@patchstack/connect 0.5.4 → 0.5.5

package/dist/protect.cjs

@@ -38,8 +38,8 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/pulse-token.ts
 function buildTokenUrl(manifestEndpoint) {
   const url = new URL(manifestEndpoint);
-  const path8 = url.pathname.replace(/\/$/, "");
-  url.pathname = path8.endsWith("/manifest") ? `${path8.slice(0, -"/manifest".length)}/token` : "/monitor/pulse/token";
+  const path9 = url.pathname.replace(/\/$/, "");
+  url.pathname = path9.endsWith("/manifest") ? `${path9.slice(0, -"/manifest".length)}/token` : "/monitor/pulse/token";
   url.search = "";
   url.hash = "";
   return url.toString();
@@ -326,19 +326,44 @@ var init_client = __esm({
 });
 
 // src/environment.ts
-function inferEnvironment(env = process.env) {
+function detectHostedBuilder(cwd) {
+  let declared;
+  try {
+    const pkg = JSON.parse((0, import_node_fs.readFileSync)(import_node_path.default.join(cwd, "package.json"), "utf8"));
+    declared = { ...pkg.dependencies ?? {}, ...pkg.devDependencies ?? {} };
+  } catch {
+    return null;
+  }
+  const names = Object.keys(declared);
+  for (const rule of HOSTED_BUILDER_PACKAGES) {
+    const hit = names.some(
+      (name) => rule.exact.includes(name) || rule.prefixes.some((prefix) => name.startsWith(prefix))
+    );
+    if (hit) return rule.builder;
+  }
+  return null;
+}
+function inferEnvironment(env = process.env, builder = null) {
   for (const discriminator of DISCRIMINATORS) {
     const verdict = discriminator.read(env);
     if (verdict !== null) {
       return { environment: verdict.environment, evidence: [`${discriminator.platform}: ${verdict.evidence}`] };
     }
   }
+  if (builder !== null) {
+    return {
+      environment: "production",
+      evidence: [`${builder}: a build in a ${builder} project is its publish step`]
+    };
+  }
   return { environment: "local", evidence: [] };
 }
-var set, DISCRIMINATORS;
+var import_node_fs, import_node_path, set, DISCRIMINATORS, HOSTED_BUILDER_PACKAGES;
 var init_environment = __esm({
   "src/environment.ts"() {
     "use strict";
+    import_node_fs = require("fs");
+    import_node_path = __toESM(require("path"), 1);
     set = (value) => value !== void 0 && value !== "";
     DISCRIMINATORS = [
       {
@@ -370,6 +395,12 @@ var init_environment = __esm({
         }
       }
     ];
+    HOSTED_BUILDER_PACKAGES = [
+      // `lovable-tagger` covers projects from before ~Aug 2026; current templates ship the
+      // `@lovable.dev/*` scoped tooling instead.
+      { builder: "lovable", exact: ["lovable-tagger"], prefixes: ["@lovable.dev/"] },
+      { builder: "replit", exact: [], prefixes: ["@replit/"] }
+    ];
   }
 });
 
@@ -477,13 +508,13 @@ async function readIfPresent(file) {
   }
 }
 async function detectSiteName(cwd) {
-  for (const shell of ["index.html", import_node_path.default.join("public", "index.html")]) {
-    const html = await readIfPresent(import_node_path.default.join(cwd, shell));
+  for (const shell of ["index.html", import_node_path2.default.join("public", "index.html")]) {
+    const html = await readIfPresent(import_node_path2.default.join(cwd, shell));
     if (html === null) continue;
     const name = nameFromHtmlTitle(html);
     if (name !== null) return { name, source: "index.html" };
   }
-  const manifest = await readIfPresent(import_node_path.default.join(cwd, "package.json"));
+  const manifest = await readIfPresent(import_node_path2.default.join(cwd, "package.json"));
   if (manifest !== null) {
     try {
       const parsed = JSON.parse(manifest);
@@ -496,12 +527,12 @@ async function detectSiteName(cwd) {
   }
   return null;
 }
-var import_promises, import_node_path, NAME_MAX_LENGTH, TEMPLATE_PACKAGE_NAMES, TEMPLATE_TITLES, NAMED_ENTITIES2;
+var import_promises, import_node_path2, NAME_MAX_LENGTH, TEMPLATE_PACKAGE_NAMES, TEMPLATE_TITLES, NAMED_ENTITIES2;
 var init_site_name = __esm({
   "src/site-name.ts"() {
     "use strict";
     import_promises = require("fs/promises");
-    import_node_path = __toESM(require("path"), 1);
+    import_node_path2 = __toESM(require("path"), 1);
     NAME_MAX_LENGTH = 191;
     TEMPLATE_PACKAGE_NAMES = /* @__PURE__ */ new Set([
       // Lovable
@@ -588,7 +619,7 @@ async function resolveConfig(options) {
       "CONFIG_INVALID"
     );
   }
-  const inferred = environmentRaw === void 0 ? inferEnvironment(process.env) : null;
+  const inferred = environmentRaw === void 0 ? inferEnvironment(process.env, detectHostedBuilder(options.cwd)) : null;
   const environment = environmentRaw ?? inferred.environment;
   const environmentEvidence = inferred?.evidence ?? [];
   if (siteUuid !== null && siteUuid.length > 0 && !isUuid(siteUuid)) {
@@ -629,7 +660,7 @@ async function readConfigFile(cwd) {
   return readJsonFile(cwd, CONFIG_FILENAME);
 }
 async function readJsonFile(cwd, filename) {
-  const target = import_node_path2.default.join(cwd, filename);
+  const target = import_node_path3.default.join(cwd, filename);
   let raw;
   try {
     raw = await (0, import_promises2.readFile)(target, "utf8");
@@ -684,12 +715,12 @@ function isUuid(value) {
 function isEnvironment(value) {
   return value === "production" || value === "sandbox" || value === "local";
 }
-var import_promises2, import_node_path2, CONFIG_FILENAME, SECRET_FILENAME;
+var import_promises2, import_node_path3, CONFIG_FILENAME, SECRET_FILENAME;
 var init_config = __esm({
   "src/config.ts"() {
     "use strict";
     import_promises2 = require("fs/promises");
-    import_node_path2 = __toESM(require("path"), 1);
+    import_node_path3 = __toESM(require("path"), 1);
     init_types();
     init_client();
     init_environment();
@@ -704,7 +735,7 @@ var init_config = __esm({
 async function readDeclaredDependencyNames(cwd) {
   let raw;
   try {
-    raw = await (0, import_promises3.readFile)(import_node_path3.default.join(cwd, "package.json"), "utf8");
+    raw = await (0, import_promises3.readFile)(import_node_path4.default.join(cwd, "package.json"), "utf8");
   } catch {
     return [];
   }
@@ -753,12 +784,12 @@ function disagreements(packages, other) {
   }
   return conflicts;
 }
-var import_promises3, import_node_path3;
+var import_promises3, import_node_path4;
 var init_consistency = __esm({
   "src/parsers/consistency.ts"() {
     "use strict";
     import_promises3 = require("fs/promises");
-    import_node_path3 = __toESM(require("path"), 1);
+    import_node_path4 = __toESM(require("path"), 1);
   }
 });
 
@@ -976,7 +1007,7 @@ function extractFromV1(deps, acc = [], depth = 0) {
   return acc;
 }
 function extractNameFromPath(pkgPath) {
-  const segments = pkgPath.split("node_modules" + import_node_path4.default.sep === pkgPath ? import_node_path4.default.sep : "/");
+  const segments = pkgPath.split("node_modules" + import_node_path5.default.sep === pkgPath ? import_node_path5.default.sep : "/");
   const parts = pkgPath.split("/");
   const nmIndex = parts.lastIndexOf("node_modules");
   if (nmIndex === -1 || nmIndex >= parts.length - 1) {
@@ -997,19 +1028,19 @@ function isDirectV2(pkgPath) {
   const nmCount = parts.filter((p) => p === "node_modules").length;
   return nmCount === 1;
 }
-var import_promises5, import_node_path4;
+var import_promises5, import_node_path5;
 var init_npm = __esm({
   "src/parsers/npm.ts"() {
     "use strict";
     import_promises5 = require("fs/promises");
-    import_node_path4 = __toESM(require("path"), 1);
+    import_node_path5 = __toESM(require("path"), 1);
     init_types();
   }
 });
 
 // src/parsers/node_modules.ts
 async function walkNodeModules(cwd) {
-  const root = import_node_path5.default.join(cwd, "node_modules");
+  const root = import_node_path6.default.join(cwd, "node_modules");
   try {
     const info = await (0, import_promises6.stat)(root);
     if (!info.isDirectory()) {
@@ -1052,7 +1083,7 @@ async function walk(dir, depth, seen, root) {
   }
   const perEntry = await mapLimit(names, async (name) => {
     if (name.startsWith(".") && !PACKAGE_STORE_DIRS.has(name)) return [];
-    const fullPath = import_node_path5.default.join(dir, name);
+    const fullPath = import_node_path6.default.join(dir, name);
     const resolved = await claim(fullPath, seen, depth);
     if (resolved === null) return [];
     if (PACKAGE_STORE_DIRS.has(name)) return walk(fullPath, depth, seen, root);
@@ -1065,7 +1096,7 @@ async function walk(dir, depth, seen, root) {
       }
       const scoped = await mapLimit(subNames, async (sub) => {
         if (sub.startsWith(".")) return [];
-        const scopedDir = import_node_path5.default.join(fullPath, sub);
+        const scopedDir = import_node_path6.default.join(fullPath, sub);
         const scopedReal = await claim(scopedDir, seen, depth);
         if (scopedReal === null) return [];
         return packageAndNested(scopedDir, scopedReal, depth, seen, root);
@@ -1092,13 +1123,13 @@ async function mapLimit(items, fn) {
   await Promise.all(workers);
   return results;
 }
-function installLocation(root, pkgDir, impl = import_node_path5.default) {
+function installLocation(root, pkgDir, impl = import_node_path6.default) {
   return impl.relative(root, pkgDir).split(impl.sep).join("/");
 }
 async function readPackage(pkgDir, depth, root) {
   let raw;
   try {
-    raw = await (0, import_promises6.readFile)(import_node_path5.default.join(pkgDir, "package.json"), "utf8");
+    raw = await (0, import_promises6.readFile)(import_node_path6.default.join(pkgDir, "package.json"), "utf8");
   } catch {
     return null;
   }
@@ -1117,7 +1148,7 @@ async function readPackage(pkgDir, depth, root) {
   return { name: parsed.name, version: parsed.version, path: installLocation(root, pkgDir), direct: depth === 0 };
 }
 async function walkNested(pkgDir, depth, seen, root) {
-  const nested = import_node_path5.default.join(pkgDir, "node_modules");
+  const nested = import_node_path6.default.join(pkgDir, "node_modules");
   if (await claim(nested, seen, depth + 1) === null) {
     return [];
   }
@@ -1139,12 +1170,12 @@ async function claim(dir, seen, depth) {
   seen.set(resolved, depth);
   return resolved;
 }
-var import_promises6, import_node_path5, PACKAGE_STORE_DIRS, CONCURRENCY;
+var import_promises6, import_node_path6, PACKAGE_STORE_DIRS, CONCURRENCY;
 var init_node_modules = __esm({
   "src/parsers/node_modules.ts"() {
     "use strict";
     import_promises6 = require("fs/promises");
-    import_node_path5 = __toESM(require("path"), 1);
+    import_node_path6 = __toESM(require("path"), 1);
     init_types();
     PACKAGE_STORE_DIRS = /* @__PURE__ */ new Set([".bun", ".pnpm", ".store"]);
     CONCURRENCY = 32;
@@ -1431,7 +1462,7 @@ async function parseYarnLockfile(lockfilePath, report) {
       "LOCKFILE_PARSE_ERROR"
     );
   }
-  const directNames = await readDirectDepNames(import_node_path6.default.dirname(lockfilePath));
+  const directNames = await readDirectDepNames(import_node_path7.default.dirname(lockfilePath));
   const entries = [];
   const seen = /* @__PURE__ */ new Set();
   for (const block of blocks) {
@@ -1596,7 +1627,7 @@ async function readDirectDepNames(cwd) {
   const names = /* @__PURE__ */ new Set();
   let raw;
   try {
-    raw = await (0, import_promises8.readFile)(import_node_path6.default.join(cwd, "package.json"), "utf8");
+    raw = await (0, import_promises8.readFile)(import_node_path7.default.join(cwd, "package.json"), "utf8");
   } catch {
     return names;
   }
@@ -1621,12 +1652,12 @@ async function readDirectDepNames(cwd) {
   }
   return names;
 }
-var import_promises8, import_node_path6, NON_PACKAGE_KEYS, NON_REGISTRY_PROTOCOLS;
+var import_promises8, import_node_path7, NON_PACKAGE_KEYS, NON_REGISTRY_PROTOCOLS;
 var init_yarn = __esm({
   "src/parsers/yarn.ts"() {
     "use strict";
     import_promises8 = require("fs/promises");
-    import_node_path6 = __toESM(require("path"), 1);
+    import_node_path7 = __toESM(require("path"), 1);
     init_types();
     init_report();
     NON_PACKAGE_KEYS = /* @__PURE__ */ new Set(["__metadata"]);
@@ -1638,7 +1669,7 @@ var init_yarn = __esm({
 async function detectLockfile(cwd) {
   const probed = await Promise.all(
     LOCKFILE_CANDIDATES.map(async (candidate) => {
-      const filePath = import_node_path7.default.join(cwd, candidate.filename);
+      const filePath = import_node_path8.default.join(cwd, candidate.filename);
       return { ...candidate, filePath, present: await exists(filePath) };
     })
   );
@@ -1749,7 +1780,7 @@ function staleWarning(source, missing) {
 async function presentLockfiles(cwd) {
   const probed = await Promise.all(
     LOCKFILE_CANDIDATES.map(async (candidate) => {
-      const filePath = import_node_path7.default.join(cwd, candidate.filename);
+      const filePath = import_node_path8.default.join(cwd, candidate.filename);
       return { ...candidate, filePath, present: await exists(filePath) };
     })
   );
@@ -1779,12 +1810,12 @@ async function exists(filePath) {
     return false;
   }
 }
-var import_promises9, import_node_path7, LOCKFILE_CANDIDATES;
+var import_promises9, import_node_path8, LOCKFILE_CANDIDATES;
 var init_parsers = __esm({
   "src/parsers/index.ts"() {
     "use strict";
     import_promises9 = require("fs/promises");
-    import_node_path7 = __toESM(require("path"), 1);
+    import_node_path8 = __toESM(require("path"), 1);
     init_types();
     init_consistency();
     init_bun();
@@ -3227,12 +3258,12 @@ function isRegexForm(pattern) {
   const parts = REGEX_FORM.exec(pattern);
   return parts !== null && REGEX_SYNTAX.test(parts[1]);
 }
-function pathMatches(pattern, path8) {
+function pathMatches(pattern, path9) {
   if (isRegexForm(pattern)) {
     const re = safeRegExp(pattern);
-    return re ? re.test(path8) : false;
+    return re ? re.test(path9) : false;
   }
-  const target = foldPathForScope(path8);
+  const target = foldPathForScope(path9);
   const folded = foldPathForScope(pattern);
   if (folded.includes("*")) {
     const trailing = folded.endsWith("/*");
@@ -4875,8 +4906,8 @@ function extractHttpTarget(args) {
       const host = normalizeHost(first.hostname || first.host) || "localhost";
       const protocol = first.protocol || "http:";
       const port = first.port ? `:${first.port}` : "";
-      const path8 = first.path || "/";
-      return { url: `${protocol}//${host}${port}${path8}`, host, method: first.method || "GET" };
+      const path9 = first.path || "/";
+      return { url: `${protocol}//${host}${port}${path9}`, host, method: first.method || "GET" };
     }
   } catch {
   }
@@ -5242,12 +5273,12 @@ var fsMod;
 async function loadFs() {
   if (fsMod !== void 0) return fsMod;
   try {
-    const [fs, path8] = await Promise.all([import("fs"), import("path")]);
+    const [fs, path9] = await Promise.all([import("fs"), import("path")]);
     fsMod = {
       readFileSync: fs.readFileSync,
       writeFileSync: fs.writeFileSync,
       mkdirSync: fs.mkdirSync,
-      join: path8.join
+      join: path9.join
     };
   } catch {
     fsMod = null;
@@ -5635,13 +5666,13 @@ var MAX_CAPTURED_VALUE_CHARS = 512;
 var MAX_QUERY_KEYS = 10;
 var MAX_METHOD_CHARS = 16;
 var MAX_BODY_BYTES2 = 64 * 1024;
-function queryKeysOf(path8) {
-  if (typeof path8 !== "string") return { keys: [], total: 0 };
-  const start = path8.indexOf("?");
+function queryKeysOf(path9) {
+  if (typeof path9 !== "string") return { keys: [], total: 0 };
+  const start = path9.indexOf("?");
   if (start === -1) return { keys: [], total: 0 };
   let names;
   try {
-    names = [...new URLSearchParams(path8.slice(start + 1)).keys()];
+    names = [...new URLSearchParams(path9.slice(start + 1)).keys()];
   } catch {
     return { keys: [], total: 0 };
   }
@@ -5780,10 +5811,10 @@ function revisionOf(rule) {
   if (typeof revision === "number" && Number.isFinite(revision)) return String(revision);
   return null;
 }
-function routeOf(path8) {
-  if (typeof path8 !== "string" || path8 === "") return null;
-  const cut = path8.search(/[?#]/);
-  return cut === -1 ? path8 : path8.slice(0, cut);
+function routeOf(path9) {
+  if (typeof path9 !== "string" || path9 === "") return null;
+  const cut = path9.search(/[?#]/);
+  return cut === -1 ? path9 : path9.slice(0, cut);
 }
 function createDetectionReporter(opts) {
   const siteUuid = opts.siteUuid ?? process.env?.PATCHSTACK_SITE_UUID;
@@ -7491,11 +7522,11 @@ function resolveMode(options, bundle) {
 var CREDENTIAL_FILES = [".patchstackrc.local.json", ".patchstackrc.json"];
 async function readCredentialField(options, field) {
   if (typeof process === "undefined" || typeof process.cwd !== "function") return void 0;
-  let readFileSync;
+  let readFileSync2;
   let join;
   try {
     const [fs, pathMod] = await Promise.all([import("fs"), import("path")]);
-    readFileSync = fs.readFileSync;
+    readFileSync2 = fs.readFileSync;
     join = pathMod.join;
   } catch {
     return void 0;
@@ -7503,7 +7534,7 @@ async function readCredentialField(options, field) {
   const cwd = options?.cwd ?? process.cwd();
   for (const filename of CREDENTIAL_FILES) {
     try {
-      const value = JSON.parse(readFileSync(join(cwd, filename), "utf8"))?.[field];
+      const value = JSON.parse(readFileSync2(join(cwd, filename), "utf8"))?.[field];
       if (typeof value === "string" && value.length > 0) return value;
     } catch {
     }
@@ -7924,20 +7955,20 @@ function requestMetaFromContext(reqCtx) {
 }
 function requestMeta(shaped, request) {
   const client = shaped?._clientIp ?? { ip: null, source: "unavailable" };
-  let path8 = null;
+  let path9 = null;
   let method = null;
   let userAgent = null;
   if (request) {
     try {
       const u = new URL(request.url);
-      path8 = u.pathname + u.search;
+      path9 = u.pathname + u.search;
     } catch {
-      path8 = typeof request.url === "string" ? request.url : null;
+      path9 = typeof request.url === "string" ? request.url : null;
     }
     method = request.method ?? null;
     userAgent = request.headers?.get?.("user-agent") ?? null;
   }
-  return { method, path: path8, ip: client.ip, clientIpSource: client.source, userAgent, event: eventFor(request) };
+  return { method, path: path9, ip: client.ip, clientIpSource: client.source, userAgent, event: eventFor(request) };
 }
 function nodeRequestMeta(req, client) {
   if (!req) return {};