@patchstack/connect 0.5.24 → 0.5.25

package/dist/protect/templates/next-guard.ts

@@ -0,0 +1,54 @@
+// Server-only helpers for Next.js middleware and App Router handlers.
+import { createProtection } from "@patchstack/connect/protect";
+import fallbackRules from "./patchstack.rules.json";
+
+const PS_SITE_UUID = "__PATCHSTACK_SITE_UUID__";
+type Protection = Awaited<ReturnType<typeof createProtection>>;
+let _protection: Promise<Protection> | undefined;
+let warned = false;
+
+async function getProtection() {
+  if (!_protection) {
+    _protection = buildProtection().catch((error) => {
+      _protection = undefined;
+      throw error;
+    });
+  }
+  return _protection;
+}
+
+async function buildProtection() {
+  const mode = process.env.PATCHSTACK_MODE === "dry-run" ? "dry-run" : "block";
+  const siteUuid = PS_SITE_UUID.startsWith("__") ? process.env.PATCHSTACK_SITE_UUID : PS_SITE_UUID;
+  const token = process.env.PATCHSTACK_WAF_TOKEN;
+  const common = { mode, egress: true } as const;
+  return createProtection(
+    siteUuid
+      ? { ...common, siteUuid, rules: fallbackRules as never, cacheDir: ".patchstack" }
+      : token
+        ? { ...common, token, cacheDir: ".patchstack" }
+        : { ...common, rules: fallbackRules as never },
+  );
+}
+
+export async function getPatchstackProtection() {
+  return getProtection().catch((error: unknown) => {
+    if (!warned) {
+      warned = true;
+      console.warn(
+        "[patchstack] protection is unavailable; traffic may pass through unscreened until a later attempt succeeds. Reported once per process. Cause: " +
+          (error instanceof Error ? error.message : String(error)),
+      );
+    }
+    return null;
+  });
+}
+
+// The handler's expression is evaluated once; its rejection remains the application's error.
+export async function screenPatchstackResponse(
+  response: Response | Promise<Response>,
+  request: Request,
+  protection: Protection | null,
+): Promise<Response> {
+  return protection ? protection.screenResponse(await response, request) : response;
+}

package/dist/protect.cjs

@@ -9450,7 +9450,7 @@ async function createProtection(options = {}) {
       allowHosts
     });
   }
-  const cwd = options.cwd ?? (typeof process !== "undefined" ? process.cwd() : void 0);
+  const cwd = workingDirectory(options);
   const live = Boolean(options.siteUuid || options.token);
   const refreshSecret = options.refreshSecret ?? (typeof process !== "undefined" ? process.env.PATCHSTACK_REFRESH_SECRET : void 0);
   const refreshable = live && (options.refreshMs > 0 || Boolean(refreshSecret));
@@ -9544,8 +9544,17 @@ function resolveMode(options, bundle) {
   return "dry-run";
 }
 var CREDENTIAL_FILES = [".patchstackrc.local.json", ".patchstackrc.json"];
+function workingDirectory(options) {
+  if (options?.cwd !== void 0) return options.cwd;
+  try {
+    return typeof process !== "undefined" && typeof process.cwd === "function" ? process.cwd() : void 0;
+  } catch {
+    return void 0;
+  }
+}
 async function readCredentialField(options, field) {
-  if (typeof process === "undefined" || typeof process.cwd !== "function") return void 0;
+  const cwd = workingDirectory(options);
+  if (!cwd) return void 0;
   let readFileSync2;
   let join;
   try {
@@ -9555,7 +9564,6 @@ async function readCredentialField(options, field) {
   } catch {
     return void 0;
   }
-  const cwd = options?.cwd ?? process.cwd();
   for (const filename of CREDENTIAL_FILES) {
     try {
       const value = JSON.parse(readFileSync2(join(cwd, filename), "utf8"))?.[field];