@patchstack/connect 0.5.6 → 0.5.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (25) hide show
  1. package/dist/chunk-2K5SHFUM.js +295 -0
  2. package/dist/chunk-2K5SHFUM.js.map +1 -0
  3. package/dist/cli.js +1001 -466
  4. package/dist/cli.js.map +1 -1
  5. package/dist/index.cjs +364 -39
  6. package/dist/index.cjs.map +1 -1
  7. package/dist/index.d.cts +6 -0
  8. package/dist/index.d.ts +6 -0
  9. package/dist/index.js +375 -37
  10. package/dist/index.js.map +1 -1
  11. package/dist/protect/templates/demo-rules.json +1 -1
  12. package/dist/protect.cjs +1135 -241
  13. package/dist/protect.cjs.map +1 -1
  14. package/dist/protect.d.cts +7 -2
  15. package/dist/protect.d.ts +7 -2
  16. package/dist/protect.edge.js +988 -179
  17. package/dist/protect.edge.js.map +3 -3
  18. package/dist/protect.js +842 -192
  19. package/dist/protect.js.map +1 -1
  20. package/dist/{refresh-manifest-2ALIJGZ3.js → refresh-manifest-3YWIYENU.js} +82 -39
  21. package/dist/refresh-manifest-3YWIYENU.js.map +1 -0
  22. package/package.json +1 -1
  23. package/dist/chunk-IOODP4ZB.js +0 -104
  24. package/dist/chunk-IOODP4ZB.js.map +0 -1
  25. package/dist/refresh-manifest-2ALIJGZ3.js.map +0 -1
package/dist/protect.d.cts CHANGED
@@ -321,8 +321,9 @@ export interface CreateProtectionOptions {
321
321
  /** Hosts exempt from egress screening. */
322
322
  allowHosts?: string[];
323
323
  /**
324
- * Screen the Node http/https path against DNS rebinding: resolve outbound hostnames and block +
325
- * pin to the vetted address when they map to a disallowed (internal/metadata) IP. Default true;
324
+ * Screen hostname resolutions the guard performs for Node http/https requests. Disallowed
325
+ * internal/metadata addresses are blocked, and permitted results are used for those resolutions.
326
+ * Reused sockets or transports that bypass the guard's resolver are not covered. Default true;
326
327
  * only active when `egress` is on and node:dns is available (a no-op on edge runtimes).
327
328
  */
328
329
  screenDns?: boolean;
@@ -356,6 +357,10 @@ export function createSupabaseGuard(opts: {
356
357
  protection: Protection;
357
358
  supabaseUrl?: string;
358
359
  fetchImpl?: typeof fetch;
360
+ /** Maximum tunneled request body size. Default 1 MiB. */
361
+ maxBodyBytes?: number;
362
+ /** Maximum upstream request duration. Default 30 seconds. */
363
+ timeoutMs?: number;
359
364
  }): (request: Request) => Promise<Response>;
360
365
 
361
366
  /**
package/dist/protect.d.ts CHANGED
@@ -321,8 +321,9 @@ export interface CreateProtectionOptions {
321
321
  /** Hosts exempt from egress screening. */
322
322
  allowHosts?: string[];
323
323
  /**
324
- * Screen the Node http/https path against DNS rebinding: resolve outbound hostnames and block +
325
- * pin to the vetted address when they map to a disallowed (internal/metadata) IP. Default true;
324
+ * Screen hostname resolutions the guard performs for Node http/https requests. Disallowed
325
+ * internal/metadata addresses are blocked, and permitted results are used for those resolutions.
326
+ * Reused sockets or transports that bypass the guard's resolver are not covered. Default true;
326
327
  * only active when `egress` is on and node:dns is available (a no-op on edge runtimes).
327
328
  */
328
329
  screenDns?: boolean;
@@ -356,6 +357,10 @@ export function createSupabaseGuard(opts: {
356
357
  protection: Protection;
357
358
  supabaseUrl?: string;
358
359
  fetchImpl?: typeof fetch;
360
+ /** Maximum tunneled request body size. Default 1 MiB. */
361
+ maxBodyBytes?: number;
362
+ /** Maximum upstream request duration. Default 30 seconds. */
363
+ timeoutMs?: number;
359
364
  }): (request: Request) => Promise<Response>;
360
365
 
361
366
  /**