
-  try {
-    if (typeof first === "string" || first instanceof URL) {
-      const url = new URL(String(first));
-      const opts = args.find((a) => a && typeof a === "object" && !(a instanceof URL));
-      return { url: url.href, host: url.hostname, method: opts && opts.method || "GET" };
+  for (const parameter of plan.named) {
+    for (const value of read(parameter) ?? []) {
+      const text = classify(value);
+      if (text !== null) record(parameter, text);
+    }
+  }
+  for (const prefix of plan.prefixes) {
+    const pattern = `${prefix}*`;
+    let taken = 0;
+    for (const value of read(pattern) ?? []) {
+      const text = classify(value);
+      if (text === null) continue;
+      if (taken >= limits.prefixValues) {
+        omitted += 1;
+        continue;
+      }
+      if (record(pattern, text)) taken += 1;
     }
-    if (first && typeof first === "object") {
-      const host = normalizeHost(first.hostname || first.host) || "localhost";
-      const protocol = first.protocol || "http:";
-      const port = first.port ? `:${first.port}` : "";
-      const path = first.path || "/";
-      return { url: `${protocol}//${host}${port}${path}`, host, method: first.method || "GET" };
+  }
+  let raw = null;
+  if (plan.raw !== null) {
+    const text = asText((read("raw") ?? [])[0]);
+    if (text !== null) {
+      const capped = text.length > plan.raw.chars;
+      raw = { value: capped ? text.slice(0, plan.raw.chars) : text, ...capped ? { truncated: true } : {} };
     }
-  } catch {
   }
-  return null;
-}
-function normalizeHost(raw) {
-  const host = String(raw || "").trim();
-  const bracketed = /^\[([^\]]+)\]/.exec(host);
-  if (bracketed) return bracketed[1];
-  if ((host.match(/:/g) || []).length > 1) return host;
-  return host.split(":")[0];
+  const unavailable = attempted > 0 && failed === attempted;
+  return { values, omitted, unsupported, failed, unavailable, raw };
 }
-function screenResolved(addresses, target, block) {
-  for (const a of addresses || []) {
-    const ip = a && typeof a === "object" ? a.address : a;
-    if (ip && block(target.url, ip, target.method)) return ip;
-  }
+function asText(value) {
+  if (typeof value === "string") return value;
+  if (typeof value === "number" && Number.isFinite(value)) return String(value);
+  if (typeof value === "boolean") return String(value);
   return null;
 }
-function withScreeningLookup(args, target, block, lookup) {
-  const screeningLookup = (hostname, options, callback) => {
-    let opts = options;
-    let cb = callback;
-    if (typeof opts === "function") {
-      cb = opts;
-      opts = {};
+
+// src/protect/engine/pulse-client.js
+var DEFAULT_BASE_URL2 = "https://api.patchstack.com/monitor/pulse";
+var DEFAULT_CACHE_TTL2 = 3e5;
+var JITTER_FRACTION2 = 0.1;
+var PulseRuleClient = class {
+  #siteUuid;
+  #timeoutMs;
+  #baseUrl;
+  #cacheTtl;
+  #cache = null;
+  #cacheTime = null;
+  #ttlEffective = 0;
+  #etag;
+  #pulseAuth;
+  #detectionState;
+  constructor({ siteUuid, baseUrl, cacheTtl, etag, timeoutMs, pulseAuth, detectionState } = {}) {
+    this.#timeoutMs = Number(timeoutMs) > 0 ? Number(timeoutMs) : 3e4;
+    this.#siteUuid = siteUuid ?? process.env.PATCHSTACK_SITE_UUID;
+    this.#baseUrl = safeBaseUrl(baseUrl ?? process.env.PATCHSTACK_PULSE_RULES_URL, DEFAULT_BASE_URL2, "rule endpoint");
+    this.#cacheTtl = Number.isFinite(cacheTtl) && cacheTtl > 0 ? cacheTtl : DEFAULT_CACHE_TTL2;
+    this.#etag = etag ?? null;
+    this.#pulseAuth = pulseAuth ?? null;
+    this.#detectionState = typeof detectionState === "string" ? detectionState : null;
+    if (!this.#siteUuid) {
+      throw new Error("Patchstack site UUID is required. Pass { siteUuid } or set PATCHSTACK_SITE_UUID.");
     }
-    if (!opts || typeof opts !== "object") opts = {};
+  }
+  async getRules() {
+    const now = Date.now();
+    if (this.#cache && this.#cacheTime !== null && now - this.#cacheTime < this.#ttlEffective) {
+      return this.#cache;
+    }
+    const url = `${this.#baseUrl}/rules/${encodeURIComponent(this.#siteUuid)}`;
     try {
-      lookup(hostname, { ...opts, all: true }, (err, addresses) => {
-        if (err) return cb(err);
-        const list = Array.isArray(addresses) ? addresses : [];
-        const blocked = screenResolved(list, target, block);
-        if (blocked) {
-          return cb(new Error(`Patchstack blocked an outbound request to a disallowed address: ${target.host} resolved to ${blocked}`));
-        }
-        if (opts.all) return cb(null, list);
-        const first = list[0];
-        if (!first) return cb(new Error(`Patchstack: could not resolve ${hostname}`));
-        return cb(null, first.address, first.family);
-      });
-    } catch {
-      try {
-        lookup(hostname, opts, cb);
-      } catch {
-        cb(new Error(`Patchstack: lookup failed for ${hostname}`));
+      const auth = await pulseAuthHeader(
+        { pulseAuth: this.#pulseAuth, endpoint: this.#baseUrl, timeoutMs: this.#timeoutMs },
+        fetch
+      );
+      const headers = { Accept: "application/json", ...auth };
+      if (this.#detectionState !== null && typeof auth.Authorization === "string") {
+        headers["X-Patchstack-Detections"] = this.#detectionState;
+      }
+      if (this.#etag) headers["If-None-Match"] = this.#etag;
+      const response = await fetch(url, { method: "GET", headers, signal: AbortSignal.timeout(this.#timeoutMs) });
+      if (response.status === 304) {
+        this.#touch(now);
+        return this.#cache ?? { success: true, notModified: true, etag: this.#etag, firewall: [], whitelists: [], whitelist_keys: {} };
+      }
+      if (!response.ok) {
+        return { success: false, error: `API returned ${response.status}`, firewall: [], whitelists: [], whitelist_keys: {} };
+      }
+      const data = await response.json();
+      if (!data || !Array.isArray(data.firewall)) {
+        return { success: false, error: "unexpected response shape (no firewall array)", firewall: [], whitelists: [], whitelist_keys: {} };
       }
+      const result = {
+        success: true,
+        notModified: false,
+        etag: response.headers?.get?.("etag") ?? null,
+        firewall: data.firewall,
+        whitelists: Array.isArray(data.whitelists) ? data.whitelists : [],
+        whitelist_keys: data.whitelist_keys ?? {},
+        ...enforcementField(data)
+      };
+      this.#cache = result;
+      this.#etag = result.etag;
+      this.#touch(now);
+      return result;
+    } catch (err) {
+      return {
+        success: false,
+        error: err.name === "TimeoutError" ? "Request timed out" : err.message,
+        firewall: [],
+        whitelists: [],
+        whitelist_keys: {}
+      };
     }
-  };
-  return injectLookupOption(args, screeningLookup);
-}
-function injectLookupOption(args, lookup) {
-  const first = args[0];
-  if (first && typeof first === "object" && !(first instanceof URL)) {
-    return [{ ...first, lookup }, ...args.slice(1)];
   }
-  const rest = args.slice(1);
-  const optIdx = rest.findIndex((a) => a && typeof a === "object" && !(a instanceof URL));
-  if (optIdx !== -1) {
-    const next = [...rest];
-    next[optIdx] = { ...rest[optIdx], lookup };
-    return [first, ...next];
+  #touch(now) {
+    this.#cacheTime = now;
+    this.#ttlEffective = this.#cacheTtl - Math.floor(Math.random() * this.#cacheTtl * JITTER_FRACTION2);
   }
-  const cbIdx = rest.findIndex((a) => typeof a === "function");
-  if (cbIdx === -1) return [first, { lookup }, ...rest];
-  return [first, ...rest.slice(0, cbIdx), { lookup }, ...rest.slice(cbIdx)];
+  clearCache() {
+    this.#cache = null;
+    this.#cacheTime = null;
+    this.#etag = null;
+  }
+};
+function enforcementField(data) {
+  if (!data || typeof data !== "object") return {};
+  const v = data.enforcement ?? data.mode;
+  return v === "block" || v === "dry-run" ? { enforcement: v } : {};
 }
 
-// src/protect/defaults.js
-var DEFAULT_RESPONSE_RULES = [
-  {
-    id: "resp-private-key",
-    title: "Private key in response body",
-    phase: "response",
-    category: "secret-exposure",
-    action: "redact",
-    prefilter: ["PRIVATE KEY"],
-    rule_v2: [{ parameter: "response.body", match: { type: "regex", value: "/-----BEGIN (?:RSA |EC |OPENSSH |DSA |PGP )?PRIVATE KEY-----/" } }]
-  },
-  {
-    id: "resp-aws-access-key",
-    title: "AWS access key id in response body",
-    phase: "response",
-    category: "secret-exposure",
-    action: "redact",
-    prefilter: ["AKIA", "ASIA"],
-    rule_v2: [{ parameter: "response.body", match: { type: "regex", value: "/\\b(?:AKIA|ASIA)[0-9A-Z]{16}\\b/" } }]
-  },
-  {
-    id: "resp-gcp-api-key",
-    title: "Google API key in response body",
-    phase: "response",
-    category: "secret-exposure",
-    action: "redact",
-    prefilter: ["AIza"],
-    rule_v2: [{ parameter: "response.body", match: { type: "regex", value: "/\\bAIza[0-9A-Za-z_-]{35}\\b/" } }]
-  },
-  {
-    id: "resp-vendor-api-key",
-    title: "Vendor API key / token in response body",
-    phase: "response",
-    category: "secret-exposure",
-    action: "redact",
-    // High-signal, prefix-anchored provider tokens that never legitimately appear in a response
-    // body: Stripe (sk_live_/rk_live_), GitHub (gh[opsu]_ / github_pat_), GitLab (glpat-),
-    // Slack (xox[baprs]-), Anthropic (sk-ant-), Google OAuth (ya29.), npm (npm_). Trailing
-    // (?![0-9A-Za-z]) instead of \\b since some tokens end in - / _ .
-    prefilter: ["sk_live_", "rk_live_", "ghp_", "gho_", "ghs_", "ghu_", "github_pat_", "glpat-", "xox", "sk-ant-", "ya29.", "npm_"],
-    rule_v2: [{ parameter: "response.body", match: { type: "regex", value: "/\\b(?:sk_live_[0-9A-Za-z]{16,}|rk_live_[0-9A-Za-z]{16,}|gh[opsu]_[0-9A-Za-z]{36}|github_pat_[0-9A-Za-z_]{60,}|glpat-[0-9A-Za-z_-]{20,}|xox[baprs]-[0-9A-Za-z-]{10,}|sk-ant-[0-9A-Za-z_-]{20,}|ya29\\.[0-9A-Za-z_-]{20,}|npm_[0-9A-Za-z]{36})(?![0-9A-Za-z])/" } }]
-  },
-  {
-    id: "resp-supabase-secret-key",
-    title: "Supabase secret key in response body",
-    phase: "response",
-    category: "secret-exposure",
-    action: "redact",
-    // Supabase's opaque key format, which is not a JWT and so is not covered by the JWT rule below.
-    // `sb_secret_` is the elevated one — documented as full access, bypassing Row Level Security,
-    // backend-only — while `sb_publishable_` is meant for public clients and must pass untouched.
-    // Both key systems are live at once: new keys sit alongside the legacy `anon` / `service_role`
-    // JWTs rather than replacing them, so this rule and the JWT rule cover different halves.
-    //
-    // The documented grammar is the prefix, 22 base64url characters, `_`, then an 8-character
-    // base64url checksum. Matching it exactly is what keeps the mask on the key and off the response
-    // around it: a variable-length suffix would either run past the key into adjacent syntax or stop
-    // short and leave the tail of a real key visible. The trailing guard rejects a longer run of key
-    // characters, which is not this format.
-    prefilter: ["sb_secret_"],
-    rule_v2: [{ parameter: "response.body", match: { type: "regex", value: "/\\bsb_secret_[A-Za-z0-9_-]{22}_[A-Za-z0-9_-]{8}(?![A-Za-z0-9_-])/" } }]
-  },
-  {
-    id: "resp-supabase-service-role-key",
-    title: "Supabase service_role key in response body",
-    phase: "response",
-    category: "secret-exposure",
-    action: "redact",
-    // Scoped to the one role that must never leave: `service_role` bypasses Row Level Security
-    // entirely. A JWT in a response body is not inherently a leak — the Supabase `anon` key is public
-    // by design and a login response carries the user's own access token — so this decides on the
-    // decoded payload rather than on the shape of the token.
-    //
-    // `jwt_claim_equals` also yields the matching token spans, which is what lets `redact` mask those
-    // tokens and serve the rest of the response.
-    //
-    // A broad any-JWT rule is a reasonable thing to want; it belongs in the managed hardening bundle as
-    // an opt-in, observe-only rule rather than an on-by-default mask.
-    prefilter: ["eyJ"],
-    rule_v2: [{ parameter: "response.body", match: { type: "jwt_claim_equals", claim: "role", value: "service_role" } }]
-  },
-  {
-    id: "resp-db-connection-string",
-    title: "Database connection string with credentials in response body",
-    phase: "response",
-    category: "secret-exposure",
-    action: "redact",
-    prefilter: ["mongodb", "postgres", "mysql", "redis", "amqp"],
-    rule_v2: [{ parameter: "response.body", match: { type: "regex", value: "/\\b(?:mongodb(?:\\+srv)?|postgres(?:ql)?|mysql|redis|amqps?):\\/\\/[^\\s:@\\/]+:[^\\s:@\\/]+@/i" } }]
-  },
-  {
-    id: "resp-stack-trace",
-    title: "Node stack trace leaking in response body",
-    phase: "response",
-    category: "info-exposure",
-    action: "redact",
-    // No prefilter: a Node stack frame has no single distinctive literal (` at ` is too common to
-    // gate on). The pattern is linearly bounded per line, so it runs on every screened body.
-    rule_v2: [{ parameter: "response.body", match: { type: "regex", value: "/\\n\\s+at\\s+.+\\(.+:\\d+:\\d+\\)/" } }]
-  },
-  {
-    id: "resp-sql-error",
-    title: "SQL / ORM error disclosure in response body",
-    phase: "response",
-    category: "info-exposure",
-    action: "redact",
-    prefilter: ["SQLSTATE", "Sequelize", "ER_", "ORA-", "PG::", "SQLITE_ERROR", "SQL syntax"],
-    rule_v2: [{ parameter: "response.body", match: { type: "regex", value: "/(SQLSTATE\\[[0-9A-Z]+\\]|SequelizeDatabaseError|ER_[A-Z_]+|ORA-\\d{5}|PG::[A-Za-z]+Error|SQLITE_ERROR|You have an error in your SQL syntax)/i" } }]
-  },
-  {
-    id: "resp-exception-trace",
-    title: "Backend exception / stack trace disclosure in response body",
-    phase: "response",
-    category: "info-exposure",
-    action: "redact",
-    // Multi-language exception/traceback signatures a normal API response never carries:
-    // Python traceback, Java "Exception in thread", .NET System.*Exception, JVM stack frames,
-    // Go goroutine dumps. (Node `at fn (file:line:col)` frames are handled by resp-stack-trace.)
-    prefilter: ["Traceback", "Exception in thread", "System.", "goroutine ", ".java:", ".kt:", ".scala:", ".rb:", ".py:", ".cs:"],
-    rule_v2: [{ parameter: "response.body", match: { type: "regex", value: '/(Traceback \\(most recent call last\\)|Exception in thread "|System\\.[A-Za-z.]+Exception|\\bat [\\w.$]+\\([\\w]+\\.(?:java|kt|scala|rb|py|cs):\\d+\\)|goroutine \\d+ \\[)/' } }]
+// src/protect/engine/fetch.js
+var MAX_BODY_BYTES = 1024 * 1024;
+async function fromFetchRequest(request, options = {}) {
+  const maxBodyBytes = options.maxBodyBytes ?? MAX_BODY_BYTES;
+  const url = new URL(request.url);
+  const method = (request.method || "GET").toUpperCase();
+  const headers = {};
+  request.headers.forEach((value, key) => {
+    headers[key.toLowerCase()] = value;
+  });
+  const query = {};
+  for (const [key, value] of url.searchParams) {
+    if (key in query) {
+      query[key] = Array.isArray(query[key]) ? [...query[key], value] : [query[key], value];
+    } else {
+      query[key] = value;
+    }
   }
-];
-var DEFAULT_EGRESS_RULES = [
-  {
-    id: "egress-internal-address",
-    title: "Outbound request to an internal / metadata address (SSRF)",
-    phase: "egress",
-    category: "ssrf",
-    rule_v2: [{ parameter: "egress.host", match: { type: "internal_host" } }]
+  let rawBody = "";
+  if (method !== "GET" && method !== "HEAD") {
+    rawBody = await readCappedText(request, maxBodyBytes);
   }
-];
-
-// src/protect/block-page.js
-function escapeHtml(s) {
-  return String(s).replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
-}
-function renderBlockPage({ url = "", code = "patchstack" } = {}) {
-  const safeUrl = escapeHtml(url);
-  const safeCode = escapeHtml(code || "patchstack");
-  return `<!DOCTYPE html>
-<html lang="en">
-<head>
-    <meta charset="UTF-8">
-    <meta http-equiv="X-UA-Compatible" content="IE=edge">
-    <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <style type="text/css">
-		.access-denied,.site-url-text{letter-spacing:.01em;color:#fff}body{background:#111216}.main-container{display:flex;justify-content:center;flex-direction:column;align-items:center}.container{width:688px;height:456px;background:#1c1e22;border-radius:16px;margin-top:120px}.content{height:330px;margin:64px}.access-denied{font-family:Verdana;font-style:normal;font-weight:600;font-size:24px;line-height:32px;display:flex;align-items:center}.descp-text,.site-url{display:flex;align-items:center}.site-url{margin-top:32px;width:560px;height:64px;background:#26282c;border-radius:4px}.reason-code-text,.site-url-text{font-family:Verdana;font-style:normal;border:none;background:#26282c}.site-url-text{text-overflow: ellipsis;font-weight:400;font-size:16px;line-height:24px;margin-left:16px;width:85%}.copy-icon{width:19px;height:22px;margin-left:20px}.copy-icon:hover{cursor:pointer}.reason-code-text{font-weight:600;font-size:24px;line-height:32px;letter-spacing:.01em;color:#AFE614;margin-left:16px;width:85%}.descp-text,.return-text{font-size:16px;line-height:24px;letter-spacing:.01em;font-weight:400}.return-text:hover{color: #AFE614}.descp-text,.logoText,.return-text,.secured-text{font-family:Verdana;font-style:normal;color:#fff}.descp{margin-top:32px;width:560px}.bottom-second-containers,.bottom-text-containers{align-items:center;display:flex}.bottom-container{margin-top:40px;display:flex;width:688px}.bottom-second-containers{margin-left:auto}.arrow-vector{margin-left:20px}.return-text{text-align:center;margin-left:12.59px;text-decoration:none}.secured-text{font-weight:400;font-size:11.2px;line-height:16px;display:flex;align-items:center;letter-spacing:.02em;margin-right:8px}.logoText{font-weight:600;font-size:16px;line-height:24px;letter-spacing:.01em;flex:none;order:1;flex-grow:0}.patch-logo{width:120px}.mobile-bottom-container{margin-top:40px;width:372px;display:none}.mobile-bottom-second-containers{margin-top:64px;display:flex;margin-left:16.5px}@media only screen and (max-width:900px){.container{background:#111216;width:370px;height:auto;margin-top:0}.content{margin-left:16.5px}.descp,.site-url{width:340px}.site-url-text{font-weight:400;font-size:14.4px;line-height:20px;letter-spacing:.02em;width:80%}.copy-icon{margin-left:20px}.reason-code-text{font-size:16px;line-height:32px;letter-spacing:.02em;margin-left:16px;width:80%}.descp-text,.return-text{font-size:14.4px;line-height:20px}.descp-text{display:flex;align-items:center;letter-spacing:.02em}.bottom-container{display:none}.mobile-bottom-container{display:block}.return-text{text-align:center;letter-spacing:.01em;color:#fff;margin-left:9.73px}}
-    </style>
-    <title>Access Denied</title>
-</head>
-<body>
-    <div class="main-container">
-        <div class="container">
-            <div class="content">
-                <span class="access-denied">Access Denied</span>
-                <div class="site-url">
-                    <input id="url" class="site-url-text" type="text"
-                        value="${safeUrl}" readonly>
-                    <img class="copy-icon" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTkiIGhlaWdodD0iMjMiIHZpZXdCb3g9IjAgMCAxOSAyMyIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTE0IDAuMDIzNDM3NUgwVjE2LjAyMzRIMlYyLjAyMzQ0SDE0VjAuMDIzNDM3NVpNMTkgNC4wMjM0NEg0VjIyLjAyMzRIMTlWNC4wMjM0NFpNMTcgMjAuMDIzNEg2VjYuMDIzNDRIMTdWMjAuMDIzNFoiIGZpbGw9IndoaXRlIi8+Cjwvc3ZnPgo=" alt="Copy Text" onmouseover="hover(this);" onmouseout="unhover(this);" onclick="copyText(id='url')">
-                </div>
-                <div class="site-url">
-                    <input id="response" class="reason-code-text" type="text" value="${safeCode}" readonly>
-                    <img class="copy-icon" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTkiIGhlaWdodD0iMjMiIHZpZXdCb3g9IjAgMCAxOSAyMyIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTE0IDAuMDIzNDM3NUgwVjE2LjAyMzRIMlYyLjAyMzQ0SDE0VjAuMDIzNDM3NVpNMTkgNC4wMjM0NEg0VjIyLjAyMzRIMTlWNC4wMjM0NFpNMTcgMjAuMDIzNEg2VjYuMDIzNDRIMTdWMjAuMDIzNFoiIGZpbGw9IndoaXRlIi8+Cjwvc3ZnPgo=" alt="Copy Text" onmouseover="hover(this);" onmouseout="unhover(this);" onclick="copyText(id='response')">
-                </div>
-                <div class="descp">
-                    <span class="descp-text">This request has been blocked by Patchstack. If this message persists and you are a legitimate user, contact the site administrator with the reference above.</span>
-                </div>
-            </div>
-        </div>
-        <div class="bottom-container">
-            <div class="bottom-text-containers">
-                <img class="arrow-vector" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iOCIgaGVpZ2h0PSIxMyIgdmlld0JveD0iMCAwIDggMTMiIGZpbGw9Im5vbmUiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+CjxwYXRoIGQ9Ik03LjQxIDEuNDMzNDRMNiAwLjAyMzQzNzVMMCA2LjAyMzQ0TDYgMTIuMDIzNEw3LjQxIDEwLjYxMzRMMi44MyA2LjAyMzQ0TDcuNDEgMS40MzM0NFoiIGZpbGw9IiNBRkU2MTQiLz4KPC9zdmc+Cg==" alt="Arrow Left">
-                <a href="/" class="return-text">Return to homepage</a>
-            </div>
-            <div class="bottom-second-containers">
-                <span class="secured-text">This website is secured by</span>
-                <a href="https://patchstack.com" class="logoText">
-                    <img class="patch-logo" src="data:image/svg+xml;base64,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" alt="Patchstack Logo">
-				</a>
-            </div>
-        </div>
-    
-        <div class="mobile-bottom-container">
-            <div class="mobile-bottom-text-containers">
-                <img class="arrow-vector" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iOCIgaGVpZ2h0PSIxMyIgdmlld0JveD0iMCAwIDggMTMiIGZpbGw9Im5vbmUiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+CjxwYXRoIGQ9Ik03LjQxIDEuNDMzNDRMNiAwLjAyMzQzNzVMMCA2LjAyMzQ0TDYgMTIuMDIzNEw3LjQxIDEwLjYxMzRMMi44MyA2LjAyMzQ0TDcuNDEgMS40MzM0NFoiIGZpbGw9IiNBRkU2MTQiLz4KPC9zdmc+Cg==" alt="Arrow Left">
-                <a href="/" class="return-text">Return to homepage</a>
-            </div>
-            <div class="mobile-bottom-second-containers">
-                <span class="secured-text">This website is secured by</span>
-                <a href="https://patchstack.com" class="logoText">
-                    <img class="patch-logo" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTg0IiBoZWlnaHQ9IjIyIiB2aWV3Qm94PSIwIDAgMTg0IDIyIiBmaWxsPSJub25lIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPgo8cGF0aCBmaWxsLXJ1bGU9ImV2ZW5vZGQiIGNsaXAtcnVsZT0iZXZlbm9kZCIgZD0iTTUwLjQwMDEgMTEuNTAwOEM1MC40MDAxIDkuMTAwNzggNDkuMzAwMSA4LjEwMDc4IDQ2LjYwMDEgOC4xMDA3OEM0NC4wMDAxIDguMTAwNzggNDIuNzAwMSA5LjIwMDc4IDQyLjcwMDEgMTEuNTAwOEM0Mi43MDAxIDEzLjgwMDggNDQuMDAwMSAxNC45MDA4IDQ2LjYwMDEgMTQuOTAwOEM0OS4zMDAxIDE0LjkwMDggNTAuNDAwMSAxMy44MDA4IDUwLjQwMDEgMTEuNTAwOFpNNTMuNDAwMSAxMS41MDA4QzUzLjQwMDEgMTUuMzAwOCA1MS4zMDAxIDE3LjYwMDggNDcuNDAwMSAxNy42MDA4QzQ1LjQwMDEgMTcuNjAwOCA0My42MDAxIDE2LjUwMDggNDIuNzAwMSAxNC41MDA4VjIxLjUwMDhIMzkuNjAwMVY1LjYwMDc4SDQyLjcwMDFWOC41MDA3OEM0My42MDAxIDYuNTAwNzggNDUuNDAwMSA1LjMwMDc4IDQ3LjUwMDEgNS4zMDA3OEM1MS40MDAxIDUuMzAwNzggNTMuNDAwMSA3LjcwMDc4IDUzLjQwMDEgMTEuNTAwOFoiIGZpbGw9IndoaXRlIi8+CjxwYXRoIGZpbGwtcnVsZT0iZXZlbm9kZCIgY2xpcC1ydWxlPSJldmVub2RkIiBkPSJNNjYuNDAwMSAxMS40OTg0QzY2LjQwMDEgOS4xOTg0NCA2NS4xMDAxIDguMDk4NDQgNjIuNTAwMSA4LjA5ODQ0QzU5LjgwMDEgOC4wOTg0NCA1OC43MDAxIDkuMDk4NDQgNTguNzAwMSAxMS40OTg0QzU4LjcwMDEgMTMuNzk4NCA1OS44MDAxIDE0Ljg5ODQgNjIuNTAwMSAxNC44OTg0QzY1LjEwMDEgMTQuODk4NCA2Ni40MDAxIDEzLjc5ODQgNjYuNDAwMSAxMS40OTg0Wk02Ni4zMDAxIDUuNTk4NDRINjkuNDAwMVYxNy4zOTg0SDY2LjMwMDFWMTQuNDk4NEM2NS40MDAxIDE2LjQ5ODQgNjMuNzAwMSAxNy42OTg0IDYxLjYwMDEgMTcuNjk4NEM1Ny43MDAxIDE3LjY5ODQgNTUuNjAwMSAxNS4yOTg0IDU1LjYwMDEgMTEuNTk4NEM1NS42MDAxIDcuNzk4NDQgNTcuNjAwMSA1LjM5ODQ0IDYxLjQwMDEgNS4zOTg0NEM2My41MDAxIDUuMzk4NDQgNjUuNDAwMSA2LjU5ODQ0IDY2LjIwMDEgOC41OTg0NFY1LjU5ODQ0SDY2LjMwMDFaIiBmaWxsPSJ3aGl0ZSIvPgo8cGF0aCBmaWxsLXJ1bGU9ImV2ZW5vZGQiIGNsaXAtcnVsZT0iZXZlbm9kZCIgZD0iTTgxLjM5OTkgOC4zSDc3LjM5OTlWMTQuN0g4MS4wOTk5VjE3LjRINzcuOTk5OUM3NS43OTk5IDE3LjQgNzQuMjk5OSAxNS45IDc0LjI5OTkgMTMuN1Y4LjNINzEuMzk5OVY1LjZINzQuMjk5OVYySDc3LjM5OTlWNS41SDgxLjM5OTlWOC4zWiIgZmlsbD0id2hpdGUiLz4KPHBhdGggZmlsbC1ydWxlPSJldmVub2RkIiBjbGlwLXJ1bGU9ImV2ZW5vZGQiIGQ9Ik05My42OTk5IDEyLjIwMDhMOTYuNjk5OSAxMi45MDA4Qzk1Ljk5OTkgMTYuMDAwOCA5My42OTk5IDE3LjYwMDggODkuOTk5OSAxNy42MDA4Qzg3Ljc5OTkgMTcuNjAwOCA4Ni4wOTk5IDE3LjAwMDggODQuNzk5OSAxNS45MDA4QzgzLjQ5OTkgMTQuODAwOCA4Mi44OTk5IDEzLjMwMDggODIuODk5OSAxMS41MDA4QzgyLjg5OTkgOS42MDA3OCA4My40OTk5IDguMTAwNzggODQuNzk5OSA3LjAwMDc4Qzg2LjA5OTkgNS45MDA3OCA4Ny43OTk5IDUuMzAwNzggODkuOTk5OSA1LjMwMDc4QzkzLjY5OTkgNS4zMDA3OCA5NS45OTk5IDYuOTAwNzggOTYuNjk5OSAxMC4wMDA4TDkzLjY5OTkgMTAuNzAwOEM5My4yOTk5IDguODAwNzggOTIuMjk5OSA4LjEwMDc4IDg5Ljg5OTkgOC4xMDA3OEM4Ni45OTk5IDguMTAwNzggODUuODk5OSA5LjIwMDc4IDg1Ljg5OTkgMTEuNTAwOEM4NS44OTk5IDEzLjgwMDggODYuOTk5OSAxNC45MDA4IDg5Ljg5OTkgMTQuOTAwOEM5Mi4yOTk5IDE0LjkwMDggOTMuMjk5OSAxNC4yMDA4IDkzLjY5OTkgMTIuMjAwOFoiIGZpbGw9IndoaXRlIi8+CjxwYXRoIGZpbGwtcnVsZT0iZXZlbm9kZCIgY2xpcC1ydWxlPSJldmVub2RkIiBkPSJNMTExLjggMTAuNlYxNy40SDEwOC43VjExLjJDMTA4LjcgOSAxMDcuOCA4LjEgMTA1LjkgOC4xQzEwMy42IDguMSAxMDIuNCA5LjMgMTAyLjQgMTEuN1YxNy4zSDk5LjI5OThWMC41SDEwMi40VjguM0MxMDMuMSA2LjMgMTA0LjYgNS4zIDEwNyA1LjNDMTEwLjIgNS4zIDExMS44IDcuMSAxMTEuOCAxMC42WiIgZmlsbD0id2hpdGUiLz4KPHBhdGggZmlsbC1ydWxlPSJldmVub2RkIiBjbGlwLXJ1bGU9ImV2ZW5vZGQiIGQ9Ik0xMTQuMSAxNC4wOTg0TDExNy4xIDEzLjI5ODRDMTE3LjQgMTQuNzk4NCAxMTguMyAxNS4yOTg0IDEyMC4yIDE1LjI5ODRDMTIxLjggMTUuMjk4NCAxMjIuNyAxNC44OTg0IDEyMi43IDE0LjA5ODRDMTIyLjcgMTMuMjk4NCAxMjIuMiAxMi45OTg0IDEyMC42IDEyLjc5ODRMMTE4LjIgMTIuNDk4NEMxMTUuOSAxMi4xOTg0IDExNC41IDEwLjg5ODQgMTE0LjUgOC45OTg0NEMxMTQuNSA2Ljc5ODQ0IDExNi41IDUuMzk4NDQgMTE5LjggNS4zOTg0NEMxMjMuMSA1LjM5ODQ0IDEyNSA2LjY5ODQ0IDEyNS41IDguODk4NDRMMTIyLjUgOS41OTg0NEMxMjIuMyA4LjA5ODQ0IDEyMS41IDcuNjk4NDQgMTE5LjkgNy42OTg0NEMxMTguNCA3LjY5ODQ0IDExNy42IDguMDk4NDQgMTE3LjYgOC44OTg0NEMxMTcuNiA5LjU5ODQ0IDExOC4xIDkuOTk4NDQgMTE5LjMgMTAuMDk4NEwxMjIuMiAxMC40OTg0QzEyNC40IDEwLjc5ODQgMTI1LjggMTEuOTk4NCAxMjUuOCAxMy44OTg0QzEyNS44IDE2LjI5ODQgMTIzLjcgMTcuNzk4NCAxMjAuMSAxNy43OTg0QzExNi43IDE3LjU5ODQgMTE0LjUgMTYuMTk4NCAxMTQuMSAxNC4wOTg0WiIgZmlsbD0id2hpdGUiLz4KPHBhdGggZmlsbC1ydWxlPSJldmVub2RkIiBjbGlwLXJ1bGU9ImV2ZW5vZGQiIGQ9Ik0xMzYuNyA4LjNIMTMyLjdWMTQuN0gxMzYuNFYxNy40SDEzMy4zQzEzMS4xIDE3LjQgMTI5LjYgMTUuOSAxMjkuNiAxMy43VjguM0gxMjYuN1Y1LjZIMTI5LjZWMkgxMzIuN1Y1LjVIMTM2LjdWOC4zWiIgZmlsbD0id2hpdGUiLz4KPHBhdGggZmlsbC1ydWxlPSJldmVub2RkIiBjbGlwLXJ1bGU9ImV2ZW5vZGQiIGQ9Ik0xNDkuMiAxMS40OTg0QzE0OS4yIDkuMTk4NDQgMTQ3LjkgOC4wOTg0NCAxNDUuMyA4LjA5ODQ0QzE0Mi42IDguMDk4NDQgMTQxLjUgOS4wOTg0NCAxNDEuNSAxMS40OTg0QzE0MS41IDEzLjc5ODQgMTQyLjYgMTQuODk4NCAxNDUuMyAxNC44OTg0QzE0Ny45IDE0Ljg5ODQgMTQ5LjIgMTMuNzk4NCAxNDkuMiAxMS40OTg0Wk0xNDkuMSA1LjU5ODQ0SDE1Mi4yVjE3LjM5ODRIMTQ5LjFWMTQuNDk4NEMxNDguMiAxNi40OTg0IDE0Ni41IDE3LjY5ODQgMTQ0LjQgMTcuNjk4NEMxNDAuNSAxNy42OTg0IDEzOC40IDE1LjI5ODQgMTM4LjQgMTEuNTk4NEMxMzguNCA3Ljc5ODQ0IDE0MC40IDUuMzk4NDQgMTQ0LjIgNS4zOTg0NEMxNDYuMyA1LjM5ODQ0IDE0OC4yIDYuNTk4NDQgMTQ5IDguNTk4NDRWNS41OTg0NEgxNDkuMVoiIGZpbGw9IndoaXRlIi8+CjxwYXRoIGZpbGwtcnVsZT0iZXZlbm9kZCIgY2xpcC1ydWxlPSJldmVub2RkIiBkPSJNMTY1LjYgMTIuMjAwOEwxNjguNiAxMi45MDA4QzE2Ny45IDE2LjAwMDggMTY1LjYgMTcuNjAwOCAxNjEuOSAxNy42MDA4QzE1OS43IDE3LjYwMDggMTU4IDE3LjAwMDggMTU2LjcgMTUuOTAwOEMxNTUuNCAxNC44MDA4IDE1NC44IDEzLjMwMDggMTU0LjggMTEuNTAwOEMxNTQuOCA5LjYwMDc4IDE1NS40IDguMTAwNzggMTU2LjcgNy4wMDA3OEMxNTggNS45MDA3OCAxNTkuNyA1LjMwMDc4IDE2MS45IDUuMzAwNzhDMTY1LjYgNS4zMDA3OCAxNjcuOSA2LjkwMDc4IDE2OC42IDEwLjAwMDhMMTY1LjYgMTAuNzAwOEMxNjUuMiA4LjgwMDc4IDE2NC4yIDguMTAwNzggMTYxLjggOC4xMDA3OEMxNTguOSA4LjEwMDc4IDE1Ny44IDkuMjAwNzggMTU3LjggMTEuNTAwOEMxNTcuOCAxMy44MDA4IDE1OC45IDE0LjkwMDggMTYxLjggMTQuOTAwOEMxNjQuMSAxNC45MDA4IDE2NS4xIDE0LjIwMDggMTY1LjYgMTIuMjAwOFoiIGZpbGw9IndoaXRlIi8+CjxwYXRoIGZpbGwtcnVsZT0iZXZlbm9kZCIgY2xpcC1ydWxlPSJldmVub2RkIiBkPSJNMTgwLjI1NyAxNy40TDE3Ni42NTcgMTIuM0wxNzQuMTU3IDE0LjZWMTcuNEgxNzEuMTU3VjAuNUgxNzQuMTU3VjExLjFMMTc5Ljg1NyA1LjZIMTgzLjc1N0wxNzguNTU3IDEwLjVMMTgzLjk1NyAxNy40SDE4MC4yNTdaIiBmaWxsPSJ3aGl0ZSIvPgo8cGF0aCBmaWxsLXJ1bGU9ImV2ZW5vZGQiIGNsaXAtcnVsZT0iZXZlbm9kZCIgZD0iTTAgMjEuNTAwOEg3LjNWMTYuMzAwOEgwVjIxLjUwMDhaIiBmaWxsPSIjQUZFNjE0Ii8+CjxwYXRoIGZpbGwtcnVsZT0iZXZlbm9kZCIgY2xpcC1ydWxlPSJldmVub2RkIiBkPSJNNy4yOTk4IDIxLjUwMDhIMTQuNTk5OFYxNi4zMDA4SDcuMjk5OFYyMS41MDA4WiIgZmlsbD0iIzZFQkUwMCIvPgo8cGF0aCBmaWxsLXJ1bGU9ImV2ZW5vZGQiIGNsaXAtcnVsZT0iZXZlbm9kZCIgZD0iTTE0LjYwMDEgMTYuM0gyOS4yMDAxVjAuNUgxNC42MDAxVjE2LjNaIiBmaWxsPSIjQUZFNjE0Ii8+CjxwYXRoIGZpbGwtcnVsZT0iZXZlbm9kZCIgY2xpcC1ydWxlPSJldmVub2RkIiBkPSJNMCAxMUgxNC42VjAuNUgwVjExWiIgZmlsbD0iIzZFQkUwMCIvPgo8L3N2Zz4K" alt="Patchstack Logo">
-				</a>
-            </div>
-        </div>
-    </div>
-</body>
-<script>
-    function copyText(id) {
-        var copyText = document.getElementById(id)
-        copyText.select();
-        copyText.setSelectionRange(0, 99999);
-        navigator.clipboard.writeText(copyText.value);
-    }
-
-    function hover(element) {
-        element.setAttribute('src', 'data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTkiIGhlaWdodD0iMjMiIHZpZXdCb3g9IjAgMCAxOSAyMyIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTE0IDAuMDIzNDM3NUgwVjE2LjAyMzRIMlYyLjAyMzQ0SDE0VjAuMDIzNDM3NVpNMTkgNC4wMjM0NEg0VjIyLjAyMzRIMTlWNC4wMjM0NFpNMTcgMjAuMDIzNEg2VjYuMDIzNDRIMTdWMjAuMDIzNFoiIGZpbGw9IiNBRkU2MTQiLz4KPC9zdmc+Cg==');
-    }
-
-    function unhover(element) {
-        element.setAttribute('src', 'data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTkiIGhlaWdodD0iMjMiIHZpZXdCb3g9IjAgMCAxOSAyMyIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTE0IDAuMDIzNDM3NUgwVjE2LjAyMzRIMlYyLjAyMzQ0SDE0VjAuMDIzNDM3NVpNMTkgNC4wMjM0NEg0VjIyLjAyMzRIMTlWNC4wMjM0NFpNMTcgMjAuMDIzNEg2VjYuMDIzNDRIMTdWMjAuMDIzNFoiIGZpbGw9IndoaXRlIi8+Cjwvc3ZnPgo=');
-    }
-</script>
-</html>`;
-}
-
-// src/protect/rules/store.js
-var fsMod;
-async function loadFs() {
-  if (fsMod !== void 0) return fsMod;
-  try {
-    const [fs, path] = await Promise.all([import("fs"), import("path")]);
-    fsMod = {
-      readFileSync: fs.readFileSync,
-      writeFileSync: fs.writeFileSync,
-      mkdirSync: fs.mkdirSync,
-      join: path.join
-    };
-  } catch {
-    fsMod = null;
-  }
-  return fsMod;
-}
-function makeStore(options = {}) {
-  let mem = null;
-  const durable = durableTier(options);
-  return {
-    async read() {
-      if (mem) return mem;
-      const env = await durable.read();
-      if (env) mem = env;
-      return env;
-    },
-    async write(env) {
-      if (env) mem = env;
-      await durable.write(env);
-    }
-  };
-}
-function durableTier(options) {
-  const adapter = options.ruleCache;
-  if (adapter && typeof adapter.read === "function" && typeof adapter.write === "function") {
-    return {
-      read: async () => {
-        try {
-          return toEnvelope(await adapter.read());
-        } catch {
-          return null;
-        }
-      },
-      write: async (env) => {
-        try {
-          await adapter.write(env);
-        } catch {
-        }
-      }
-    };
+  const contentType = headers["content-type"] || "";
+  let body = {};
+  let files;
+  if (rawBody) {
+    const parsed = parseBody(rawBody, contentType);
+    body = parsed.body;
+    files = parsed.files;
   }
-  const dir = options.cacheDir;
+  const uri = url.pathname + url.search;
+  const client = resolveClientIp({ peer: options.peer, headers, trustedProxy: options.trustedProxy });
   return {
-    read: async () => cacheRead(dir),
-    write: async (env) => cacheWrite(dir, env)
+    method,
+    url: uri,
+    originalUrl: uri,
+    query,
+    body,
+    files,
+    headers,
+    // The resolved address, as an own property. Nothing downstream re-derives or falls back: a consumer
+    // that guessed differently would attribute one request to two addresses.
+    ip: client.ip ?? "",
+    _clientIp: client,
+    cookies: parseCookies(headers.cookie),
+    // Verbatim body text: preserves literal keys (e.g. `__proto__`) that JSON.stringify
+    // drops, so prototype-pollution rules on `raw` are robust.
+    _rawBody: rawBody
   };
 }
-async function cacheWrite(dir, env) {
-  if (!dir) return;
-  const fs = await loadFs();
-  if (!fs) return;
+async function readCappedText(request, max) {
+  let clone;
   try {
-    fs.mkdirSync(dir, { recursive: true });
-    fs.writeFileSync(fs.join(dir, "patchstack-rules.json"), JSON.stringify(env));
+    clone = request.clone();
   } catch {
+    return "";
+  }
+  const body = clone.body;
+  if (body && typeof body.getReader === "function") {
+    const reader = body.getReader();
+    const chunks = [];
+    let buffered = 0;
+    try {
+      for (; ; ) {
+        const { done, value } = await reader.read();
+        if (done) break;
+        if (!value || buffered >= max) continue;
+        const take = Math.min(value.byteLength, max - buffered);
+        chunks.push(take === value.byteLength ? value : value.subarray(0, take));
+        buffered += take;
+      }
+    } catch {
+      return "";
+    }
+    try {
+      return new TextDecoder().decode(concatChunks(chunks, buffered));
+    } catch {
+      return "";
+    }
   }
-}
-async function cacheRead(dir) {
-  if (!dir) return null;
-  const fs = await loadFs();
-  if (!fs) return null;
   try {
-    return toEnvelope(JSON.parse(fs.readFileSync(fs.join(dir, "patchstack-rules.json"), "utf8")));
+    const text = await clone.text();
+    return text.length > max ? text.slice(0, max) : text;
   } catch {
-    return null;
-  }
-}
-function toEnvelope(value) {
-  if (!value || typeof value !== "object") return null;
-  if (value.bundle && typeof value.bundle === "object") {
-    return { bundle: value.bundle, etag: value.etag ?? null };
-  }
-  if (Array.isArray(value.firewall) || Array.isArray(value.whitelists)) {
-    return { bundle: value, etag: null };
+    return "";
   }
-  return null;
 }
-
-// src/protect/rules/contract.js
-var SOURCES = Object.freeze({
-  raw: Object.freeze({ keyed: false }),
-  all: Object.freeze({ keyed: false }),
-  false: Object.freeze({ keyed: false }),
-  rules: Object.freeze({ keyed: false, group: true }),
-  get: Object.freeze({ keyed: true, keys: "any", wildcard: true }),
-  post: Object.freeze({ keyed: true, keys: "any", wildcard: true }),
-  request: Object.freeze({ keyed: true, keys: "any", wildcard: true }),
-  cookie: Object.freeze({ keyed: true, keys: "any", wildcard: true }),
-  // A bare `files.<name>` resolves to the filename; an optional trailing attribute selects another part
-  // of the upload. Optional, not required — filename-scoped rules use the bare form.
-  files: Object.freeze({
-    keyed: true,
-    keys: "any",
-    wildcard: true,
-    optional_key_suffixes: Object.freeze(["content", "filename", "type"])
-  }),
-  server: Object.freeze({
-    keyed: true,
-    keys: Object.freeze([
-      "REQUEST_URI",
-      "REQUEST_METHOD",
-      "HTTP_USER_AGENT",
-      "HTTP_REFERER",
-      "HTTP_HOST",
-      "REMOTE_ADDR",
-      "ip",
-      "CONTENT_TYPE",
-      "CONTENT_LENGTH"
-    ]),
-    key_prefixes: Object.freeze(["HTTP_"])
-  }),
-  response: Object.freeze({
-    keyed: true,
-    keys: Object.freeze(["status", "body", "headers"]),
-    key_prefixes: Object.freeze(["header."])
-  }),
-  egress: Object.freeze({ keyed: true, keys: Object.freeze(["url", "host", "method"]) })
-});
-var MATCH_TYPES = Object.freeze([
-  "array_in_array",
-  "array_key_value",
-  "contains",
-  "cors_reflected",
-  "cross_origin",
-  "ctype_alnum",
-  "ctype_digit",
-  "ctype_special",
-  "equals",
-  "equals_strict",
-  "hostname",
-  "in_array",
-  "inline_js_xss",
-  "inline_xss",
-  "internal_host",
-  "is_numeric",
-  "isset",
-  "jwt_claim_equals",
-  "less_than",
-  "more_than",
-  "not_contains",
-  "not_in_array",
-  "off_origin",
-  "quotes",
-  "regex",
-  "stripos"
-]);
-var PARAMETERLESS_MATCH_TYPES = Object.freeze(["cross_origin", "off_origin", "cors_reflected"]);
-var OPERANDLESS_MATCH_TYPES = Object.freeze([
-  "isset",
-  "quotes",
-  "is_numeric",
-  "ctype_alnum",
-  "ctype_digit",
-  "ctype_special",
-  "inline_xss",
-  "inline_js_xss",
-  "internal_host",
-  "cross_origin",
-  "off_origin",
-  "cors_reflected"
-]);
-var OPERAND_SHAPES = Object.freeze([
-  "positive-number",
-  "boolean",
-  "non-empty-string",
-  "regex-literal",
-  "string-or-string-list",
-  "scalar",
-  "string",
-  "numeric",
-  "scalar-or-non-empty-list",
-  "non-empty-list",
-  "object",
-  "non-empty-object",
-  "non-empty-string-list",
-  "header-name-map",
-  "header-name-list",
-  "cookie-flags"
-]);
-var COOKIE_FLAGS = Object.freeze(["httpOnly", "secure", "sameSite"]);
-var SAME_SITE_VALUES = Object.freeze(["Strict", "Lax", "None"]);
-var HEADER_NAME = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
-var REGEX_LITERAL = /^\/(.+?)\/([gimsuy]*)$/s;
-var MATCH_OPERANDS = Object.freeze({
-  array_key_value: Object.freeze({
-    required: Object.freeze(["key", "match"]),
-    shapes: Object.freeze({ key: "string-or-string-list", match: "object" })
-  }),
-  // Decides on a JWT's DECODED payload rather than its shape, and yields the matching token spans so
-  // `redact` masks only those tokens. `claim` names an own, top-level claim; `value` is compared with
-  // exact string equality. Anything not positively identified — undecodable, not JSON, not an object,
-  // oversized, claim missing, claim not a string, or a different value — is a no-match.
-  jwt_claim_equals: Object.freeze({
-    required: Object.freeze(["claim", "value"]),
-    shapes: Object.freeze({ claim: "non-empty-string", value: "non-empty-string" })
-  }),
-  regex: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "regex-literal" }) }),
-  contains: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "non-empty-string" }) }),
-  stripos: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "non-empty-string" }) }),
-  not_contains: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "non-empty-string" }) }),
-  // A hostname is compared to `new URL(value).hostname`, so an empty one only ever equals the empty
-  // hostname of an opaque-scheme URL (`file:`, `mailto:`, `data:`) — never a host, and a false positive
-  // on those. The other three are the list-membership family: an empty list makes `in_array` and
-  // `array_in_array` inert and `not_in_array` true for every value.
-  hostname: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "non-empty-string" }) }),
-  in_array: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "scalar-or-non-empty-list" }) }),
-  not_in_array: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "scalar-or-non-empty-list" }) }),
-  array_in_array: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "non-empty-list" }) }),
-  // The comparison family. `equals` coerces, so any scalar can match. `equals_strict` does not, and its
-  // subject is always a string by the time it is compared — so a number operand is unconditionally
-  // inert, which is the trap the engine's own note about `'1' !== 1` describes.
-  equals: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "scalar" }) }),
-  equals_strict: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "string" }) }),
-  less_than: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "numeric" }) }),
-  more_than: Object.freeze({ required: Object.freeze(["value"]), shapes: Object.freeze({ value: "numeric" }) })
-});
-function operandShapeProblem(shape, value) {
-  const isFilledString = (v) => typeof v === "string" && v.trim() !== "";
-  const isScalar = (v) => typeof v === "string" || typeof v === "number" || typeof v === "boolean";
-  const isHeaderName = (v) => typeof v === "string" && HEADER_NAME.test(v);
-  switch (shape) {
-    case "positive-number":
-      return typeof value === "number" && Number.isFinite(value) && value > 0 ? null : "must be a finite positive number";
-    case "boolean":
-      return typeof value === "boolean" ? null : "must be true or false";
-    case "non-empty-string":
-      return isFilledString(value) ? null : "must be a non-empty string";
-    case "regex-literal":
-      if (!isFilledString(value)) return "must be a non-empty string";
-      return REGEX_LITERAL.test(value) ? null : "must be a delimited pattern, as in /pattern/i";
-    case "string-or-string-list":
-      if (isFilledString(value)) return null;
-      if (Array.isArray(value) && value.length > 0 && value.every(isFilledString)) return null;
-      return "must be a non-empty string, or a non-empty list of them";
-    case "scalar":
-      return isScalar(value) ? null : "must be a string, number or boolean";
-    case "string":
-      return typeof value === "string" ? null : "must be a string (this comparison is type-strict)";
-    case "numeric":
-      return isScalar(value) && Number.isFinite(Number(value)) ? null : "must be a number";
-    case "scalar-or-non-empty-list":
-      if (isScalar(value)) return null;
-      if (Array.isArray(value) && value.length > 0 && value.every(isScalar)) return null;
-      return "must be a scalar, or a non-empty list of them";
-    case "non-empty-list":
-      return Array.isArray(value) && value.length > 0 && value.every(isScalar) ? null : "must be a non-empty list of scalars";
-    case "header-name-map": {
-      if (value === null || typeof value !== "object" || Array.isArray(value)) return "must be an object";
-      const names = Object.keys(value);
-      if (names.length === 0) return "must be an object with at least one entry";
-      const bad = names.find((name) => !isHeaderName(name));
-      return bad === void 0 ? null : `names an invalid HTTP header, ${JSON.stringify(bad)}`;
-    }
-    case "header-name-list": {
-      if (!Array.isArray(value) || value.length === 0) return "must be a non-empty list of HTTP header names";
-      const bad = value.find((name) => !isHeaderName(name));
-      return bad === void 0 ? null : `names an invalid HTTP header, ${JSON.stringify(bad)}`;
-    }
-    case "cookie-flags": {
-      if (value === null || typeof value !== "object" || Array.isArray(value)) return "must be an object";
-      const unknown = Object.keys(value).filter((key) => !COOKIE_FLAGS.includes(key));
-      if (unknown.length > 0) return `has no flag named ${unknown.map((k) => JSON.stringify(k)).join(", ")}`;
-      for (const flag of ["httpOnly", "secure"]) {
-        if (value[flag] !== void 0 && typeof value[flag] !== "boolean") {
-          return `flag "${flag}" must be true or false`;
-        }
-      }
-      const sameSite = value.sameSite;
-      const sameSiteOff = sameSite === false;
-      if (sameSite !== void 0 && !sameSiteOff) {
-        if (typeof sameSite !== "string" || !SAME_SITE_VALUES.some((v) => v.toLowerCase() === sameSite.toLowerCase())) {
-          return `flag "sameSite" must be false, or one of ${SAME_SITE_VALUES.join(", ")}`;
-        }
-      }
-      if (value.httpOnly === false && value.secure === false && sameSiteOff) {
-        return "turns off every flag, so it would harden nothing";
-      }
-      return null;
-    }
-    case "object":
-      return value !== null && typeof value === "object" && !Array.isArray(value) ? null : "must be an object";
-    case "non-empty-object":
-      return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).length > 0 ? null : "must be an object with at least one entry";
-    case "non-empty-string-list":
-      return Array.isArray(value) && value.length > 0 && value.every(isFilledString) ? null : "must be a non-empty list of non-empty strings";
-    default:
-      return null;
+function concatChunks(chunks, total) {
+  const out = new Uint8Array(total);
+  let offset = 0;
+  for (const c of chunks) {
+    out.set(c, offset);
+    offset += c.byteLength;
   }
+  return out;
 }
-var MUTATIONS = Object.freeze([
-  "base64_decode",
-  "getArrayValues",
-  "htmlentitydecode",
-  "intval",
-  "json_decode",
-  "json_encode",
-  "urldecode"
-]);
-var PHASES = Object.freeze(["request", "response", "egress"]);
-var ACTIONS = Object.freeze([
-  "block",
-  "redact",
-  "encode",
-  "set-header",
-  "remove-header",
-  "harden-cookie"
-]);
-var RULE_PROPERTY_SHAPES = Object.freeze({
-  max_bytes: "positive-number",
-  bypass_limit: "boolean",
-  ensure: "boolean",
-  prefilter: "non-empty-string-list"
-});
-var ENFORCEMENT_VALUES = Object.freeze(["dry-run"]);
-var WHEN_KEYS = Object.freeze(["path", "method"]);
-var RULE_PROPERTIES = Object.freeze([
-  "id",
-  "rule_id",
-  "title",
-  "category",
-  "phase",
-  "action",
-  "rule_v2",
-  "when",
-  "message",
-  "enforcement",
-  "source_revision",
-  "prefilter",
-  "max_bytes",
-  "bypass_limit",
-  "set_headers",
-  "remove_headers",
-  "cookie_flags",
-  "ensure"
-]);
-var ACTION_PROPERTIES = Object.freeze({
-  block: Object.freeze({ required: Object.freeze([]), defaulted: Object.freeze([]), phases: Object.freeze(["request", "response", "egress"]) }),
-  redact: Object.freeze({ required: Object.freeze([]), defaulted: Object.freeze([]), phases: Object.freeze(["response"]) }),
-  encode: Object.freeze({ required: Object.freeze([]), defaulted: Object.freeze([]), phases: Object.freeze(["response"]) }),
-  "set-header": Object.freeze({
-    required: Object.freeze(["set_headers"]),
-    defaulted: Object.freeze(["ensure"]),
-    phases: Object.freeze(["response"]),
-    shapes: Object.freeze({ set_headers: "header-name-map" })
-  }),
-  "remove-header": Object.freeze({
-    required: Object.freeze(["remove_headers"]),
-    defaulted: Object.freeze([]),
-    phases: Object.freeze(["response"]),
-    shapes: Object.freeze({ remove_headers: "header-name-list" })
-  }),
-  "harden-cookie": Object.freeze({
-    required: Object.freeze([]),
-    defaulted: Object.freeze(["cookie_flags"]),
-    phases: Object.freeze(["response"]),
-    shapes: Object.freeze({ cookie_flags: "cookie-flags" })
-  })
-});
-var LIMITS = Object.freeze({
-  maxRules: 5e3,
-  maxWhitelists: 2e3,
-  maxConditionsPerRule: 250,
-  maxNestingDepth: 12,
-  maxRegexLength: 1e3,
-  maxValueLength: 8192
-});
-var GROUP_PARAMETER = "rules";
-function isGroup(condition) {
-  return condition?.parameter === GROUP_PARAMETER && Array.isArray(condition?.rules);
-}
-function conditionShapeProblem(condition) {
-  if (!condition || typeof condition !== "object") return "condition is not an object";
-  const named = condition.parameter === GROUP_PARAMETER;
-  const nested = Array.isArray(condition.rules);
-  if (named && !nested) {
-    return `parameter "${GROUP_PARAMETER}" is a group and needs a "rules" array`;
+function parseBody(rawBody, contentType) {
+  const ct = String(contentType || "").toLowerCase();
+  const isJson = ct.includes("application/json") || /\+json\b/.test(ct);
+  const isForm = ct.includes("application/x-www-form-urlencoded");
+  const isMultipart = ct.includes("multipart/form-data");
+  const isAmbiguous = ct === "" || ct.startsWith("text/plain") || ct.includes("csp-report") || ct.includes("/json");
+  if (isMultipart) {
+    const boundary = /boundary=("?)([^";]+)\1/i.exec(contentType)?.[2];
+    if (boundary) return parseMultipart(rawBody, boundary);
+    return { body: {}, files: void 0 };
   }
-  if (nested && !named) {
-    return `condition carries nested rules but its parameter is ${JSON.stringify(condition.parameter)}; a group must be {"parameter":"${GROUP_PARAMETER}"}`;
+  if (isForm) {
+    const body = {};
+    for (const [k, v] of new URLSearchParams(rawBody)) body[k] = k in body ? [].concat(body[k], v) : v;
+    return { body, files: void 0 };
   }
-  if (named && nested) {
-    if (condition.match !== void 0) return "a group carries no match of its own; the engine ignores it";
-    if (condition.mutations !== void 0) return "a group carries no mutations of its own; the engine ignores them";
-    if (condition.rules.length === 0) return "group has no conditions (would never match)";
+  if (isJson || isAmbiguous) {
+    try {
+      const parsed = JSON.parse(rawBody);
+      if (parsed && typeof parsed === "object") return { body: parsed, files: void 0 };
+    } catch {
+    }
   }
-  return null;
+  return { body: {}, files: void 0 };
 }
-function parameterProblem(parameter) {
-  if (parameter === void 0 || parameter === null) return null;
-  if (Array.isArray(parameter)) {
-    if (parameter.length === 0) return "parameter list is empty";
-    for (const member of parameter) {
-      const problem = parameterProblem(member);
-      if (problem !== null) return problem;
+function parseMultipart(rawBody, boundary) {
+  const body = {};
+  const files = {};
+  for (const part of rawBody.split("--" + boundary)) {
+    const sep = /\r?\n\r?\n/.exec(part);
+    if (!sep) continue;
+    const rawHeaders = part.slice(0, sep.index);
+    const disposition = /content-disposition:[^\r\n]*/i.exec(rawHeaders)?.[0];
+    if (!disposition) continue;
+    const name = /name="([^"]*)"/i.exec(disposition)?.[1];
+    if (name == null) continue;
+    const content = part.slice(sep.index + sep[0].length).replace(/\r?\n$/, "");
+    const filename = /filename="([^"]*)"/i.exec(disposition)?.[1];
+    if (filename !== void 0) {
+      const partType = /content-type:\s*([^\r\n;]+)/i.exec(rawHeaders)?.[1]?.trim() || "";
+      const file = { filename, type: partType, content };
+      files[name] = name in files ? [].concat(files[name], file) : file;
+    } else {
+      body[name] = name in body ? [].concat(body[name], content) : content;
     }
-    return null;
   }
-  if (typeof parameter !== "string" || parameter === "") return "parameter must be a non-empty string";
-  if (parameter === GROUP_PARAMETER) {
-    return `"${GROUP_PARAMETER}" is the group source and is only valid as a whole group, not as a parameter`;
+  return { body, files };
+}
+function parseCookies(header) {
+  const cookies = {};
+  if (!header) {
+    return cookies;
   }
-  const dot = parameter.indexOf(".");
-  const name = dot === -1 ? parameter : parameter.slice(0, dot);
-  const source = SOURCES[name];
-  if (source === void 0) return `unknown parameter source "${name}"`;
-  if (dot === -1) {
-    return source.keyed === true ? `source "${name}" needs a key, e.g. "${name}.fieldname"` : null;
+  for (const pair of header.split(";")) {
+    const idx = pair.indexOf("=");
+    if (idx === -1) {
+      continue;
+    }
+    cookies[pair.slice(0, idx).trim()] = pair.slice(idx + 1).trim();
   }
-  if (source.keyed !== true) return `source "${name}" takes no key`;
-  const key = parameter.slice(dot + 1);
-  if (key === "") return `source "${name}" needs a key after the dot`;
-  return keyProblem(name, source, key);
+  return cookies;
 }
-function keyProblem(name, source, key) {
-  if (key.endsWith("*") && source.wildcard !== true) {
-    return `"${name}" does not fan out over a wildcard key`;
+
+// src/protect/engine/node.js
+function fromNodeRequest(req, rawBody = "", options = {}) {
+  const method = (req.method || "GET").toUpperCase();
+  const headers = {};
+  for (const [key, value] of Object.entries(req.headers || {})) {
+    headers[key.toLowerCase()] = Array.isArray(value) ? value.join(", ") : value;
+  }
+  const host = headers.host || "localhost";
+  let url;
+  try {
+    url = new URL(req.url || "/", `http://${host}`);
+  } catch {
+    try {
+      url = new URL(req.url || "/", "http://localhost");
+    } catch {
+      url = new URL("http://localhost/");
+    }
+  }
+  const query = {};
+  for (const [key, value] of url.searchParams) {
+    if (key in query) {
+      query[key] = Array.isArray(query[key]) ? [...query[key], value] : [query[key], value];
+    } else {
+      query[key] = value;
+    }
+  }
+  const contentType = headers["content-type"] || "";
+  let body = {};
+  let files;
+  if (rawBody) {
+    const parsed = parseBody(rawBody, contentType);
+    body = parsed.body;
+    files = parsed.files;
+  }
+  const uri = url.pathname + url.search;
+  const client = resolveClientIp({
+    peer: req.socket?.remoteAddress,
+    headers,
+    trustedProxy: options.trustedProxy
+  });
+  return {
+    method,
+    url: uri,
+    originalUrl: uri,
+    query,
+    body,
+    files,
+    headers,
+    ip: client.ip ?? "",
+    _clientIp: client,
+    cookies: parseCookies2(headers.cookie),
+    // Verbatim body text: preserves literal keys (e.g. `__proto__`) that JSON.stringify drops.
+    _rawBody: rawBody
+  };
+}
+function parseCookies2(header) {
+  const cookies = {};
+  if (!header) {
+    return cookies;
+  }
+  for (const pair of header.split(";")) {
+    const idx = pair.indexOf("=");
+    if (idx === -1) {
+      continue;
+    }
+    cookies[pair.slice(0, idx).trim()] = pair.slice(idx + 1).trim();
+  }
+  return cookies;
+}
+
+// src/protect/egress.js
+async function installEgressGuard({ shouldBlock, onBlock, onSkip, dnsScreen = true, lookup, allowHosts } = {}) {
+  const restores = [];
+  if (typeof shouldBlock !== "function") return () => {
+  };
+  const exempt = new Set((allowHosts ?? []).map((h) => String(h).toLowerCase()));
+  const block = (url, host, method) => {
+    if (!shouldBlock(url, host, method)) return false;
+    notify(onBlock, { url, host, method }, "onEgressBlock");
+    return true;
+  };
+  let screen = null;
+  if (dnsScreen) {
+    try {
+      const resolveLookup = lookup ?? (await import("dns")).lookup;
+      const { isIP } = await import("net");
+      if (typeof resolveLookup === "function" && typeof isIP === "function") {
+        screen = { lookup: resolveLookup, isIP, isExempt: (h) => exempt.has(String(h).toLowerCase()) };
+      }
+    } catch {
+      screen = null;
+    }
+  }
+  const skip = (reason, detail) => notify(onSkip, { phase: "egress", reason, detail }, "onSkip");
+  const resolvesToDisallowed = (url, host, method) => new Promise((resolve) => {
+    if (!screen) {
+      if (host && dnsScreen) skip("resolver-unavailable", { host });
+      return resolve(false);
+    }
+    if (!host || screen.isIP(host) !== 0 || screen.isExempt(host)) return resolve(false);
+    try {
+      screen.lookup(host, { all: true }, (err, addresses) => {
+        if (err || !Array.isArray(addresses)) {
+          skip("resolver-failed", { host });
+          return resolve(false);
+        }
+        for (const a of addresses) {
+          const ip = a && typeof a === "object" ? a.address : a;
+          if (ip && block(url, ip, method)) return resolve(true);
+        }
+        resolve(false);
+      });
+    } catch {
+      skip("resolver-failed", { host });
+      resolve(false);
+    }
+  });
+  const originalFetch = globalThis.fetch;
+  if (typeof originalFetch === "function" && !originalFetch.__patchstackGuarded) {
+    const REDIRECT_STATUSES = /* @__PURE__ */ new Set([301, 302, 303, 307, 308]);
+    const MAX_REDIRECTS = 20;
+    const screenUrl = async (u, method) => {
+      let host = null;
+      try {
+        host = new URL(u).hostname;
+      } catch {
+        host = null;
+      }
+      if (block(u, host, method) || await resolvesToDisallowed(u, host, method)) {
+        throw new Error(`Patchstack blocked an outbound request to a disallowed address: ${host ?? u}`);
+      }
+    };
+    const guarded = async (input, init) => {
+      let cur;
+      try {
+        cur = new Request(input, { ...init || {}, redirect: "manual" });
+      } catch {
+        return originalFetch(input, init);
+      }
+      const callerRedirect = init && init.redirect || input && input.redirect || "follow";
+      let url = cur.url;
+      let method = cur.method;
+      await screenUrl(url, method);
+      if (callerRedirect !== "follow") return originalFetch(input, init);
+      const headers = new Headers(cur.headers);
+      const signal = cur.signal;
+      let body = method === "GET" || method === "HEAD" ? void 0 : await cur.clone().arrayBuffer();
+      for (let hop = 0; ; hop++) {
+        const resp = await originalFetch(
+          hop === 0 ? cur : new Request(url, { method, headers, body, redirect: "manual", signal })
+        );
+        const location = REDIRECT_STATUSES.has(resp.status) ? resp.headers.get("location") : null;
+        if (!location) return resp;
+        if (hop >= MAX_REDIRECTS) throw new Error("Patchstack blocked an outbound request: too many redirects");
+        const next = new URL(location, url).href;
+        if (resp.status === 303 || (resp.status === 301 || resp.status === 302) && method === "POST") {
+          method = "GET";
+          body = void 0;
+          headers.delete("content-type");
+          headers.delete("content-length");
+        }
+        if (new URL(next).origin !== new URL(url).origin) {
+          headers.delete("authorization");
+          headers.delete("cookie");
+        }
+        await screenUrl(next, method);
+        url = next;
+      }
+    };
+    guarded.__patchstackGuarded = true;
+    globalThis.fetch = guarded;
+    restores.push(() => {
+      if (globalThis.fetch === guarded) globalThis.fetch = originalFetch;
+    });
   }
-  const bare = key.endsWith("*") ? key.slice(0, -1) : key;
-  if (source.keys === "any") return null;
-  if (Array.isArray(source.keys) && source.keys.includes(bare)) return null;
-  for (const prefix of source.key_prefixes ?? []) {
-    if (bare.startsWith(prefix) && bare.length > prefix.length) return null;
+  for (const moduleName of ["node:http", "node:https"]) {
+    try {
+      const mod = await import(moduleName);
+      const restore = patchHttpModule(mod.default ?? mod, block, screen);
+      if (restore) restores.push(restore);
+    } catch {
+    }
   }
-  const accepted = [
-    ...Array.isArray(source.keys) ? source.keys : [],
-    ...(source.key_prefixes ?? []).map((p) => `${p}\u2026`)
-  ].join(", ");
-  return `"${name}" has no key "${key}" (expected one of: ${accepted})`;
+  return () => {
+    for (const restore of restores) {
+      try {
+        restore();
+      } catch {
+      }
+    }
+  };
 }
-function matchProblem(match, parameter) {
-  if (!match || typeof match !== "object") return "condition has no match object";
-  if (typeof match.type !== "string" || match.type === "") return "match.type must be a non-empty string";
-  if (!MATCH_TYPES.includes(match.type)) return `unknown match type "${match.type}"`;
-  const parameterless = PARAMETERLESS_MATCH_TYPES.includes(match.type);
-  if (!parameterless && (parameter === void 0 || parameter === null)) {
-    return `match type "${match.type}" needs a parameter`;
-  }
-  if (parameterless && parameter !== void 0 && parameter !== null) {
-    return `match type "${match.type}" reads the whole request and takes no parameter`;
-  }
-  const operands = MATCH_OPERANDS[match.type];
-  if (operands) {
-    for (const required of operands.required) {
-      if (match[required] === void 0 || match[required] === null) {
-        return `match type "${match.type}" needs "${required}"`;
+function patchHttpModule(http, block, screen) {
+  if (!http || typeof http.request !== "function" || http.__patchstackGuarded) return null;
+  const originalRequest = http.request;
+  const originalGet = http.get;
+  const wrap = (original) => function(...args) {
+    const target = extractHttpTarget(args);
+    if (target && block(target.url, target.host, target.method)) {
+      throw new Error(`Patchstack blocked an outbound request to a disallowed address: ${target.host ?? target.url}`);
+    }
+    if (target && screen && target.host && screen.isIP(target.host) === 0 && !screen.isExempt(target.host)) {
+      try {
+        args = withScreeningLookup(args, target, block, screen.lookup);
+      } catch {
       }
     }
-    for (const [operand, shape] of Object.entries(operands.shapes ?? {})) {
-      if (match[operand] === void 0) continue;
-      const problem = operandShapeProblem(shape, match[operand]);
-      if (problem) return `match type "${match.type}" operand "${operand}" ${problem}`;
+    return original.apply(this, args);
+  };
+  const guardedRequest = wrap(originalRequest);
+  http.request = guardedRequest;
+  let guardedGet;
+  if (typeof originalGet === "function") {
+    guardedGet = wrap(originalGet);
+    http.get = guardedGet;
+  }
+  http.__patchstackGuarded = true;
+  return () => {
+    if (http.request === guardedRequest) http.request = originalRequest;
+    if (guardedGet && http.get === guardedGet) http.get = originalGet;
+    delete http.__patchstackGuarded;
+  };
+}
+function extractHttpTarget(args) {
+  const first = args[0];
+  try {
+    if (typeof first === "string" || first instanceof URL) {
+      const url = new URL(String(first));
+      const opts = args.find((a) => a && typeof a === "object" && !(a instanceof URL));
+      return { url: url.href, host: url.hostname, method: opts && opts.method || "GET" };
     }
-  } else if (!OPERANDLESS_MATCH_TYPES.includes(match.type) && match.value === void 0) {
-    return `match type "${match.type}" needs a value`;
+    if (first && typeof first === "object") {
+      const host = normalizeHost(first.hostname || first.host) || "localhost";
+      const protocol = first.protocol || "http:";
+      const port = first.port ? `:${first.port}` : "";
+      const path = first.path || "/";
+      return { url: `${protocol}//${host}${port}${path}`, host, method: first.method || "GET" };
+    }
+  } catch {
   }
   return null;
 }
-function mutationsProblem(mutations) {
-  if (mutations === void 0 || mutations === null) return null;
-  if (!Array.isArray(mutations)) return "mutations must be an array";
-  for (const mutation of mutations) {
-    if (typeof mutation !== "string" || !MUTATIONS.includes(mutation)) {
-      return `unknown mutation "${String(mutation)}" \u2014 applied as a no-op, so the condition would test the untransformed value`;
-    }
+function normalizeHost(raw) {
+  const host = String(raw || "").trim();
+  const bracketed = /^\[([^\]]+)\]/.exec(host);
+  if (bracketed) return bracketed[1];
+  if ((host.match(/:/g) || []).length > 1) return host;
+  return host.split(":")[0];
+}
+function screenResolved(addresses, target, block) {
+  for (const a of addresses || []) {
+    const ip = a && typeof a === "object" ? a.address : a;
+    if (ip && block(target.url, ip, target.method)) return ip;
   }
   return null;
 }
-function whenProblem(when) {
-  if (when === void 0 || when === null) return null;
-  if (typeof when !== "object" || Array.isArray(when)) return "when must be an object";
-  const keys = Object.keys(when);
-  if (keys.length === 0) return "when is empty \u2014 remove it, or name a path or method";
-  const unknown = keys.filter((key) => !WHEN_KEYS.includes(key));
-  if (unknown.length > 0) {
-    return `when names no supported key (${unknown.join(", ")}) \u2014 the engine understands ${WHEN_KEYS.join(" and ")}, and an unrecognised scope is ignored, so the rule would apply to every request`;
+function withScreeningLookup(args, target, block, lookup) {
+  const screeningLookup = (hostname, options, callback) => {
+    let opts = options;
+    let cb = callback;
+    if (typeof opts === "function") {
+      cb = opts;
+      opts = {};
+    }
+    if (!opts || typeof opts !== "object") opts = {};
+    try {
+      lookup(hostname, { ...opts, all: true }, (err, addresses) => {
+        if (err) return cb(err);
+        const list = Array.isArray(addresses) ? addresses : [];
+        const blocked = screenResolved(list, target, block);
+        if (blocked) {
+          return cb(new Error(`Patchstack blocked an outbound request to a disallowed address: ${target.host} resolved to ${blocked}`));
+        }
+        if (opts.all) return cb(null, list);
+        const first = list[0];
+        if (!first) return cb(new Error(`Patchstack: could not resolve ${hostname}`));
+        return cb(null, first.address, first.family);
+      });
+    } catch {
+      try {
+        lookup(hostname, opts, cb);
+      } catch {
+        cb(new Error(`Patchstack: lookup failed for ${hostname}`));
+      }
+    }
+  };
+  return injectLookupOption(args, screeningLookup);
+}
+function injectLookupOption(args, lookup) {
+  const first = args[0];
+  if (first && typeof first === "object" && !(first instanceof URL)) {
+    return [{ ...first, lookup }, ...args.slice(1)];
   }
-  if ("path" in when && !isNonEmptyString(when.path)) {
-    return "when.path must be a non-empty string";
+  const rest = args.slice(1);
+  const optIdx = rest.findIndex((a) => a && typeof a === "object" && !(a instanceof URL));
+  if (optIdx !== -1) {
+    const next = [...rest];
+    next[optIdx] = { ...rest[optIdx], lookup };
+    return [first, ...next];
+  }
+  const cbIdx = rest.findIndex((a) => typeof a === "function");
+  if (cbIdx === -1) return [first, { lookup }, ...rest];
+  return [first, ...rest.slice(0, cbIdx), { lookup }, ...rest.slice(cbIdx)];
+}
+
+// src/protect/defaults.js
+var DEFAULT_RESPONSE_RULES = [
+  {
+    id: "resp-private-key",
+    title: "Private key in response body",
+    phase: "response",
+    category: "secret-exposure",
+    action: "redact",
+    prefilter: ["PRIVATE KEY"],
+    rule_v2: [{ parameter: "response.body", match: { type: "regex", value: "/-----BEGIN (?:RSA |EC |OPENSSH |DSA |PGP )?PRIVATE KEY-----/" } }]
+  },
+  {
+    id: "resp-aws-access-key",
+    title: "AWS access key id in response body",
+    phase: "response",
+    category: "secret-exposure",
+    action: "redact",
+    prefilter: ["AKIA", "ASIA"],
+    rule_v2: [{ parameter: "response.body", match: { type: "regex", value: "/\\b(?:AKIA|ASIA)[0-9A-Z]{16}\\b/" } }]
+  },
+  {
+    id: "resp-gcp-api-key",
+    title: "Google API key in response body",
+    phase: "response",
+    category: "secret-exposure",
+    action: "redact",
+    prefilter: ["AIza"],
+    rule_v2: [{ parameter: "response.body", match: { type: "regex", value: "/\\bAIza[0-9A-Za-z_-]{35}\\b/" } }]
+  },
+  {
+    id: "resp-vendor-api-key",
+    title: "Vendor API key / token in response body",
+    phase: "response",
+    category: "secret-exposure",
+    action: "redact",
+    // High-signal, prefix-anchored provider tokens that never legitimately appear in a response
+    // body: Stripe (sk_live_/rk_live_), GitHub (gh[opsu]_ / github_pat_), GitLab (glpat-),
+    // Slack (xox[baprs]-), Anthropic (sk-ant-), Google OAuth (ya29.), npm (npm_). Trailing
+    // (?![0-9A-Za-z]) instead of \\b since some tokens end in - / _ .
+    prefilter: ["sk_live_", "rk_live_", "ghp_", "gho_", "ghs_", "ghu_", "github_pat_", "glpat-", "xox", "sk-ant-", "ya29.", "npm_"],
+    rule_v2: [{ parameter: "response.body", match: { type: "regex", value: "/\\b(?:sk_live_[0-9A-Za-z]{16,}|rk_live_[0-9A-Za-z]{16,}|gh[opsu]_[0-9A-Za-z]{36}|github_pat_[0-9A-Za-z_]{60,}|glpat-[0-9A-Za-z_-]{20,}|xox[baprs]-[0-9A-Za-z-]{10,}|sk-ant-[0-9A-Za-z_-]{20,}|ya29\\.[0-9A-Za-z_-]{20,}|npm_[0-9A-Za-z]{36})(?![0-9A-Za-z])/" } }]
+  },
+  {
+    id: "resp-supabase-secret-key",
+    title: "Supabase secret key in response body",
+    phase: "response",
+    category: "secret-exposure",
+    action: "redact",
+    // Supabase's opaque key format, which is not a JWT and so is not covered by the JWT rule below.
+    // `sb_secret_` is the elevated one — documented as full access, bypassing Row Level Security,
+    // backend-only — while `sb_publishable_` is meant for public clients and must pass untouched.
+    // Both key systems are live at once: new keys sit alongside the legacy `anon` / `service_role`
+    // JWTs rather than replacing them, so this rule and the JWT rule cover different halves.
+    //
+    // The documented grammar is the prefix, 22 base64url characters, `_`, then an 8-character
+    // base64url checksum. Matching it exactly is what keeps the mask on the key and off the response
+    // around it: a variable-length suffix would either run past the key into adjacent syntax or stop
+    // short and leave the tail of a real key visible. The trailing guard rejects a longer run of key
+    // characters, which is not this format.
+    prefilter: ["sb_secret_"],
+    rule_v2: [{ parameter: "response.body", match: { type: "regex", value: "/\\bsb_secret_[A-Za-z0-9_-]{22}_[A-Za-z0-9_-]{8}(?![A-Za-z0-9_-])/" } }]
+  },
+  {
+    id: "resp-supabase-service-role-key",
+    title: "Supabase service_role key in response body",
+    phase: "response",
+    category: "secret-exposure",
+    action: "redact",
+    // Scoped to the one role that must never leave: `service_role` bypasses Row Level Security
+    // entirely. A JWT in a response body is not inherently a leak — the Supabase `anon` key is public
+    // by design and a login response carries the user's own access token — so this decides on the
+    // decoded payload rather than on the shape of the token.
+    //
+    // `jwt_claim_equals` also yields the matching token spans, which is what lets `redact` mask those
+    // tokens and serve the rest of the response.
+    //
+    // A broad any-JWT rule is a reasonable thing to want; it belongs in the managed hardening bundle as
+    // an opt-in, observe-only rule rather than an on-by-default mask.
+    prefilter: ["eyJ"],
+    rule_v2: [{ parameter: "response.body", match: { type: "jwt_claim_equals", claim: "role", value: "service_role" } }]
+  },
+  {
+    id: "resp-db-connection-string",
+    title: "Database connection string with credentials in response body",
+    phase: "response",
+    category: "secret-exposure",
+    action: "redact",
+    prefilter: ["mongodb", "postgres", "mysql", "redis", "amqp"],
+    rule_v2: [{ parameter: "response.body", match: { type: "regex", value: "/\\b(?:mongodb(?:\\+srv)?|postgres(?:ql)?|mysql|redis|amqps?):\\/\\/[^\\s:@\\/]+:[^\\s:@\\/]+@/i" } }]
+  },
+  {
+    id: "resp-stack-trace",
+    title: "Node stack trace leaking in response body",
+    phase: "response",
+    category: "info-exposure",
+    action: "redact",
+    // No prefilter: a Node stack frame has no single distinctive literal (` at ` is too common to
+    // gate on). The pattern is linearly bounded per line, so it runs on every screened body.
+    rule_v2: [{ parameter: "response.body", match: { type: "regex", value: "/\\n\\s+at\\s+.+\\(.+:\\d+:\\d+\\)/" } }]
+  },
+  {
+    id: "resp-sql-error",
+    title: "SQL / ORM error disclosure in response body",
+    phase: "response",
+    category: "info-exposure",
+    action: "redact",
+    prefilter: ["SQLSTATE", "Sequelize", "ER_", "ORA-", "PG::", "SQLITE_ERROR", "SQL syntax"],
+    rule_v2: [{ parameter: "response.body", match: { type: "regex", value: "/(SQLSTATE\\[[0-9A-Z]+\\]|SequelizeDatabaseError|ER_[A-Z_]+|ORA-\\d{5}|PG::[A-Za-z]+Error|SQLITE_ERROR|You have an error in your SQL syntax)/i" } }]
+  },
+  {
+    id: "resp-exception-trace",
+    title: "Backend exception / stack trace disclosure in response body",
+    phase: "response",
+    category: "info-exposure",
+    action: "redact",
+    // Multi-language exception/traceback signatures a normal API response never carries:
+    // Python traceback, Java "Exception in thread", .NET System.*Exception, JVM stack frames,
+    // Go goroutine dumps. (Node `at fn (file:line:col)` frames are handled by resp-stack-trace.)
+    prefilter: ["Traceback", "Exception in thread", "System.", "goroutine ", ".java:", ".kt:", ".scala:", ".rb:", ".py:", ".cs:"],
+    rule_v2: [{ parameter: "response.body", match: { type: "regex", value: '/(Traceback \\(most recent call last\\)|Exception in thread "|System\\.[A-Za-z.]+Exception|\\bat [\\w.$]+\\([\\w]+\\.(?:java|kt|scala|rb|py|cs):\\d+\\)|goroutine \\d+ \\[)/' } }]
   }
-  if ("method" in when) {
-    const methods = Array.isArray(when.method) ? when.method : [when.method];
-    if (methods.length === 0) return "when.method is an empty list, so the rule would match no method";
-    if (!methods.every(isNonEmptyString)) return "when.method must be a non-empty string, or a list of them";
+];
+var DEFAULT_EGRESS_RULES = [
+  {
+    id: "egress-internal-address",
+    title: "Outbound request to an internal / metadata address (SSRF)",
+    phase: "egress",
+    category: "ssrf",
+    rule_v2: [{ parameter: "egress.host", match: { type: "internal_host" } }]
   }
-  return null;
-}
-function isNonEmptyString(value) {
-  return typeof value === "string" && value.trim() !== "";
+];
+
+// src/protect/block-page.js
+function escapeHtml(s) {
+  return String(s).replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
 }
-function nullPropertyProblem(rule) {
-  if (!rule || typeof rule !== "object") return null;
-  for (const property of RULE_PROPERTIES) {
-    if (property in rule && rule[property] === null) {
-      return `"${property}" is present but null; omit it to mean the default, since a null is a value that was meant to be something and is not`;
+function renderBlockPage({ url = "", code = "patchstack" } = {}) {
+  const safeUrl = escapeHtml(url);
+  const safeCode = escapeHtml(code || "patchstack");
+  return `<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta http-equiv="X-UA-Compatible" content="IE=edge">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <style type="text/css">
+		.access-denied,.site-url-text{letter-spacing:.01em;color:#fff}body{background:#111216}.main-container{display:flex;justify-content:center;flex-direction:column;align-items:center}.container{width:688px;height:456px;background:#1c1e22;border-radius:16px;margin-top:120px}.content{height:330px;margin:64px}.access-denied{font-family:Verdana;font-style:normal;font-weight:600;font-size:24px;line-height:32px;display:flex;align-items:center}.descp-text,.site-url{display:flex;align-items:center}.site-url{margin-top:32px;width:560px;height:64px;background:#26282c;border-radius:4px}.reason-code-text,.site-url-text{font-family:Verdana;font-style:normal;border:none;background:#26282c}.site-url-text{text-overflow: ellipsis;font-weight:400;font-size:16px;line-height:24px;margin-left:16px;width:85%}.copy-icon{width:19px;height:22px;margin-left:20px}.copy-icon:hover{cursor:pointer}.reason-code-text{font-weight:600;font-size:24px;line-height:32px;letter-spacing:.01em;color:#AFE614;margin-left:16px;width:85%}.descp-text,.return-text{font-size:16px;line-height:24px;letter-spacing:.01em;font-weight:400}.return-text:hover{color: #AFE614}.descp-text,.logoText,.return-text,.secured-text{font-family:Verdana;font-style:normal;color:#fff}.descp{margin-top:32px;width:560px}.bottom-second-containers,.bottom-text-containers{align-items:center;display:flex}.bottom-container{margin-top:40px;display:flex;width:688px}.bottom-second-containers{margin-left:auto}.arrow-vector{margin-left:20px}.return-text{text-align:center;margin-left:12.59px;text-decoration:none}.secured-text{font-weight:400;font-size:11.2px;line-height:16px;display:flex;align-items:center;letter-spacing:.02em;margin-right:8px}.logoText{font-weight:600;font-size:16px;line-height:24px;letter-spacing:.01em;flex:none;order:1;flex-grow:0}.patch-logo{width:120px}.mobile-bottom-container{margin-top:40px;width:372px;display:none}.mobile-bottom-second-containers{margin-top:64px;display:flex;margin-left:16.5px}@media only screen and (max-width:900px){.container{background:#111216;width:370px;height:auto;margin-top:0}.content{margin-left:16.5px}.descp,.site-url{width:340px}.site-url-text{font-weight:400;font-size:14.4px;line-height:20px;letter-spacing:.02em;width:80%}.copy-icon{margin-left:20px}.reason-code-text{font-size:16px;line-height:32px;letter-spacing:.02em;margin-left:16px;width:80%}.descp-text,.return-text{font-size:14.4px;line-height:20px}.descp-text{display:flex;align-items:center;letter-spacing:.02em}.bottom-container{display:none}.mobile-bottom-container{display:block}.return-text{text-align:center;letter-spacing:.01em;color:#fff;margin-left:9.73px}}
+    </style>
+    <title>Access Denied</title>
+</head>
+<body>
+    <div class="main-container">
+        <div class="container">
+            <div class="content">
+                <span class="access-denied">Access Denied</span>
+                <div class="site-url">
+                    <input id="url" class="site-url-text" type="text"
+                        value="${safeUrl}" readonly>
+                    <img class="copy-icon" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTkiIGhlaWdodD0iMjMiIHZpZXdCb3g9IjAgMCAxOSAyMyIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTE0IDAuMDIzNDM3NUgwVjE2LjAyMzRIMlYyLjAyMzQ0SDE0VjAuMDIzNDM3NVpNMTkgNC4wMjM0NEg0VjIyLjAyMzRIMTlWNC4wMjM0NFpNMTcgMjAuMDIzNEg2VjYuMDIzNDRIMTdWMjAuMDIzNFoiIGZpbGw9IndoaXRlIi8+Cjwvc3ZnPgo=" alt="Copy Text" onmouseover="hover(this);" onmouseout="unhover(this);" onclick="copyText(id='url')">
+                </div>
+                <div class="site-url">
+                    <input id="response" class="reason-code-text" type="text" value="${safeCode}" readonly>
+                    <img class="copy-icon" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTkiIGhlaWdodD0iMjMiIHZpZXdCb3g9IjAgMCAxOSAyMyIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTE0IDAuMDIzNDM3NUgwVjE2LjAyMzRIMlYyLjAyMzQ0SDE0VjAuMDIzNDM3NVpNMTkgNC4wMjM0NEg0VjIyLjAyMzRIMTlWNC4wMjM0NFpNMTcgMjAuMDIzNEg2VjYuMDIzNDRIMTdWMjAuMDIzNFoiIGZpbGw9IndoaXRlIi8+Cjwvc3ZnPgo=" alt="Copy Text" onmouseover="hover(this);" onmouseout="unhover(this);" onclick="copyText(id='response')">
+                </div>
+                <div class="descp">
+                    <span class="descp-text">This request has been blocked by Patchstack. If this message persists and you are a legitimate user, contact the site administrator with the reference above.</span>
+                </div>
+            </div>
+        </div>
+        <div class="bottom-container">
+            <div class="bottom-text-containers">
+                <img class="arrow-vector" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iOCIgaGVpZ2h0PSIxMyIgdmlld0JveD0iMCAwIDggMTMiIGZpbGw9Im5vbmUiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+CjxwYXRoIGQ9Ik03LjQxIDEuNDMzNDRMNiAwLjAyMzQzNzVMMCA2LjAyMzQ0TDYgMTIuMDIzNEw3LjQxIDEwLjYxMzRMMi44MyA2LjAyMzQ0TDcuNDEgMS40MzM0NFoiIGZpbGw9IiNBRkU2MTQiLz4KPC9zdmc+Cg==" alt="Arrow Left">
+                <a href="/" class="return-text">Return to homepage</a>
+            </div>
+            <div class="bottom-second-containers">
+                <span class="secured-text">This website is secured by</span>
+                <a href="https://patchstack.com" class="logoText">
+                    <img class="patch-logo" src="data:image/svg+xml;base64,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" alt="Patchstack Logo">
+				</a>
+            </div>
+        </div>
+    
+        <div class="mobile-bottom-container">
+            <div class="mobile-bottom-text-containers">
+                <img class="arrow-vector" src="data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iOCIgaGVpZ2h0PSIxMyIgdmlld0JveD0iMCAwIDggMTMiIGZpbGw9Im5vbmUiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+CjxwYXRoIGQ9Ik03LjQxIDEuNDMzNDRMNiAwLjAyMzQzNzVMMCA2LjAyMzQ0TDYgMTIuMDIzNEw3LjQxIDEwLjYxMzRMMi44MyA2LjAyMzQ0TDcuNDEgMS40MzM0NFoiIGZpbGw9IiNBRkU2MTQiLz4KPC9zdmc+Cg==" alt="Arrow Left">
+                <a href="/" class="return-text">Return to homepage</a>
+            </div>
+            <div class="mobile-bottom-second-containers">
+                <span class="secured-text">This website is secured by</span>
+                <a href="https://patchstack.com" class="logoText">
+                    <img class="patch-logo" src="data:image/svg+xml;base64,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" alt="Patchstack Logo">
+				</a>
+            </div>
+        </div>
+    </div>
+</body>
+<script>
+    function copyText(id) {
+        var copyText = document.getElementById(id)
+        copyText.select();
+        copyText.setSelectionRange(0, 99999);
+        navigator.clipboard.writeText(copyText.value);
     }
-  }
-  return null;
-}
-function rulePropertyProblem(rule) {
-  if (!rule || typeof rule !== "object") return null;
-  for (const [property, shape] of Object.entries(RULE_PROPERTY_SHAPES)) {
-    if (rule[property] === void 0 || rule[property] === null) continue;
-    const problem = operandShapeProblem(shape, rule[property]);
-    if (problem) return `"${property}" ${problem}`;
-  }
-  return null;
-}
-function actionProblem(action, rule) {
-  if (action === void 0 || action === null) return null;
-  if (!ACTIONS.includes(action)) return `unknown action "${action}"`;
-  const spec = ACTION_PROPERTIES[action];
-  for (const required of spec?.required ?? []) {
-    if (rule?.[required] === void 0 || rule?.[required] === null) {
-      return `action "${action}" needs "${required}"`;
+
+    function hover(element) {
+        element.setAttribute('src', 'data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTkiIGhlaWdodD0iMjMiIHZpZXdCb3g9IjAgMCAxOSAyMyIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTE0IDAuMDIzNDM3NUgwVjE2LjAyMzRIMlYyLjAyMzQ0SDE0VjAuMDIzNDM3NVpNMTkgNC4wMjM0NEg0VjIyLjAyMzRIMTlWNC4wMjM0NFpNMTcgMjAuMDIzNEg2VjYuMDIzNDRIMTdWMjAuMDIzNFoiIGZpbGw9IiNBRkU2MTQiLz4KPC9zdmc+Cg==');
     }
-  }
-  for (const [property, shape] of Object.entries(spec?.shapes ?? {})) {
-    if (rule?.[property] === void 0 || rule?.[property] === null) continue;
-    const problem = operandShapeProblem(shape, rule[property]);
-    if (problem) return `action "${action}" property "${property}" ${problem}`;
-  }
-  const phase = rule?.phase ?? "request";
-  if (spec !== void 0 && !spec.phases.includes(phase)) {
-    return `action "${action}" is carried out on the ${spec.phases.join("/")} phase; on "${phase}" the rule blocks instead`;
-  }
-  return null;
-}
 
-// src/protect/rules/validate.js
-var LIMITS2 = LIMITS;
-var PHASES2 = new Set(PHASES);
-var ACTIONS2 = new Set(ACTIONS);
-function validateBundle(bundle, opts = {}) {
-  const rejected = [];
-  const inFirewall = Array.isArray(bundle?.firewall) ? bundle.firewall : [];
-  const inWhitelists = Array.isArray(bundle?.whitelists) ? bundle.whitelists : [];
-  const firewall = [];
-  for (const rule of inFirewall) {
-    if (firewall.length >= LIMITS2.maxRules) {
-      rejected.push({ id: idOf(rule), reason: `bundle exceeds maxRules (${LIMITS2.maxRules})` });
-      continue;
+    function unhover(element) {
+        element.setAttribute('src', 'data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTkiIGhlaWdodD0iMjMiIHZpZXdCb3g9IjAgMCAxOSAyMyIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTE0IDAuMDIzNDM3NUgwVjE2LjAyMzRIMlYyLjAyMzQ0SDE0VjAuMDIzNDM3NVpNMTkgNC4wMjM0NEg0VjIyLjAyMzRIMTlWNC4wMjM0NFpNMTcgMjAuMDIzNEg2VjYuMDIzNDRIMTdWMjAuMDIzNFoiIGZpbGw9IndoaXRlIi8+Cjwvc3ZnPgo=');
     }
-    const reason = ruleProblem(rule);
-    if (reason) rejected.push({ id: idOf(rule), reason });
-    else firewall.push(rule);
+</script>
+</html>`;
+}
+
+// src/protect/rules/store.js
+var fsMod;
+async function loadFs() {
+  if (fsMod !== void 0) return fsMod;
+  try {
+    const [fs, path] = await Promise.all([import("fs"), import("path")]);
+    fsMod = {
+      readFileSync: fs.readFileSync,
+      writeFileSync: fs.writeFileSync,
+      mkdirSync: fs.mkdirSync,
+      join: path.join
+    };
+  } catch {
+    fsMod = null;
   }
-  const whitelists = [];
-  for (const wl of inWhitelists) {
-    if (whitelists.length >= LIMITS2.maxWhitelists) {
-      rejected.push({ id: idOf(wl), reason: `bundle exceeds maxWhitelists (${LIMITS2.maxWhitelists})` });
-      continue;
-    }
-    if (!opts.allowGlobalWhitelists && wl && Array.isArray(wl.rule_v2) && !wl.rule_id) {
-      rejected.push({ id: idOf(wl), reason: "whitelist has no rule_id (would suppress every rule); set allowGlobalWhitelists to permit" });
-      continue;
+  return fsMod;
+}
+function makeStore(options = {}) {
+  let mem = null;
+  const durable = durableTier(options);
+  return {
+    async read() {
+      if (mem) return mem;
+      const env = await durable.read();
+      if (env) mem = env;
+      return env;
+    },
+    async write(env) {
+      if (env) mem = env;
+      await durable.write(env);
     }
-    const reason = conditionsProblem(wl?.rule_v2);
-    if (reason) rejected.push({ id: idOf(wl), reason: `whitelist: ${reason}` });
-    else whitelists.push(wl);
+  };
+}
+function durableTier(options) {
+  const adapter = options.ruleCache;
+  if (adapter && typeof adapter.read === "function" && typeof adapter.write === "function") {
+    return {
+      read: async () => {
+        try {
+          return toEnvelope(await adapter.read());
+        } catch {
+          return null;
+        }
+      },
+      write: async (env) => {
+        try {
+          await adapter.write(env);
+        } catch {
+        }
+      }
+    };
   }
+  const dir = options.cacheDir;
   return {
-    bundle: { ...bundle, firewall, whitelists },
-    rejected
+    read: async () => cacheRead(dir),
+    write: async (env) => cacheWrite(dir, env)
   };
 }
-function idOf(rule) {
-  const id = rule?.id ?? rule?.rule_id;
-  return id === void 0 || id === null ? "(unidentified)" : String(id);
+async function cacheWrite(dir, env) {
+  if (!dir) return;
+  const fs = await loadFs();
+  if (!fs) return;
+  try {
+    fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(fs.join(dir, "patchstack-rules.json"), JSON.stringify(env));
+  } catch {
+  }
 }
-function ruleProblem(rule) {
-  if (!rule || typeof rule !== "object") return "not an object";
-  const nullReason = nullPropertyProblem(rule);
-  if (nullReason) return nullReason;
-  if (rule.phase !== void 0 && !PHASES2.has(rule.phase)) return `unknown phase "${rule.phase}"`;
-  const actionReason = actionProblem(rule.action, rule);
-  if (actionReason) return actionReason;
-  const scopeReason = whenProblem(rule.when);
-  if (scopeReason) return scopeReason;
-  const propertyReason = rulePropertyProblem(rule);
-  if (propertyReason) return propertyReason;
-  return conditionsProblem(rule.rule_v2);
+async function cacheRead(dir) {
+  if (!dir) return null;
+  const fs = await loadFs();
+  if (!fs) return null;
+  try {
+    return toEnvelope(JSON.parse(fs.readFileSync(fs.join(dir, "patchstack-rules.json"), "utf8")));
+  } catch {
+    return null;
+  }
 }
-function conditionsProblem(conditions, depth = 0) {
-  if (!Array.isArray(conditions)) return "rule_v2 must be an array of conditions";
-  if (conditions.length === 0) return "rule_v2 is empty (would never match)";
-  if (depth > LIMITS2.maxNestingDepth) return `nesting deeper than ${LIMITS2.maxNestingDepth}`;
-  if (conditions.length > LIMITS2.maxConditionsPerRule) {
-    return `more than ${LIMITS2.maxConditionsPerRule} conditions`;
+function toEnvelope(value) {
+  if (!value || typeof value !== "object") return null;
+  if (value.bundle && typeof value.bundle === "object") {
+    return { bundle: value.bundle, etag: value.etag ?? null };
   }
-  for (const c of conditions) {
-    const shapeReason = conditionShapeProblem(c);
-    if (shapeReason) return shapeReason;
-    if (isGroup(c)) {
-      const nested = conditionsProblem(c.rules, depth + 1);
-      if (nested) return nested;
-      continue;
-    }
-    const parameterReason = parameterProblem(c.parameter);
-    if (parameterReason) return parameterReason;
-    const mutationReason = mutationsProblem(c.mutations);
-    if (mutationReason) return mutationReason;
-    const matchReason = matchProblem(c.match, c.parameter);
-    if (matchReason) return matchReason;
-    const m = c.match;
-    if (m.type === "regex") {
-      if (typeof m.value !== "string") return "regex match.value must be a string";
-      if (m.value.length > LIMITS2.maxRegexLength) return `regex longer than ${LIMITS2.maxRegexLength} chars`;
-    } else if (typeof m.value === "string" && m.value.length > LIMITS2.maxValueLength) {
-      return `match.value longer than ${LIMITS2.maxValueLength} chars`;
-    }
-    if (m.match) {
-      const nested = conditionsProblem([{ parameter: c.parameter, match: m.match }], depth + 1);
-      if (nested) return nested;
-    }
+  if (Array.isArray(value.firewall) || Array.isArray(value.whitelists)) {
+    return { bundle: value, etag: null };
   }
   return null;
 }
@@ -2778,67 +3241,70 @@ function reportRejections(rejected, options, label) {
     `${label}: rejected the entire update because ${rejected.length} rule(s) failed validation \u2014 keeping the previous ruleset and NOT caching this response: ${sample}${rejected.length > 3 ? ", \u2026" : ""}`
   ), "onError");
 }
-function fromSource(bundle, reason) {
-  return reason === void 0 ? { ...bundle, source: { ok: true } } : { ...bundle, source: { ok: false, reason } };
+function fromSource(bundle, origin, reason) {
+  return {
+    ...bundle,
+    source: reason === void 0 ? { ok: true, origin } : { ok: false, origin, reason }
+  };
 }
 async function resolveRules(options, store, ctx = {}) {
   const timeoutMs = ctx.timeoutMs;
   if (options.siteUuid) {
     const prior = await store.read();
-    const client = new PulseRuleClient({ siteUuid: options.siteUuid, baseUrl: options.pulseRulesUrl, etag: prior?.etag, timeoutMs, pulseAuth: ctx.pulseAuth, reportsDetections: options.reportDetections === true });
+    const client = new PulseRuleClient({ siteUuid: options.siteUuid, baseUrl: options.pulseRulesUrl, etag: prior?.etag, timeoutMs, pulseAuth: ctx.pulseAuth, detectionState: ctx.detectionState });
     const res = await client.getRules();
-    if (res.success && res.notModified && prior?.bundle) return fromSource(normalizeBundle(prior.bundle, options));
+    if (res.success && res.notModified && prior?.bundle) return fromSource(normalizeBundle(prior.bundle, options), "cache");
     if (res.success && !res.notModified) {
       const rejected = liveUpdateRejections(res, options);
       if (rejected.length > 0) {
         reportRejections(rejected, options, "rule update rejected");
-        if (prior?.bundle) return fromSource(normalizeBundle(prior.bundle, options), "update rejected");
-        if (options.rules) return fromSource(normalizeBundle(options.rules, options), "update rejected");
-        return fromSource(emptyBundle(), "update rejected");
+        if (prior?.bundle) return fromSource(normalizeBundle(prior.bundle, options), "cache", "update rejected");
+        if (options.rules) return fromSource(normalizeBundle(options.rules, options), "bundled", "update rejected");
+        return fromSource(emptyBundle(), "empty", "update rejected");
       }
       const bundle = normalizeBundle(res, options);
       await store.write({ bundle, etag: res.etag ?? null });
-      return fromSource(bundle);
+      return fromSource(bundle, "api");
     }
     if (prior?.bundle) {
       notify(options.onError, new Error(`pulse rule fetch failed (${res.error ?? "no usable response"}); using cached bundle`), "onError");
-      return fromSource(normalizeBundle(prior.bundle, options), res.error ?? "no usable response");
+      return fromSource(normalizeBundle(prior.bundle, options), "cache", res.error ?? "no usable response");
     }
     if (options.rules) {
       notify(options.onError, new Error(`pulse rule fetch failed (${res.error ?? "no usable response"}); using bundled fallback`), "onError");
-      return fromSource(normalizeBundle(options.rules, options), res.error ?? "no usable response");
+      return fromSource(normalizeBundle(options.rules, options), "bundled", res.error ?? "no usable response");
     }
     notify(options.onError, new Error(`pulse rule fetch failed (${res.error ?? "no usable response"}); no cache \u2014 running with no rules`), "onError");
-    return fromSource(emptyBundle(), res.error ?? "no usable response");
+    return fromSource(emptyBundle(), "empty", res.error ?? "no usable response");
   }
   if (options.token) {
     const prior = await store.read();
     const client = new PatchstackRuleClient({ token: options.token, baseUrl: options.baseUrl, etag: prior?.etag, timeoutMs });
     const res = await client.getRules();
-    if (res.success && res.notModified && prior?.bundle) return fromSource(normalizeBundle(prior.bundle, options));
+    if (res.success && res.notModified && prior?.bundle) return fromSource(normalizeBundle(prior.bundle, options), "cache");
     if (res.success && !res.notModified) {
       const rejected = liveUpdateRejections(res, options);
       if (rejected.length > 0) {
         reportRejections(rejected, options, "rule update rejected");
-        if (prior?.bundle) return fromSource(normalizeBundle(prior.bundle, options), "update rejected");
-        if (options.rules) return fromSource(normalizeBundle(options.rules, options), "update rejected");
-        return fromSource(emptyBundle(), "update rejected");
+        if (prior?.bundle) return fromSource(normalizeBundle(prior.bundle, options), "cache", "update rejected");
+        if (options.rules) return fromSource(normalizeBundle(options.rules, options), "bundled", "update rejected");
+        return fromSource(emptyBundle(), "empty", "update rejected");
       }
       const bundle = normalizeBundle(res, options);
       await store.write({ bundle, etag: res.etag ?? null });
-      return fromSource(bundle);
+      return fromSource(bundle, "api");
     }
     if (prior?.bundle) {
       notify(options.onError, new Error(`rule fetch failed (${res.error ?? "no usable response"}); using cached bundle`), "onError");
-      return fromSource(normalizeBundle(prior.bundle, options), res.error ?? "no usable response");
+      return fromSource(normalizeBundle(prior.bundle, options), "cache", res.error ?? "no usable response");
     }
     notify(options.onError, new Error(`rule fetch failed (${res.error ?? "no usable response"}); no cache \u2014 running with no rules`), "onError");
-    return fromSource(emptyBundle(), res.error ?? "no usable response");
+    return fromSource(emptyBundle(), "empty", res.error ?? "no usable response");
   }
   if (options.rules) {
-    return fromSource(normalizeBundle(options.rules, options));
+    return fromSource(normalizeBundle(options.rules, options), "bundled");
   }
-  return fromSource(emptyBundle());
+  return fromSource(emptyBundle(), "empty");
 }
 function normalizeBundle(b, options = {}) {
   const enforcement = b?.enforcement ?? b?.mode;
@@ -2934,6 +3400,164 @@ var DEFAULT_BASE_URL3 = "https://api.patchstack.com/monitor/pulse";
 var DEFAULT_FLUSH_MS = 5e3;
 var MAX_BATCH = 50;
 var MAX_QUEUE = 500;
+var MAX_ATTEMPTS = 4;
+var RETRY_BASE_MS = 1e3;
+var RETRY_CAP_MS = 3e4;
+var RETRYABLE_EXPLICIT = /* @__PURE__ */ new Set([408, 425, 429]);
+function worthRetrying(status) {
+  if (status === null) return true;
+  return RETRYABLE_EXPLICIT.has(status) || status >= 500 && status <= 599;
+}
+var ATTEMPT_TIMEOUT_MS = 1e4;
+var STOP_BUDGET_MS = 5e3;
+var MAX_ROUTE_CHARS = 256;
+var MAX_PARAMETERS = 25;
+var MAX_PARAMETER_CHARS = 64;
+var MAX_IDENTIFIER_CHARS = 256;
+var MAX_CAPTURED_VALUES = 10;
+var MAX_CAPTURED_VALUE_CHARS = 512;
+var MAX_QUERY_KEYS = 10;
+var MAX_METHOD_CHARS = 16;
+var MAX_BODY_BYTES2 = 64 * 1024;
+function queryKeysOf(path) {
+  if (typeof path !== "string") return { keys: [], total: 0 };
+  const start = path.indexOf("?");
+  if (start === -1) return { keys: [], total: 0 };
+  let names;
+  try {
+    names = [...new URLSearchParams(path.slice(start + 1)).keys()];
+  } catch {
+    return { keys: [], total: 0 };
+  }
+  const seen = /* @__PURE__ */ new Set();
+  const keys = [];
+  for (const name of names) {
+    if (name === "") continue;
+    if (seen.has(name)) continue;
+    seen.add(name);
+    if (keys.length < MAX_QUERY_KEYS) keys.push(name);
+  }
+  return { keys, total: seen.size };
+}
+function boundCapture(capture) {
+  if (!capture || typeof capture !== "object" || Array.isArray(capture)) return null;
+  const truncated = [];
+  const own = (object, key) => Object.hasOwn(object, key) ? object[key] : void 0;
+  const declaredPlan = own(capture, "plan");
+  const plan = typeof declaredPlan === "string" ? capText(declaredPlan, MAX_IDENTIFIER_CHARS) : null;
+  if (plan === null) return null;
+  if (plan.truncated) truncated.push("plan");
+  const out = { plan: plan.value };
+  let overCap = 0;
+  let rejected = 0;
+  const declaredValues = own(capture, "values");
+  if (Array.isArray(declaredValues) && declaredValues.length > 0) {
+    const values = [];
+    for (const entry of declaredValues) {
+      if (!entry || typeof entry !== "object" || Array.isArray(entry)) {
+        rejected += 1;
+        continue;
+      }
+      const declaredParameter = own(entry, "parameter");
+      const text = scalarText(own(entry, "value"));
+      if (typeof declaredParameter !== "string" || text === null) {
+        rejected += 1;
+        continue;
+      }
+      if (values.length >= MAX_CAPTURED_VALUES) {
+        overCap += 1;
+        continue;
+      }
+      const label = capText(declaredParameter, MAX_PARAMETER_CHARS);
+      const value = capText(text, MAX_CAPTURED_VALUE_CHARS);
+      if (label.truncated && !truncated.includes("parameter")) truncated.push("parameter");
+      if (value.truncated && !truncated.includes("value")) truncated.push("value");
+      values.push({
+        parameter: label.value,
+        value: value.value,
+        ...own(entry, "truncated") === true || value.truncated ? { truncated: true } : {}
+      });
+    }
+    if (overCap > 0) truncated.push("values");
+    if (values.length > 0) out.values = values;
+  }
+  const declaredRaw = own(capture, "raw");
+  if (declaredRaw !== void 0 && declaredRaw !== null) {
+    const rawValue = declaredRaw && typeof declaredRaw === "object" ? own(declaredRaw, "value") : void 0;
+    if (typeof rawValue === "string") {
+      const raw = capText(rawValue, MAX_CAPTURED_VALUE_CHARS);
+      out.raw = {
+        value: raw.value,
+        ...own(declaredRaw, "truncated") === true || raw.truncated ? { truncated: true } : {}
+      };
+    } else {
+      rejected += 1;
+    }
+  }
+  const declaredCount = (key) => {
+    const value = own(capture, key);
+    return Number.isFinite(value) && value > 0 ? Math.floor(value) : 0;
+  };
+  const totals = {
+    omitted: declaredCount("omitted") + overCap,
+    unsupported: declaredCount("unsupported") + rejected,
+    failed: declaredCount("failed")
+  };
+  for (const [key, total] of Object.entries(totals)) {
+    if (total > 0) out[key] = total;
+  }
+  if (own(capture, "unavailable") === true) out.unavailable = true;
+  if (truncated.length > 0) out.truncated = truncated;
+  return out;
+}
+function scalarText(value) {
+  if (typeof value === "string") return value;
+  if (typeof value === "number" && Number.isFinite(value)) return String(value);
+  if (typeof value === "boolean") return String(value);
+  return null;
+}
+function makeInstanceId() {
+  try {
+    const uuid = globalThis.crypto?.randomUUID?.();
+    if (typeof uuid === "string" && uuid !== "") return uuid;
+  } catch {
+  }
+  return `${Date.now().toString(36)}-${Math.floor(Math.random() * 16777215).toString(36)}`;
+}
+function capText(value, limit) {
+  const text = typeof value === "string" ? value : "";
+  return text.length > limit ? { value: text.slice(0, limit), truncated: true } : { value: text, truncated: false };
+}
+function retryDelayMs(attempts, retryAfter, random = Math.random) {
+  const advertised = parseRetryAfter(retryAfter);
+  if (advertised !== null) return Math.min(advertised, RETRY_CAP_MS);
+  const backoff = Math.min(RETRY_BASE_MS * 2 ** (attempts - 1), RETRY_CAP_MS);
+  return Math.min(RETRY_CAP_MS, Math.round(backoff * (0.75 + random() * 0.5)));
+}
+function parseRetryAfter(value) {
+  if (typeof value !== "string" || value.trim() === "") return null;
+  const seconds = Number(value.trim());
+  if (Number.isFinite(seconds)) return seconds >= 0 ? seconds * 1e3 : null;
+  const at = Date.parse(value);
+  if (Number.isNaN(at)) return null;
+  return Math.max(0, at - Date.now());
+}
+var encoder = new TextEncoder();
+function byteLength(text) {
+  return encoder.encode(text).length;
+}
+function splitToFit(events, maxBytes, wrap = (batch) => ({ detections: batch })) {
+  const batch = events.slice();
+  const rest = [];
+  while (batch.length > 1 && byteLength(JSON.stringify(wrap(batch))) > maxBytes) {
+    rest.unshift(batch.pop());
+  }
+  return [batch, rest];
+}
+function unattended(timer) {
+  if (timer && typeof timer.unref === "function") timer.unref();
+  return timer;
+}
 function ruleParameters(rule) {
   const out = /* @__PURE__ */ new Set();
   const walk = (conditions) => {
@@ -2968,12 +3592,22 @@ function createDetectionReporter(opts) {
       },
       flush() {
       },
-      stop() {
-      },
+      stop: () => Promise.resolve(),
       setRulesEtag() {
       },
+      announce() {
+      },
       dropped: () => 0,
-      health: () => ({ sent: 0, delivered: 0, failed: 0, dropped: 0, lastDeliveredAt: null })
+      health: () => ({
+        sent: 0,
+        delivered: 0,
+        failed: 0,
+        dropped: 0,
+        retried: 0,
+        reauthorized: 0,
+        lastDeliveredAt: null,
+        capability: { announced: 0, acknowledged: 0, failed: 0, retried: 0, lastAcknowledgedAt: null }
+      })
     };
   }
   const configured = opts.baseUrl ?? process.env?.PATCHSTACK_PULSE_RULES_URL;
@@ -2987,47 +3621,233 @@ function createDetectionReporter(opts) {
   let failed = 0;
   let droppedTotal = 0;
   let lastDeliveredAt = null;
+  let capabilityAnnounced = 0;
+  let capabilityAcknowledged = 0;
+  let capabilityFailed = 0;
+  let lastCapabilityAckAt = null;
   let queue = [];
   let timer = null;
+  let retryTimer = null;
   let stopped = false;
   let dropped = 0;
+  let retried = 0;
+  let capabilityRetried = 0;
+  let flushRequested = false;
+  let draining = false;
+  let drainResolve = null;
+  let drainPromise = null;
+  let budgetTimer = null;
+  let epoch = 0;
+  let reauthorized = 0;
+  let sending = false;
+  let inFlight = null;
+  let pendingState = null;
+  const instanceId = makeInstanceId();
+  let sequence = 0;
+  const bodyFor = (events, droppedWith, state) => ({
+    detections: events,
+    // The count of what never made it, sent WITH the batch rather than inferred from a gap: a consumer
+    // computing a false-positive rate needs to know its denominator is short, and silence about that
+    // would make a truncated sample look like a complete one.
+    dropped: droppedWith,
+    ...state !== null ? { reporting_state: state } : {}
+  });
+  const takeBatch = (droppedWith, state) => {
+    const [batch, rest] = splitToFit(
+      queue.splice(0, MAX_BATCH),
+      MAX_BODY_BYTES2,
+      (events) => bodyFor(events, droppedWith, state)
+    );
+    if (rest.length > 0) queue.unshift(...rest);
+    return batch;
+  };
+  const authConfig = { pulseAuth: opts.pulseAuth, endpoint: baseUrl, timeoutMs: ATTEMPT_TIMEOUT_MS };
+  const detectionsUrl = `${baseUrl}/detections/${encodeURIComponent(siteUuid)}`;
+  const post = async (body, key, signal, transport) => (
+    // Through the shared Pulse path, which attaches the token and — on a 401 — discards it and retries
+    // once with a fresh one. A cached token can stop being valid before it expires, and the server's
+    // refusal is authoritative over our own clock; the batch's own headers, this key included, are
+    // carried through both sends, so the redelivery is still recognisable as the same batch.
+    pulseFetch(
+      authConfig,
+      detectionsUrl,
+      {
+        method: "POST",
+        ...signal ? { signal } : {},
+        headers: {
+          "Content-Type": "application/json",
+          Accept: "application/json",
+          "User-Agent": "@patchstack/connect",
+          // The same key on every attempt of one batch: an acknowledgement can be lost after the server
+          // has already taken the batch, and a redelivery has to be identifiable as the same one.
+          "Idempotency-Key": key
+        },
+        body: JSON.stringify(body)
+      },
+      transport
+    )
+  );
+  const abandon = () => {
+    if (!inFlight) return;
+    failed += inFlight.events.length;
+    if (inFlight.state !== null) capabilityFailed += 1;
+    inFlight = null;
+  };
+  const settle = () => {
+    if (!inFlight) return;
+    if (inFlight.events.length > 0) {
+      delivered += inFlight.events.length;
+      lastDeliveredAt = (/* @__PURE__ */ new Date()).toISOString();
+    }
+    if (inFlight.state !== null) {
+      capabilityAcknowledged += 1;
+      lastCapabilityAckAt = (/* @__PURE__ */ new Date()).toISOString();
+    }
+    inFlight = null;
+  };
+  const attempt = async () => {
+    if (!inFlight) return;
+    const mine = epoch;
+    sending = true;
+    inFlight.attempts += 1;
+    if (inFlight.attempts > 1) {
+      if (inFlight.events.length > 0) retried += 1;
+      if (inFlight.state !== null) capabilityRetried += 1;
+    }
+    const body = bodyFor(inFlight.events, inFlight.dropped, inFlight.state);
+    let status = null;
+    let retryAfter = null;
+    const controller = typeof AbortController === "function" ? new AbortController() : null;
+    inFlight.controller = controller;
+    const timeout = controller ? unattended(setTimeout(() => controller.abort(), ATTEMPT_TIMEOUT_MS)) : null;
+    inFlight.timeout = timeout;
+    let sends = 0;
+    const counted = (url, init) => {
+      if (String(url) === detectionsUrl) {
+        sends += 1;
+        if (sends > 1 && mine === epoch) reauthorized += 1;
+      }
+      return fetchImpl(url, init);
+    };
+    try {
+      const res = await post(body, inFlight.key, controller?.signal, counted);
+      if (mine !== epoch) return;
+      if (res && res.ok) {
+        settle();
+        if (timeout) clearTimeout(timeout);
+        finish();
+        return;
+      }
+      status = typeof res?.status === "number" ? res.status : 0;
+      retryAfter = res?.headers?.get?.("retry-after") ?? null;
+    } catch {
+      status = null;
+    } finally {
+      if (timeout) clearTimeout(timeout);
+      if (inFlight && inFlight.controller === controller) {
+        inFlight.controller = null;
+        inFlight.timeout = null;
+      }
+    }
+    if (mine !== epoch) return;
+    const retryable = worthRetrying(status);
+    if (retryable && inFlight.attempts < MAX_ATTEMPTS && !stopped) {
+      const delay = retryDelayMs(inFlight.attempts, retryAfter);
+      sending = false;
+      retryTimer = unattended(
+        setTimeout(() => {
+          retryTimer = null;
+          void attempt();
+        }, delay)
+      );
+      return;
+    }
+    abandon();
+    finish();
+  };
+  const finish = () => {
+    sending = false;
+    kick();
+  };
+  const arm = () => {
+    if (!timer) {
+      timer = unattended(
+        setTimeout(() => {
+          timer = null;
+          flushRequested = true;
+          kick();
+        }, flushMs)
+      );
+    }
+  };
+  const due = () => draining || pendingState !== null || queue.length >= MAX_BATCH || flushRequested;
+  const kick = () => {
+    if (sending || inFlight) return;
+    if (typeof fetchImpl !== "function") {
+      if (draining) drained();
+      return;
+    }
+    if (stopped && !draining) return;
+    if (queue.length === 0 && pendingState === null) {
+      flushRequested = false;
+      if (draining) drained();
+      return;
+    }
+    if (!due()) {
+      arm();
+      return;
+    }
+    flushRequested = false;
+    const droppedWith = dropped;
+    dropped = 0;
+    droppedTotal += droppedWith;
+    const state = pendingState;
+    pendingState = null;
+    const events = takeBatch(droppedWith, state);
+    sent += events.length;
+    if (state !== null) capabilityAnnounced += 1;
+    sequence += 1;
+    inFlight = { key: `${instanceId}-${sequence}`, events, dropped: droppedWith, state, attempts: 0 };
+    void attempt();
+  };
+  const terminate = () => {
+    epoch += 1;
+    if (inFlight) {
+      inFlight.controller?.abort();
+      if (inFlight.timeout) clearTimeout(inFlight.timeout);
+      failed += inFlight.events.length;
+      if (inFlight.state !== null) capabilityFailed += 1;
+      inFlight = null;
+    }
+    if (pendingState !== null) {
+      pendingState = null;
+      capabilityAnnounced += 1;
+      capabilityFailed += 1;
+    }
+    sending = false;
+    drained();
+  };
+  const drained = () => {
+    draining = false;
+    if (queue.length > 0) {
+      droppedTotal += queue.length;
+      queue = [];
+    }
+    if (budgetTimer) {
+      clearTimeout(budgetTimer);
+      budgetTimer = null;
+    }
+    const resolve = drainResolve;
+    drainResolve = null;
+    if (resolve) resolve();
+  };
   const flush = () => {
     if (timer) {
       clearTimeout(timer);
       timer = null;
     }
-    if (queue.length === 0 || typeof fetchImpl !== "function") return;
-    const batch = queue.splice(0, MAX_BATCH);
-    const droppedWith = dropped;
-    dropped = 0;
-    droppedTotal += droppedWith;
-    sent += batch.length;
-    void (async () => {
-      try {
-        const res = await fetchImpl(`${baseUrl}/detections/${encodeURIComponent(siteUuid)}`, {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            Accept: "application/json",
-            "User-Agent": "@patchstack/connect",
-            // Same credential path as the rules fetch. The detections endpoint is site-addressed and
-            // requires a verified, site-bound token, so a batch sent without one is refused — which is
-            // why the runtime does not build a reporter when no credential resolves, rather than
-            // posting into a 401.
-            ...await pulseAuthHeader({ pulseAuth: opts.pulseAuth, endpoint: baseUrl }, fetchImpl)
-          },
-          body: JSON.stringify({ detections: batch, dropped: droppedWith })
-        });
-        if (res && res.ok) {
-          delivered += batch.length;
-          lastDeliveredAt = (/* @__PURE__ */ new Date()).toISOString();
-        } else {
-          failed += batch.length;
-        }
-      } catch {
-        failed += batch.length;
-      }
-    })();
+    flushRequested = true;
+    kick();
   };
   return {
     /**
@@ -3046,32 +3866,144 @@ function createDetectionReporter(opts) {
         queue.shift();
         dropped++;
       }
+      const query = queryKeysOf(detection.path);
+      const method = typeof detection.method === "string" ? capText(detection.method, MAX_METHOD_CHARS) : null;
+      const userAgent = typeof detection.userAgent === "string" && detection.userAgent !== "" ? capText(detection.userAgent, MAX_IDENTIFIER_CHARS) : null;
+      const queryKeys = query.keys.map((name) => capText(name, MAX_PARAMETER_CHARS));
+      const capture = boundCapture(detection.capture);
+      const rawRoute = routeOf(detection.path);
+      const route = typeof rawRoute === "string" ? capText(rawRoute, MAX_ROUTE_CHARS) : { value: rawRoute, truncated: false };
+      const allParameters = ruleParameters(detection.rule);
+      const parameters = allParameters.slice(0, MAX_PARAMETERS).map((name) => capText(name, MAX_PARAMETER_CHARS));
+      const truncated = [];
+      if (route.truncated) truncated.push("route");
+      if (method?.truncated) truncated.push("method");
+      if (userAgent?.truncated) truncated.push("user_agent");
+      if (query.total > queryKeys.length || queryKeys.some((entry) => entry.truncated)) {
+        truncated.push("query_keys");
+      }
+      if (allParameters.length > MAX_PARAMETERS || parameters.some((entry) => entry.truncated)) {
+        truncated.push("parameters");
+      }
+      const id = capText(String(ruleId), MAX_IDENTIFIER_CHARS);
+      const revision = capText(revisionOf(detection.rule) ?? "", MAX_IDENTIFIER_CHARS);
+      const etag = capText(rulesEtag ?? "", MAX_IDENTIFIER_CHARS);
+      for (const [name, field] of [
+        ["rule_id", id],
+        ["rule_revision", revision],
+        ["rules_etag", etag]
+      ]) {
+        if (field.truncated) truncated.push(name);
+      }
       queue.push({
-        rule_id: ruleId,
-        route: routeOf(detection.path),
-        parameters: ruleParameters(detection.rule),
+        rule_id: id.value,
+        route: route.value,
+        parameters: parameters.map((entry) => entry.value),
+        // Present only when something was shortened, so its absence is not a claim of its own.
+        ...truncated.length > 0 ? { truncated } : {},
+        // Only when parameters were actually left out. Reporting a total because some OTHER field was
+        // shortened states that parameters were omitted when none were.
+        ...truncated.includes("parameters") ? { parameters_total: allParameters.length } : {},
+        method: method === null ? null : method.value,
+        // The rest of the URL, as names only. `route` is the path; together they say what was requested
+        // without saying what was in it.
+        query_keys: queryKeys.map((entry) => entry.value),
+        // Present only when the list is short, so its absence is not a claim of its own.
+        ...query.total > queryKeys.length ? { query_keys_total: query.total } : {},
+        // Who asked. Capped, since it is client-supplied text and this is an event with a size bound.
+        user_agent: userAgent === null ? null : userAgent.value,
         phase: detection.phase ?? null,
         // The state this detection was handled under, which is the whole point: `false` is a rule that
         // saw traffic it would have stopped.
         enforced: detection.mode === "block",
-        rules_etag: rulesEtag,
+        rules_etag: rulesEtag === null ? null : etag.value,
         // The revision of THIS rule, as the bundle delivered it. The bundle identity above answers "which
         // bundle", which changes whenever anything in it changes — so it cannot say whether the counts for
         // one rule describe the document that rule has now. Passed through untouched, and null when the
         // bundle carried none.
-        rule_revision: revisionOf(detection.rule),
+        rule_revision: revisionOf(detection.rule) === null ? null : revision.value,
+        // What the rule was permitted to show, and what it showed. Present only when a plan was derived,
+        // which is to say only for a phase that has a reading to derive from.
+        ...capture ? { capture } : {},
+        // The client address and where it came from. `client_ip` is omitted entirely when there is none,
+        // so a present-but-empty field cannot read as a failed lookup of a real address; the provenance is
+        // always present, because "this could not be established" is the part a reader needs.
+        ...clientIpFields({ ip: detection.ip ?? null, source: detection.clientIpSource ?? "unavailable" }),
         detected_at: (/* @__PURE__ */ new Date()).toISOString()
       });
-      if (queue.length >= MAX_BATCH) {
-        flush();
-        return;
-      }
-      if (!timer) timer = setTimeout(flush, flushMs);
+      kick();
     },
     flush,
+    /**
+     * Tell the platform which reporting state this guard settled on.
+     *
+     * The state also travels on the rules fetch, but that request is made BEFORE the fetch decides
+     * whether the rules are the platform's — so a site booting with an empty cache declares that it holds
+     * no managed rules, then receives them. Without this, the corrected state would wait for the next
+     * refresh, and a guard with refreshing switched off has none.
+     *
+     * Goes through the same transport as events, so it inherits the retry, the idempotency key and the
+     * single-flight bound. Only the newest state is kept: calling this twice before a send declares the
+     * second, because what the platform needs is the state now, not how it got there. A declaration that
+     * exhausts its retries is dropped rather than held — the state travels on every rules fetch too, so
+     * the next one corrects it.
+     *
+     * @param {string} state
+     */
+    announce(state) {
+      if (stopped || typeof fetchImpl !== "function" || typeof state !== "string") return;
+      pendingState = state;
+      queueMicrotask(() => {
+        if (!stopped) kick();
+      });
+    },
+    /**
+     * Stop reporting, leaving nothing stranded and nothing scheduled.
+     *
+     * Three things can be outstanding, and each needs an answer:
+     *
+     * - a batch waiting on a retry timer — it holds the only send slot, so clearing the timer alone would
+     *   leave it neither delivered nor counted. It gets one final attempt, with no retry behind it.
+     * - a request in flight — it is aborted, and its completion drains what is left rather than starting
+     *   open-ended work.
+     * - events still queued — drained a batch at a time, each attempted once.
+     *
+     * Whatever remains unsent when the drain runs out is counted as dropped, so every recorded event ends
+     * up delivered, refused or dropped, and none simply disappears.
+     *
+     * The drain is asynchronous, so this returns a promise that settles when nothing is outstanding —
+     * which a host shutting down can await instead of racing the last batch against process exit. It is
+     * best-effort and bounded: a runtime that terminates the process regardless, or a drain slower than
+     * `STOP_BUDGET_MS`, still ends the wait. Ignoring the promise behaves exactly as before.
+     */
     stop() {
+      if (stopped) return drainPromise ?? Promise.resolve();
       stopped = true;
-      flush();
+      drainPromise = new Promise((resolve) => {
+        drainResolve = resolve;
+      });
+      budgetTimer = unattended(setTimeout(() => {
+        budgetTimer = null;
+        terminate();
+      }, STOP_BUDGET_MS));
+      if (timer) {
+        clearTimeout(timer);
+        timer = null;
+      }
+      draining = true;
+      if (retryTimer) {
+        clearTimeout(retryTimer);
+        retryTimer = null;
+        void attempt();
+        return drainPromise;
+      }
+      if (sending) {
+        inFlight?.controller?.abort();
+        return drainPromise;
+      }
+      flushRequested = true;
+      kick();
+      return drainPromise;
     },
     /**
      * Point later events at the bundle now running. Called after an ACCEPTED swap only — a rejected
@@ -3090,12 +4022,70 @@ function createDetectionReporter(opts) {
      * Delivery health, counted in events: attempted, acknowledged, refused or unreachable, and dropped
      * for queue pressure — plus when a batch was last acknowledged. No request data of any kind.
      */
-    health: () => ({ sent, delivered, failed, dropped: droppedTotal + dropped, lastDeliveredAt })
+    health: () => ({
+      sent,
+      delivered,
+      failed,
+      dropped: droppedTotal + dropped,
+      // Attempts beyond the first, counted in ATTEMPTS rather than events: a path that only ever
+      // succeeds on a second try is working, and is worth telling apart from one that never retries.
+      retried,
+      // Redeliveries the credential path made after a refused token, which are not backoff retries and
+      // would otherwise appear nowhere: a rotated or revoked credential is worth seeing as itself.
+      reauthorized,
+      lastDeliveredAt,
+      // Separate, because a capability announcement delivers no events. Reading zero here alongside a
+      // non-zero `delivered` is a normal state, and so is the reverse.
+      capability: {
+        announced: capabilityAnnounced,
+        acknowledged: capabilityAcknowledged,
+        failed: capabilityFailed,
+        retried: capabilityRetried,
+        lastAcknowledgedAt: lastCapabilityAckAt
+      }
+    })
   };
 }
 
+// src/protect/reporting-state.js
+var REPORTING_STATES = Object.freeze([
+  /** Enrolled, managed rules, credential present, not opted out. Events are sent. */
+  "on",
+  /** `PATCHSTACK_REPORT_DETECTIONS=0`. An explicit, per-deployment opt-out. */
+  "disabled-by-config",
+  /** `PATCHSTACK_TELEMETRY=0`. The broader switch, which covers this along with everything else. */
+  "disabled-by-telemetry-opt-out",
+  /** No site identity: a local or unenrolled install. Nothing to report against. */
+  "not-enrolled",
+  /**
+   * A site identity, but the rules running are not the platform's — the caller's own bundle, or none.
+   * There is no managed rule document to attribute a detection to, so a report would name a rule id the
+   * platform never issued.
+   */
+  "no-managed-rules",
+  /** Enrolled with managed rules, but no credential resolved, so a report would be refused. */
+  "unavailable-no-credential"
+]);
+function optedOut(value) {
+  if (value === void 0 || value === null || value === "") return false;
+  return /^(0|false|off|no)$/i.test(String(value));
+}
+function reportingState(input) {
+  const env = input.env ?? (typeof process !== "undefined" ? process.env : void 0) ?? {};
+  if (input.configOptOut === true) return { state: "disabled-by-config", reports: false };
+  if (optedOut(env.PATCHSTACK_REPORT_DETECTIONS)) return { state: "disabled-by-config", reports: false };
+  if (optedOut(env.PATCHSTACK_TELEMETRY)) return { state: "disabled-by-telemetry-opt-out", reports: false };
+  const siteUuid = input.siteUuid;
+  if (typeof siteUuid !== "string" || siteUuid === "") return { state: "not-enrolled", reports: false };
+  if (input.hasCredential !== true) return { state: "unavailable-no-credential", reports: false };
+  const managed = input.ruleOrigin === "api" || input.ruleOrigin === "cache";
+  if (!managed) return { state: "no-managed-rules", reports: false };
+  return { state: "on", reports: true };
+}
+
 // src/protect/firewall-log.js
 var DEFAULT_API_BASE = "https://api.patchstack.com";
+var STOP_BUDGET_MS2 = 5e3;
 var DEFAULT_FLUSH_MS2 = 1e3;
 var MAX_BATCH2 = 50;
 var TOKEN_SKEW_MS = 6e4;
@@ -3136,9 +4126,7 @@ function createFirewallLogReporter(opts) {
   const creds = parseApiKey(opts.apiKey);
   if (!creds) {
     return { record() {
-    }, flush() {
-    }, stop() {
-    } };
+    }, flush: () => Promise.resolve(), stop: () => Promise.resolve() };
   }
   const apiBase = (opts.apiBase ?? DEFAULT_API_BASE).replace(/\/$/, "");
   const fetchImpl = opts.fetchImpl ?? globalThis.fetch;
@@ -3147,9 +4135,13 @@ function createFirewallLogReporter(opts) {
   let queue = [];
   let timer = null;
   let stopped = false;
+  const outstanding = /* @__PURE__ */ new Set();
+  let drainPromise = null;
+  const lifetime = typeof AbortController === "function" ? new AbortController() : null;
+  let ended = false;
   let cachedToken = null;
   let tokenInflight = null;
-  const fetchAccessToken = async () => {
+  const fetchAccessToken = async (signal) => {
     if (cachedToken && Date.now() < cachedToken.expiresAt - TOKEN_SKEW_MS) {
       return cachedToken.token;
     }
@@ -3158,6 +4150,7 @@ function createFirewallLogReporter(opts) {
       try {
         const res = await fetchImpl(`${apiBase}/oauth/token`, {
           method: "POST",
+          ...signal ? { signal } : {},
           headers: {
             "Content-Type": "application/json",
             Accept: "application/json",
@@ -3190,15 +4183,16 @@ function createFirewallLogReporter(opts) {
       clearTimeout(timer);
       timer = null;
     }
-    if (queue.length === 0 || typeof fetchImpl !== "function") return;
+    if (ended || queue.length === 0 || typeof fetchImpl !== "function") return Promise.resolve();
     const batch = queue.splice(0, MAX_BATCH2);
-    void (async () => {
-      const token = await fetchAccessToken();
-      if (!token) return;
-      const body = new URLSearchParams();
-      body.set("type", "firewall");
-      body.set("logs", JSON.stringify(batch));
+    let entry;
+    const send = (async () => {
       try {
+        const token = await fetchAccessToken(lifetime?.signal);
+        if (!token || ended) return;
+        const body = new URLSearchParams();
+        body.set("type", "firewall");
+        body.set("logs", JSON.stringify(batch));
         const p = fetchImpl(`${apiBase}/api/logs/log`, {
           method: "POST",
           headers: {
@@ -3208,13 +4202,20 @@ function createFirewallLogReporter(opts) {
             "User-Agent": "@patchstack/connect",
             ...sourceHost ? { "Source-Host": sourceHost } : {}
           },
-          body
+          body,
+          // Both phases carry it, so a shutdown that runs out of time can end either one.
+          ...lifetime ? { signal: lifetime.signal } : {}
         });
-        if (p && typeof p.then === "function") p.catch(() => {
+        if (p && typeof p.then === "function") await p.catch(() => {
         });
       } catch {
+      } finally {
+        outstanding.delete(entry);
       }
     })();
+    entry = send;
+    outstanding.add(send);
+    return send;
   };
   return {
     /**
@@ -3245,9 +4246,50 @@ function createFirewallLogReporter(opts) {
       if (!timer) timer = setTimeout(flush, flushMs);
     },
     flush,
+    /**
+     * Stop, and hand back a wait for what was outstanding.
+     *
+     * One flush sends at most a batch, so the queue is drained a batch at a time. The loop stops as soon
+     * as a pass cannot shrink the queue — with no usable transport there is nothing to wait for, and
+     * spinning would be worse than leaving the records where they are.
+     */
     stop() {
+      if (drainPromise) return drainPromise;
       stopped = true;
-      flush();
+      if (timer) {
+        clearTimeout(timer);
+        timer = null;
+      }
+      const terminate = () => {
+        ended = true;
+        lifetime?.abort();
+        queue = [];
+        outstanding.clear();
+      };
+      let budget = null;
+      const spent = new Promise((resolve) => {
+        budget = setTimeout(() => {
+          terminate();
+          resolve();
+        }, STOP_BUDGET_MS2);
+        if (typeof budget.unref === "function") budget.unref();
+      });
+      const work = (async () => {
+        while (!ended) {
+          if (outstanding.size > 0) {
+            await Promise.all([...outstanding]);
+            continue;
+          }
+          if (queue.length === 0) break;
+          const before = queue.length;
+          await flush();
+          if (queue.length >= before) break;
+        }
+      })();
+      drainPromise = Promise.race([work, spent]).then(() => {
+        if (budget) clearTimeout(budget);
+      });
+      return drainPromise;
     }
   };
 }
@@ -3338,8 +4380,8 @@ async function createProtection(options = {}) {
     fetchImpl: options.fetchImpl
   }) : null;
   let detections = null;
+  const ruleIdentity = (rule) => ({ id: rule?.id, category: rule?.category });
   const onDetect = (detection) => {
-    notify(userOnDetect, detection, "onDetect");
     if (detections) detections.record(detection);
     if (firewallLog && detection?.mode === "block") {
       firewallLog.record({
@@ -3350,6 +4392,12 @@ async function createProtection(options = {}) {
         userAgent: detection.userAgent
       });
     }
+    const { capture: _evidence, ...forCallback } = detection ?? {};
+    notify(
+      userOnDetect,
+      { ...forCallback, ...detection?.rule ? { rule: ruleIdentity(detection.rule) } : {} },
+      "onDetect"
+    );
   };
   const store = makeStore(options);
   const bootTimeoutMs = Number(options.bootTimeoutMs) > 0 ? Number(options.bootTimeoutMs) : 5e3;
@@ -3359,29 +4407,58 @@ async function createProtection(options = {}) {
     notify(onError, new Error(message), "onError");
     console.warn(message);
   }
-  const bundle = await resolveRules(options, store, { timeoutMs: bootTimeoutMs, pulseAuth });
-  let detectionReporting = "off";
-  if (options.reportDetections === true && options.siteUuid && telemetryEnabled()) {
-    if (!pulseAuth) {
-      detectionReporting = "unavailable-no-credential";
-      const message = "Patchstack: detection reporting is enabled for site " + options.siteUuid + " but no API credential resolved, so no report could be delivered. Reporting is off.";
-      notify(onError, new Error(message), "onError");
-      console.warn(message);
-    } else {
-      detectionReporting = "on";
+  const cachedOrigin = async () => {
+    const prior = await store.read();
+    if (prior?.bundle) return "cache";
+    return options.rules ? "bundled" : "empty";
+  };
+  const stateFor = (origin) => reportingState({
+    siteUuid: options.siteUuid,
+    ruleOrigin: origin,
+    hasCredential: Boolean(pulseAuth),
+    configOptOut: options.reportDetections === false
+  });
+  const preFetchState = stateFor(await cachedOrigin()).state;
+  const bundle = await resolveRules(options, store, {
+    timeoutMs: bootTimeoutMs,
+    pulseAuth,
+    detectionState: preFetchState
+  });
+  let detectionReporting = "not-enrolled";
+  let currentOrigin;
+  const applyReportingState = async (origin) => {
+    currentOrigin = origin;
+    const next = stateFor(origin);
+    const changed = next.state !== detectionReporting;
+    detectionReporting = next.state;
+    if (next.reports && !detections) {
       detections = createDetectionReporter({
         siteUuid: options.siteUuid,
         baseUrl: options.pulseRulesUrl,
         pulseAuth,
-        // The bundle the guard is actually running, so a hit can be attributed to the rules that produced
-        // it rather than to whatever is current when the report is read. Kept current across refreshes —
-        // see the refresh tick below.
+        // The bundle the guard is actually running, so a hit can be attributed to the rules that
+        // produced it rather than to whatever is current when the report is read.
         rulesEtag: (await store.read())?.etag ?? null,
         fetchImpl: options.fetchImpl,
         flushMs: options.detectionFlushMs
       });
+    } else if (!next.reports && detections) {
+      detections.stop();
+      detections = void 0;
     }
-  }
+    if (changed && next.state === "unavailable-no-credential") {
+      const message = "Patchstack: this site is enrolled and running managed rules, but no API credential resolved, so no security event could be delivered. Reporting is off.";
+      notify(onError, new Error(message), "onError");
+      console.warn(message);
+    }
+    return next;
+  };
+  const applyAndAcknowledge = async (origin, declared) => {
+    const settled = await applyReportingState(origin);
+    if (settled.state !== declared && detections) detections.announce(settled.state);
+    return settled;
+  };
+  await applyAndAcknowledge(bundle.source?.origin, preFetchState);
   let mode = resolveMode(options, bundle);
   let requestRules;
   let responseRules;
@@ -3428,6 +4505,19 @@ async function createProtection(options = {}) {
   };
   const maskFn = typeof options.maskWith === "function" ? options.maskWith : () => typeof options.maskWith === "string" ? options.maskWith : "[REDACTED]";
   const ruleMode = (rule) => rule?.enforcement === "dry-run" ? "dry-run" : mode;
+  const planCache = createPlanCache();
+  const evidenceFrom = (result) => {
+    if (!detections || !result?.rule) return void 0;
+    let entry;
+    try {
+      entry = planCache.for(result.rule);
+    } catch (err) {
+      notify(onError, err, "onError");
+      return void 0;
+    }
+    if (!permitsAnything(entry.plan)) return { plan: entry.reference };
+    return { plan: entry.reference, ...captureValues(entry.plan, result.resolver) };
+  };
   const decide = (phase, result, block, allow2, ctx = {}) => {
     if (!result || !result.blocked) return allow2();
     const effectiveMode = ruleMode(result.rule);
@@ -3442,7 +4532,12 @@ async function createProtection(options = {}) {
       method: ctx.method,
       path: ctx.path,
       ip: ctx.ip,
-      userAgent: ctx.userAgent
+      // Provenance travels with the address. Without it a consumer cannot tell an observed peer from a
+      // value read out of a forwarded header, and `null` from "there was no address to establish".
+      clientIpSource: ctx.clientIpSource,
+      userAgent: ctx.userAgent,
+      // Derived from the reading this decision was made on, before that reading goes out of scope.
+      capture: evidenceFrom(result)
     });
     return effectiveMode === "block" ? block() : allow2();
   };
@@ -3465,7 +4560,18 @@ async function createProtection(options = {}) {
       }
       if (!result.blocked) continue;
       const responseMode = ruleMode(rule);
-      onDetect({ phase: "response", mode: responseMode, category: rule.category, rule, message: result.message });
+      onDetect({
+        phase: "response",
+        mode: responseMode,
+        category: rule.category,
+        rule,
+        message: result.message,
+        ...requestMetaFromContext(reqCtx),
+        // A response detection names its capture policy like any other. Response sources are never
+        // capturable, so a response-only rule reports a plan that permitted nothing — which is the
+        // policy, and a different fact from a rule that found nothing.
+        capture: evidenceFrom(result)
+      });
       if (responseMode !== "block") continue;
       if (redactors && redactors.length) {
         const spanRedactors = redactors.filter((r) => !r.jsonPath);
@@ -3502,17 +4608,88 @@ async function createProtection(options = {}) {
     for (const rule of headerMutations) applyHeaderMutation(headers, rule);
     return { verdict: "redact", body, headers };
   };
-  const reqContextFromFetch = (request) => {
+  const shapeExpressRequest = (req) => {
+    const client = resolveClientIp({
+      peer: req?.socket?.remoteAddress,
+      headers: req?.headers ?? {},
+      trustedProxy: options.trustedProxy
+    });
+    return {
+      client,
+      shaped: {
+        // Own copies of everything a rule can address. Listed rather than spread, so a field the engine
+        // gains has to be added here deliberately instead of appearing to work by accident.
+        // Through the same gate as the engine's own normalisation: this projection turns whatever it reads
+        // into an OWN property, so reading a polluted prototype here would launder it into evidence that
+        // no later own-property check could tell from the real thing.
+        method: requestField(req, "method"),
+        url: requestField(req, "url"),
+        originalUrl: requestField(req, "originalUrl"),
+        headers: requestField(req, "headers"),
+        query: requestField(req, "query"),
+        body: requestField(req, "body"),
+        files: requestField(req, "files"),
+        cookies: requestField(req, "cookies"),
+        socket: requestField(req, "socket"),
+        // The verbatim body, when a caller kept one. A `raw` rule reads it directly, and the engine
+        // otherwise reconstructs raw by re-serialising the parsed body — which cannot carry what parsing
+        // did not keep: a body that failed to parse at all, a duplicate key where only the last value
+        // survives, or the exact bytes a signature was written against.
+        //
+        // Own property only. Evidence is what this request actually carried: a value reachable through a
+        // polluted prototype is not, and materialising it here would turn it into evidence indistinguish-
+        // able from real bytes — firing every raw rule that matches it. The adapters that capture real
+        // bytes define `_rawBody` on the request object itself.
+        ...Object.hasOwn(req ?? {}, "_rawBody") ? { _rawBody: req._rawBody } : {},
+        // The resolved address, and the resolution itself for the consumers downstream.
+        ip: client.ip ?? "",
+        _clientIp: client
+      }
+    };
+  };
+  const screenFetchRequest = async (request) => {
+    let result;
+    let shaped;
+    try {
+      shaped = await fromFetchRequest(request, { trustedProxy: options.trustedProxy });
+      result = engine.evaluate(shaped);
+    } catch (err) {
+      notify(onError, err, "onError");
+      return { blocked: null, client: void 0 };
+    }
+    const blocked = decide(
+      "request",
+      result,
+      () => blockResponse(result, request),
+      () => null,
+      requestMeta(shaped, request)
+    );
+    return { blocked, client: shaped?._clientIp };
+  };
+  const reqContextFromFetch = (request, client) => {
     try {
       const u = new URL(request.url);
       const headers = headerObject(request.headers);
       if (!headers.host) headers.host = u.host;
-      return { method: request.method, originalUrl: u.pathname + u.search, headers };
+      const resolved = client ?? { ip: null, source: "unavailable" };
+      return {
+        method: request.method,
+        originalUrl: u.pathname + u.search,
+        headers,
+        ip: resolved.ip ?? "",
+        _clientIp: resolved
+      };
     } catch {
       return void 0;
     }
   };
-  const reqContextFromNode = (req) => req ? { method: req.method, originalUrl: req.url, headers: req.headers || {} } : void 0;
+  const reqContextFromNode = (req, client) => req ? {
+    method: req.method,
+    originalUrl: req.url,
+    headers: req.headers || {},
+    ip: client?.ip ?? "",
+    _clientIp: client ?? { ip: null, source: "unavailable" }
+  } : void 0;
   const screenResp = async (response, reqCtx) => {
     const read = await readTextResponse(response, screenCap);
     if (read.skip) {
@@ -3639,7 +4816,23 @@ async function createProtection(options = {}) {
     }
     if (!result.blocked) return false;
     const egressMode = ruleMode(result.rule);
-    onDetect({ phase: "egress", mode: egressMode, category: result.rule?.category, rule: result.rule, message: result.message });
+    let egressPath = null;
+    try {
+      const u = new URL(url);
+      egressPath = u.pathname + u.search;
+    } catch {
+      egressPath = typeof url === "string" ? url : null;
+    }
+    onDetect({
+      phase: "egress",
+      mode: egressMode,
+      category: result.rule?.category,
+      rule: result.rule,
+      message: result.message,
+      method: typeof method === "string" ? method : null,
+      path: egressPath,
+      capture: evidenceFrom(result)
+    });
     return egressMode === "block";
   };
   const protection = {
@@ -3660,28 +4853,26 @@ async function createProtection(options = {}) {
     },
     // Screen a fetch Response through the response-phase rules (redact/block). Used by
     // .fetch(), and by the Supabase guard on its forwarded upstream response.
-    screenResponse: (response, request) => screenResp(response, request ? reqContextFromFetch(request) : void 0),
+    // A standalone response screen with no request phase of its own — the Supabase guard's forwarded
+    // upstream response. It resolves once here, which is the only resolution for this call.
+    screenResponse: (response, request) => screenResp(
+      response,
+      request ? reqContextFromFetch(
+        request,
+        resolveClientIp({ headers: headerObject(request.headers), trustedProxy: options.trustedProxy })
+      ) : void 0
+    ),
     // (request) => Response | null   (null = allow, caller proceeds). Request phase only.
     fetchGuard() {
-      return async (request) => {
-        let result;
-        try {
-          result = engine.evaluate(await fromFetchRequest(request));
-        } catch (err) {
-          notify(onError, err, "onError");
-          return null;
-        }
-        return decide("request", result, () => blockResponse(result, request), () => null, fetchRequestMeta(request));
-      };
+      return async (request) => (await screenFetchRequest(request)).blocked;
     },
     // Wrap a fetch handler: screens the request, then the response (redact/block).
     fetch(handler) {
-      const guard = protection.fetchGuard();
       return async (request, ...rest) => {
-        const blocked = await guard(request);
+        const { blocked, client } = await screenFetchRequest(request);
         if (blocked) return blocked;
         const response = await handler(request, ...rest);
-        return screenResp(response, reqContextFromFetch(request));
+        return screenResp(response, reqContextFromFetch(request, client));
       };
     },
     // Express middleware (request phase; expects express-parsed req.query/req.body).
@@ -3689,11 +4880,12 @@ async function createProtection(options = {}) {
     express(exprOptions = {}) {
       return (req, res, next) => {
         let result;
+        const { shaped, client } = shapeExpressRequest(req);
         try {
-          result = engine.evaluate(req);
+          result = engine.evaluate(shaped);
         } catch (err) {
           notify(onError, err, "onError");
-          if (exprOptions.screenResponses) wrapNodeResponse(res, reqContextFromNode(req));
+          if (exprOptions.screenResponses) wrapNodeResponse(res, reqContextFromNode(req, client));
           return next();
         }
         decide(
@@ -3707,10 +4899,10 @@ async function createProtection(options = {}) {
             }
           },
           () => {
-            if (exprOptions.screenResponses) wrapNodeResponse(res, reqContextFromNode(req));
+            if (exprOptions.screenResponses) wrapNodeResponse(res, reqContextFromNode(req, client));
             next();
           },
-          nodeRequestMeta(req)
+          nodeRequestMeta(req, client)
         );
       };
     },
@@ -3749,7 +4941,7 @@ async function createProtection(options = {}) {
         let shaped;
         let result;
         try {
-          shaped = fromNodeRequest(req, rawBody);
+          shaped = fromNodeRequest(req, rawBody, { trustedProxy: options.trustedProxy });
           if (parsedBody !== void 0 && parsedBody !== null) shaped.body = parsedBody;
           result = engine.evaluate(shaped);
         } catch (err) {
@@ -3771,10 +4963,10 @@ async function createProtection(options = {}) {
           },
           () => {
             if (req.body === void 0) req.body = shaped.body;
-            if (nodeOptions.screenResponses) wrapNodeResponse(res, reqContextFromNode(req));
+            if (nodeOptions.screenResponses) wrapNodeResponse(res, reqContextFromNode(req, shaped?._clientIp));
             next();
           },
-          nodeRequestMeta(req)
+          nodeRequestMeta(req, shaped?._clientIp)
         );
       }
     }
@@ -3797,7 +4989,7 @@ async function createProtection(options = {}) {
   let reporter = null;
   if (refreshable && options.siteUuid && options.reportManifest !== false && cwd) {
     try {
-      ({ reportManifest: reporter } = await import("./refresh-manifest-KNZQBC4V.js"));
+      ({ reportManifest: reporter } = await import("./refresh-manifest-SWCPQ52Z.js"));
     } catch (err) {
       notify(onError, err, "onError");
     }
@@ -3810,9 +5002,15 @@ async function createProtection(options = {}) {
         notify(onError, err, "onError");
       }
     }
-    const next = await resolveRules(options, store, { timeoutMs: options.refreshTimeoutMs, pulseAuth });
+    const declaredState = stateFor(currentOrigin).state;
+    const next = await resolveRules(options, store, {
+      timeoutMs: options.refreshTimeoutMs,
+      pulseAuth,
+      detectionState: declaredState
+    });
     mode = resolveMode(options, next);
     applyBundle(next);
+    await applyAndAcknowledge(next.source?.origin, declaredState);
     if (detections) detections.setRulesEtag((await store.read())?.etag ?? null);
     return next.source ?? { ok: true };
   };
@@ -3823,12 +5021,20 @@ async function createProtection(options = {}) {
   const loop = options.refreshMs > 0 && live ? startRefresh(runRefreshTick, { refreshMs: options.refreshMs, onError }) : null;
   protection.stop = () => {
     loop?.stop();
-    firewallLog?.stop();
-    detections?.stop();
+    const outstanding = [firewallLog?.stop(), detections?.stop()].filter(
+      (wait) => wait && typeof wait.then === "function"
+    );
+    return Promise.all(outstanding).then(() => void 0);
   };
   protection.stopRefresh = protection.stop;
-  protection.detectionReporting = detectionReporting;
-  if (detections) protection.detectionHealth = () => detections.health();
+  Object.defineProperty(protection, "detectionReporting", {
+    get: () => detectionReporting,
+    enumerable: true
+  });
+  Object.defineProperty(protection, "detectionHealth", {
+    get: () => detections ? () => detections.health() : void 0,
+    enumerable: true
+  });
   return protection;
 }
 function resolveMode(options, bundle) {
@@ -4234,30 +5440,48 @@ function defaultOnDetect({ phase, mode, category, rule, message }) {
   const tag = mode === "block" ? "BLOCK" : "DETECT (dry-run)";
   console.warn(`[patchstack] ${tag} phase=${phase ?? "request"} category=${category ?? "?"} rule=${rule?.id ?? "?"} ${message ?? ""}`.trim());
 }
-function fetchRequestMeta(request) {
-  if (!request) return {};
-  let path = null;
-  try {
-    path = new URL(request.url).pathname;
-  } catch {
-    path = typeof request.url === "string" ? request.url : null;
-  }
+function requestMetaFromContext(reqCtx) {
+  if (!reqCtx) return {};
+  const client = reqCtx._clientIp ?? { ip: null, source: "unavailable" };
   return {
-    method: request.method ?? null,
-    path,
-    ip: request.headers?.get?.("x-forwarded-for") ?? null,
-    userAgent: request.headers?.get?.("user-agent") ?? null
+    method: reqCtx.method ?? null,
+    // Path AND query. The reporter is what drops the query's VALUES, keeping its parameter names, so
+    // trimming it here would leave a Fetch or response detection unable to say what was requested.
+    path: typeof reqCtx.originalUrl === "string" ? reqCtx.originalUrl : null,
+    ip: client.ip,
+    clientIpSource: client.source,
+    userAgent: reqCtx.headers?.["user-agent"] ?? null
   };
 }
-function nodeRequestMeta(req) {
+function requestMeta(shaped, request) {
+  const client = shaped?._clientIp ?? { ip: null, source: "unavailable" };
+  let path = null;
+  let method = null;
+  let userAgent = null;
+  if (request) {
+    try {
+      const u = new URL(request.url);
+      path = u.pathname + u.search;
+    } catch {
+      path = typeof request.url === "string" ? request.url : null;
+    }
+    method = request.method ?? null;
+    userAgent = request.headers?.get?.("user-agent") ?? null;
+  }
+  return { method, path, ip: client.ip, clientIpSource: client.source, userAgent };
+}
+function nodeRequestMeta(req, client) {
   if (!req) return {};
   const headers = req.headers ?? {};
   const ua = headers["user-agent"] ?? headers["User-Agent"];
-  const fwd = headers["x-forwarded-for"] ?? headers["X-Forwarded-For"];
+  const resolved = client ?? { ip: null, source: "unavailable" };
   return {
     method: req.method ?? null,
     path: req.originalUrl || req.url || null,
-    ip: req.ip ?? (typeof fwd === "string" ? fwd : null),
+    // Never `req.ip`: under Express's `trust proxy` that is header-derived by a policy this guard has not
+    // verified, and a second derivation could disagree with the one the engine evaluated.
+    ip: resolved.ip,
+    clientIpSource: resolved.source,
     userAgent: typeof ua === "string" ? ua : Array.isArray(ua) ? ua[0] : null
   };
 }