@patchstack/connect 0.5.27 → 0.5.32

package/dist/protect/templates/fastify-plugin.ts

@@ -1,6 +1,6 @@
 // Patchstack runtime guard for Fastify — plugin. Managed by `patchstack-connect protect`.
 // Register it once (`app.register(patchstackFastify)`); it adds a preHandler hook that runs the
-// request-phase WAF (+ egress SSRF) on every request. Fastify's request/reply aren't Web-Fetch
+// request-phase WAF (+ egress SSRF) and filters buffered onSend output. Fastify's request/reply aren't Web-Fetch
 // shaped, so we reconstruct a Request from the parsed fastify request and run the fetch guard.
 import { createProtection, sentinelAnswer, VERIFY_HEADER } from "@patchstack/connect/protect";
 import fallbackRules from "./rules.json";
@@ -29,10 +29,11 @@ async function getProtection() {
 }
 
 async function buildProtection() {
-  const mode = process.env.PATCHSTACK_MODE === "dry-run" ? "dry-run" : "block";
-  const token = process.env.PATCHSTACK_WAF_TOKEN;
-  const siteUuid = PS_SITE_UUID.startsWith("__") ? process.env.PATCHSTACK_SITE_UUID : PS_SITE_UUID;
-  const common = { mode, egress: true } as const;
+  const mode = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_MODE) === "dry-run" ? "dry-run" : "block";
+  const token = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_WAF_TOKEN);
+  const siteUuid = PS_SITE_UUID.startsWith("__") ? (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_SITE_UUID) : PS_SITE_UUID;
+  const refreshMs = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_ENVIRONMENT) === "sandbox" ? 15000 : 300000;
+  const common = { mode, egress: true, refreshMs } as const;
   return createProtection(
     siteUuid
       ? { ...common, siteUuid, rules: fallbackRules as never, cacheDir: ".patchstack" }
@@ -92,8 +93,23 @@ export async function patchstackFastify(fastify: any) {
     const host = request.headers?.host ?? "localhost";
     const url = `http://${host}${request.url ?? "/"}`;
     const hasBody = method !== "GET" && method !== "HEAD" && request.body != null;
-    const body = hasBody ? (typeof request.body === "string" ? request.body : JSON.stringify(request.body)) : undefined;
-    const blocked = await guard(new Request(url, { method, headers: request.headers as HeadersInit, body }));
+    let blocked;
+    try {
+      const headers = new Headers();
+      for (const [name, value] of Object.entries(request.headers)) {
+        if (value !== undefined) headers.set(name, Array.isArray(value) ? value.join(", ") : String(value));
+      }
+      const parsed = hasBody && typeof request.body === "object" && !Buffer.isBuffer(request.body);
+      const body = hasBody ? (parsed ? JSON.stringify(request.body) : request.body) : undefined;
+      // Fastify already parsed form fields. Screen that object as JSON, not JSON mislabeled as a form.
+      // Only the screening copy changes; the route keeps its original body, headers and raw stream.
+      if (parsed) headers.set("content-type", "application/json");
+      headers.delete("content-length");
+      blocked = await guard(new Request(url, { method, headers, body }));
+    } catch (err) {
+      psStepAside(err);
+      return;
+    }
     if (blocked) {
       const contentType = blocked.headers.get("content-type");
       reply.code(blocked.status);
@@ -102,6 +118,36 @@ export async function patchstackFastify(fastify: any) {
       return reply; // stop the request here
     }
   });
+
+  fastify.addHook("onSend", async (request: any, reply: any, payload: any) => {
+    // Do not consume streams, hijacked responses, or bodyless status codes.
+    if ((typeof payload !== "string" && !Buffer.isBuffer(payload))
+      || request.method === "HEAD" || reply.statusCode < 200 || [204, 205, 304].includes(reply.statusCode)) return payload;
+    const protection = await getProtection().catch(psStepAside);
+    if (!protection) return payload;
+    try {
+      const headers = new Headers();
+      for (const [name, value] of Object.entries(reply.getHeaders())) {
+        for (const item of Array.isArray(value) ? value : [value]) {
+          if (item !== undefined) headers.append(name, String(item));
+        }
+      }
+      const original = new Response(typeof payload === "string" ? payload : new Uint8Array(payload).buffer, { status: reply.statusCode, headers });
+      const context = new Request(`http://${request.headers?.host ?? "localhost"}${request.url ?? "/"}`, { method: request.method, headers: request.headers });
+      const screened = await protection.screenResponse(original, context);
+      if (screened === original) return payload;
+      const body = Buffer.from(await screened.arrayBuffer());
+      reply.code(screened.status);
+      for (const name of Object.keys(reply.getHeaders())) reply.removeHeader(name);
+      screened.headers.forEach((value, name) => { if (name !== "set-cookie") reply.header(name, value); });
+      const cookies = screened.headers.getSetCookie();
+      if (cookies.length) reply.header("set-cookie", cookies);
+      return body;
+    } catch (err) {
+      psStepAside(err);
+      return payload;
+    }
+  });
 }
 // #endregion patchstack-fastify
 

package/dist/protect/templates/fetch-guard.ts

@@ -0,0 +1,52 @@
+// Server-only Fetch guard for bundled applications. Never import this module into client code.
+import { createProtection, sentinelAnswer, VERIFY_HEADER } from "@patchstack/connect/protect";
+import fallbackRules from "./rules.json";
+
+const PS_SITE_UUID = "__PATCHSTACK_SITE_UUID__";
+type Protection = Awaited<ReturnType<typeof createProtection>>;
+const policies = new WeakMap<object, Promise<Protection>>();
+const emptyEnvironment = {};
+let warned = false;
+
+function environment(value: unknown): Record<string, unknown> {
+  if (value && typeof value === "object" && ["PATCHSTACK_API_KEY", "PATCHSTACK_SITE_UUID", "PATCHSTACK_PULSE_AUTH"].some(key => key in value)) {
+    return value as Record<string, unknown>;
+  }
+  return typeof process === "undefined" ? emptyEnvironment : process.env;
+}
+
+async function getProtection(bindings: unknown) {
+  const env = environment(bindings);
+  let pending = policies.get(env);
+  if (!pending) {
+    const value = (key: string) => typeof env[key] === "string" ? env[key] as string : undefined;
+    pending = createProtection({
+      siteUuid: PS_SITE_UUID.startsWith("__") ? value("PATCHSTACK_SITE_UUID") : PS_SITE_UUID,
+      apiKey: value("PATCHSTACK_API_KEY"),
+      pulseAuth: value("PATCHSTACK_PULSE_AUTH") ?? value("PATCHSTACK_API_KEY"),
+      mode: value("PATCHSTACK_MODE") === "dry-run" ? "dry-run" : "block",
+      rules: fallbackRules as never,
+      cacheDir: ".patchstack",
+      refreshMs: value("PATCHSTACK_ENVIRONMENT") === "sandbox" ? 15000 : 300000,
+      egress: true,
+    }).catch(error => { policies.delete(env); throw error; });
+    policies.set(env, pending);
+  }
+  return pending.catch(error => {
+    if (!warned) {
+      warned = true;
+      console.warn("[patchstack] protection is unavailable; traffic may pass through unscreened until a later attempt succeeds.", error instanceof Error ? error.message : String(error));
+    }
+    return null;
+  });
+}
+
+export function protectFetch<Args extends unknown[]>(handler: (request: Request, ...args: Args) => Response | Promise<Response>) {
+  return async function(this: unknown, request: Request, ...args: Args): Promise<Response> {
+    const answered = await sentinelAnswer(request.headers.get(VERIFY_HEADER));
+    if (answered) return new Response(answered, { headers: { "content-type": "text/plain" } });
+    const protection = await getProtection(args[0]);
+    // Only initialization fails open here. Application failures propagate without repeating the handler.
+    return protection ? protection.fetch(handler).call(this, request, ...args) : handler.call(this, request, ...args);
+  };
+}

package/dist/protect/templates/generic-guard.cjs

@@ -31,10 +31,11 @@ async function getProtection() {
 }
 
 async function buildProtection() {
-  const mode = process.env.PATCHSTACK_MODE === "dry-run" ? "dry-run" : "block";
-  const token = process.env.PATCHSTACK_WAF_TOKEN;
-  const siteUuid = PS_SITE_UUID.startsWith("__") ? process.env.PATCHSTACK_SITE_UUID : PS_SITE_UUID;
-  const common = { mode, egress: true };
+  const mode = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_MODE) === "dry-run" ? "dry-run" : "block";
+  const token = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_WAF_TOKEN);
+  const siteUuid = PS_SITE_UUID.startsWith("__") ? (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_SITE_UUID) : PS_SITE_UUID;
+  const refreshMs = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_ENVIRONMENT) === "sandbox" ? 15000 : 300000;
+  const common = { mode, egress: true, refreshMs };
   return createProtection(
     siteUuid
       ? { ...common, siteUuid, rules: fallbackRules, cacheDir: ".patchstack" }
@@ -105,7 +106,7 @@ function patchstackMiddleware(req, res, next) {
   // there is nothing to answer and the request is screened as normal.
   const screen = () => {
     getProtection().then(
-      (active) => active.node()(req, res, carryOn),
+      (active) => active.node({ screenResponses: true })(req, res, carryOn),
       (err) => {
         psStepAside(err);
         carryOn();

package/dist/protect/templates/generic-guard.js

@@ -32,10 +32,11 @@ export async function getProtection() {
 }
 
 async function buildProtection() {
-  const mode = process.env.PATCHSTACK_MODE === "dry-run" ? "dry-run" : "block";
-  const token = process.env.PATCHSTACK_WAF_TOKEN;
-  const siteUuid = PS_SITE_UUID.startsWith("__") ? process.env.PATCHSTACK_SITE_UUID : PS_SITE_UUID;
-  const common = { mode, egress: true };
+  const mode = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_MODE) === "dry-run" ? "dry-run" : "block";
+  const token = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_WAF_TOKEN);
+  const siteUuid = PS_SITE_UUID.startsWith("__") ? (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_SITE_UUID) : PS_SITE_UUID;
+  const refreshMs = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_ENVIRONMENT) === "sandbox" ? 15000 : 300000;
+  const common = { mode, egress: true, refreshMs };
   return createProtection(
     siteUuid
       ? { ...common, siteUuid, rules: fallbackRules, cacheDir: ".patchstack" }
@@ -107,7 +108,7 @@ export function patchstackMiddleware(req, res, next) {
   // there is nothing to answer and the request is screened as normal.
   const screen = () => {
     getProtection().then(
-      (active) => active.node()(req, res, carryOn),
+      (active) => active.node({ screenResponses: true })(req, res, carryOn),
       (err) => {
         psStepAside(err);
         carryOn();

package/dist/protect/templates/generic-guard.ts

@@ -35,13 +35,10 @@ export async function getProtection() {
 }
 
 async function buildProtection() {
-  const mode = process.env.PATCHSTACK_MODE === "dry-run" ? "dry-run" : "block";
-  const token = process.env.PATCHSTACK_WAF_TOKEN;
-  const siteUuid = PS_SITE_UUID.startsWith("__") ? process.env.PATCHSTACK_SITE_UUID : PS_SITE_UUID;
-  // The sandbox dev server is long-lived and isn't restarted on change, so refresh the live
-  // rules periodically — a dependency flagged after boot is then enforced without a restart.
-  // Production relies on a redeploy (which re-fetches at boot), so refresh stays off there.
-  const refreshMs = process.env.PATCHSTACK_ENVIRONMENT === "sandbox" ? 15000 : 0;
+  const mode = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_MODE) === "dry-run" ? "dry-run" : "block";
+  const token = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_WAF_TOKEN);
+  const siteUuid = PS_SITE_UUID.startsWith("__") ? (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_SITE_UUID) : PS_SITE_UUID;
+  const refreshMs = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_ENVIRONMENT) === "sandbox" ? 15000 : 300000;
   const common = { mode, egress: true, refreshMs } as const;
   return createProtection(
     siteUuid
@@ -116,7 +113,7 @@ export function patchstackMiddleware(req: unknown, res: unknown, next: (err?: un
   // there is nothing to answer and the request is screened as normal.
   const screen = () => {
     getProtection().then(
-      (protection) => (protection.node() as (a: unknown, b: unknown, c: (e?: unknown) => void) => void)(req, res, carryOn),
+      (protection) => (protection.node({ screenResponses: true }) as (a: unknown, b: unknown, c: (e?: unknown) => void) => void)(req, res, carryOn),
       (err) => {
         psStepAside(err);
         carryOn();

package/dist/protect/templates/guard.ts

@@ -49,9 +49,9 @@ async function getProtection() {
 
 async function buildProtection() {
   // Always-on: block by default. An explicit PATCHSTACK_MODE=dry-run downgrades to log-only.
-  const mode: "block" | "dry-run" = process.env.PATCHSTACK_MODE === "dry-run" ? "dry-run" : "block";
-  const token = process.env.PATCHSTACK_WAF_TOKEN;
-  const siteUuid = PS_SITE_UUID.startsWith("__") ? process.env.PATCHSTACK_SITE_UUID : PS_SITE_UUID;
+  const mode: "block" | "dry-run" = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_MODE) === "dry-run" ? "dry-run" : "block";
+  const token = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_WAF_TOKEN);
+  const siteUuid = PS_SITE_UUID.startsWith("__") ? (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_SITE_UUID) : PS_SITE_UUID;
   // Egress SSRF screening: block the app's outbound calls to internal / metadata addresses,
   // but never its own Supabase project.
   let allowHosts: string[] = [];
@@ -60,10 +60,7 @@ async function buildProtection() {
   } catch {
     /* ignore a malformed SUPABASE_URL — just don't add an allow entry */
   }
-  // The sandbox dev server is long-lived and isn't restarted on change, so refresh the live
-  // rules periodically — a dependency flagged after boot is then enforced without a restart.
-  // Production relies on a redeploy (which re-fetches at boot), so refresh stays off there.
-  const refreshMs = process.env.PATCHSTACK_ENVIRONMENT === "sandbox" ? 15000 : 0;
+  const refreshMs = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_ENVIRONMENT) === "sandbox" ? 15000 : 300000;
   const common = { mode, egress: true, allowHosts, refreshMs };
   return createProtection(
     siteUuid

package/dist/protect/templates/next-guard.ts

@@ -18,10 +18,11 @@ async function getProtection() {
 }
 
 async function buildProtection() {
-  const mode = process.env.PATCHSTACK_MODE === "dry-run" ? "dry-run" : "block";
-  const siteUuid = PS_SITE_UUID.startsWith("__") ? process.env.PATCHSTACK_SITE_UUID : PS_SITE_UUID;
-  const token = process.env.PATCHSTACK_WAF_TOKEN;
-  const common = { mode, egress: true } as const;
+  const mode = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_MODE) === "dry-run" ? "dry-run" : "block";
+  const siteUuid = PS_SITE_UUID.startsWith("__") ? (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_SITE_UUID) : PS_SITE_UUID;
+  const token = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_WAF_TOKEN);
+  const refreshMs = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_ENVIRONMENT) === "sandbox" ? 15000 : 300000;
+  const common = { mode, egress: true, refreshMs } as const;
   return createProtection(
     siteUuid
       ? { ...common, siteUuid, rules: fallbackRules as never, cacheDir: ".patchstack" }

package/dist/protect/templates/next-middleware.ts

@@ -29,10 +29,11 @@ async function getProtection() {
 }
 
 async function buildProtection() {
-  const mode = process.env.PATCHSTACK_MODE === "dry-run" ? "dry-run" : "block";
-  const token = process.env.PATCHSTACK_WAF_TOKEN;
-  const siteUuid = PS_SITE_UUID.startsWith("__") ? process.env.PATCHSTACK_SITE_UUID : PS_SITE_UUID;
-  const common = { mode, egress: true } as const;
+  const mode = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_MODE) === "dry-run" ? "dry-run" : "block";
+  const token = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_WAF_TOKEN);
+  const siteUuid = PS_SITE_UUID.startsWith("__") ? (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_SITE_UUID) : PS_SITE_UUID;
+  const refreshMs = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_ENVIRONMENT) === "sandbox" ? 15000 : 300000;
+  const common = { mode, egress: true, refreshMs } as const;
   return createProtection(
     siteUuid
       ? { ...common, siteUuid, rules: fallbackRules as never, cacheDir: ".patchstack" }

package/dist/protect/templates/nuxt-middleware.ts

@@ -29,10 +29,11 @@ async function getProtection() {
 }
 
 async function buildProtection() {
-  const mode = process.env.PATCHSTACK_MODE === "dry-run" ? "dry-run" : "block";
-  const token = process.env.PATCHSTACK_WAF_TOKEN;
-  const siteUuid = PS_SITE_UUID.startsWith("__") ? process.env.PATCHSTACK_SITE_UUID : PS_SITE_UUID;
-  const common = { mode, egress: true } as const;
+  const mode = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_MODE) === "dry-run" ? "dry-run" : "block";
+  const token = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_WAF_TOKEN);
+  const siteUuid = PS_SITE_UUID.startsWith("__") ? (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_SITE_UUID) : PS_SITE_UUID;
+  const refreshMs = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_ENVIRONMENT) === "sandbox" ? 15000 : 300000;
+  const common = { mode, egress: true, refreshMs } as const;
   return createProtection(
     siteUuid
       ? { ...common, siteUuid, rules: fallbackRules as never, cacheDir: ".patchstack" }

package/dist/protect/templates/sveltekit-hooks.ts

@@ -29,10 +29,11 @@ async function getProtection() {
 }
 
 async function buildProtection() {
-  const mode = process.env.PATCHSTACK_MODE === "dry-run" ? "dry-run" : "block";
-  const token = process.env.PATCHSTACK_WAF_TOKEN;
-  const siteUuid = PS_SITE_UUID.startsWith("__") ? process.env.PATCHSTACK_SITE_UUID : PS_SITE_UUID;
-  const common = { mode, egress: true } as const;
+  const mode = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_MODE) === "dry-run" ? "dry-run" : "block";
+  const token = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_WAF_TOKEN);
+  const siteUuid = PS_SITE_UUID.startsWith("__") ? (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_SITE_UUID) : PS_SITE_UUID;
+  const refreshMs = (typeof process === "undefined" ? undefined : process.env.PATCHSTACK_ENVIRONMENT) === "sandbox" ? 15000 : 300000;
+  const common = { mode, egress: true, refreshMs } as const;
   return createProtection(
     siteUuid
       ? { ...common, siteUuid, rules: fallbackRules as never, cacheDir: ".patchstack" }

package/dist/protect.cjs

@@ -976,10 +976,13 @@ async function resolveConfig(options) {
       "CONFIG_INVALID"
     );
   }
-  const inferred = environmentRaw === void 0 ? inferEnvironment(process.env, detectHostedBuilder(options.cwd)) : null;
-  const environment = environmentRaw ?? inferred.environment;
-  const environmentEvidence = inferred?.evidence ?? [];
-  const environmentSource = environmentRaw !== void 0 ? "override" : inferred.source;
+  const inferred = fromEnv.environment === void 0 ? inferEnvironment(process.env, detectHostedBuilder(options.cwd)) : null;
+  const fileLabelOverruled = fromEnv.environment === void 0 && environmentRaw !== void 0 && environmentRaw !== "production" && inferred.environment === "production";
+  const labelled = fileLabelOverruled ? void 0 : environmentRaw;
+  const environment = labelled ?? inferred.environment;
+  const environmentEvidence = labelled === void 0 ? inferred.evidence : [];
+  const environmentSource = labelled !== void 0 ? "override" : inferred.source;
+  const ignoredFileEnvironment = fileLabelOverruled ? environmentRaw : null;
   if (siteUuid !== null && siteUuid.length > 0 && !isCanonicalUuid(siteUuid)) {
     throw new PatchstackError(
       `Site UUID "${siteUuid}" does not look like a valid UUID.`,
@@ -1008,6 +1011,7 @@ async function resolveConfig(options) {
     environment,
     environmentEvidence,
     environmentSource,
+    ignoredFileEnvironment,
     widget: fromFile.widget !== false,
     claimToken
   };
@@ -9360,10 +9364,10 @@ async function createProtection(options = {}) {
     },
     // Wrap a fetch handler: screens the request, then the response (redact/block).
     fetch(handler) {
-      return async (request, ...rest) => {
+      return async function(request, ...rest) {
         const { blocked, client } = await screenFetchRequest(request, rest);
         if (blocked) return blocked;
-        const response = await handler(request, ...rest);
+        const response = await handler.call(this, request, ...rest);
         return screenResp(response, reqContextFromFetch(request, client));
       };
     },