@stacksjs/ts-cloud 0.16.38 → 0.16.40
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/aws/bedrock.d.ts +110 -9
- package/dist/aws/index.js +1 -1
- package/dist/bin/chunk-0716rh6x.js +1 -0
- package/dist/bin/{chunk-dnmb3sr0.js → chunk-0scywedn.js} +1 -1
- package/dist/bin/{chunk-48nz63ab.js → chunk-1dqn0y04.js} +3 -3
- package/dist/bin/{chunk-q8hp4dfy.js → chunk-1jwmkbzx.js} +94 -94
- package/dist/bin/{chunk-4bp4k1x2.js → chunk-22x7vxxw.js} +2 -2
- package/dist/bin/{chunk-r0yapyqc.js → chunk-35x7z78g.js} +1 -1
- package/dist/bin/chunk-459waehf.js +1 -0
- package/dist/bin/chunk-45a8yv3j.js +6 -0
- package/dist/bin/{chunk-cqhtnsby.js → chunk-4g1z81pt.js} +5 -5
- package/dist/bin/chunk-4y8zhe38.js +1 -0
- package/dist/bin/{chunk-55cckkb2.js → chunk-4yym8xm4.js} +5 -5
- package/dist/bin/{chunk-ygsdntxq.js → chunk-5k3npcm6.js} +5 -5
- package/dist/bin/chunk-5khcwxhn.js +1 -0
- package/dist/bin/{chunk-zmp0mksb.js → chunk-5nmt4s5w.js} +2 -2
- package/dist/bin/{chunk-8zn63v9h.js → chunk-5wx26yjy.js} +3 -3
- package/dist/bin/chunk-68tgx5j2.js +1 -0
- package/dist/bin/chunk-7453cepa.js +1 -0
- package/dist/bin/{chunk-0ynfqf9t.js → chunk-7593hjcq.js} +1 -1
- package/dist/bin/{chunk-wga7gj0h.js → chunk-7p2va3nj.js} +1 -1
- package/dist/bin/{chunk-hjq05rxh.js → chunk-8fxksvw4.js} +5 -5
- package/dist/bin/{chunk-sqmays54.js → chunk-9eqpnanr.js} +1 -1
- package/dist/bin/{chunk-0c1fv0xt.js → chunk-9vszh4dj.js} +5 -5
- package/dist/bin/chunk-az504aqf.js +1 -0
- package/dist/bin/{chunk-5wqjqh6c.js → chunk-b2kdxqd5.js} +23 -23
- package/dist/bin/chunk-bb08ms5q.js +1 -0
- package/dist/bin/{chunk-pyr0dc6j.js → chunk-bmj1d9xc.js} +63 -63
- package/dist/bin/chunk-cxcgqqdb.js +1 -0
- package/dist/bin/{chunk-dmwfnbg0.js → chunk-dkf2kcsc.js} +6 -6
- package/dist/bin/chunk-ecd4swb7.js +2 -0
- package/dist/bin/{chunk-d8x60kvn.js → chunk-f2q239cy.js} +2 -2
- package/dist/bin/{chunk-gc8p1tdr.js → chunk-f64jvh96.js} +2 -2
- package/dist/bin/{chunk-c7z8et78.js → chunk-fkzp9sg5.js} +1 -1
- package/dist/bin/chunk-h0s69e9p.js +1 -0
- package/dist/bin/{chunk-85k5gvnc.js → chunk-jmkfx9th.js} +3 -3
- package/dist/bin/chunk-jrztbsnb.js +1 -0
- package/dist/bin/chunk-js888a3w.js +1 -0
- package/dist/bin/chunk-jv9qp13h.js +1 -0
- package/dist/bin/chunk-jxfgkhkc.js +1 -0
- package/dist/bin/chunk-k2mdcb66.js +1 -0
- package/dist/bin/{chunk-mbr9j2fw.js → chunk-k343q24p.js} +6 -6
- package/dist/bin/chunk-k9ate69x.js +1 -0
- package/dist/bin/chunk-kbwm0sqv.js +2 -0
- package/dist/bin/chunk-kva8aybv.js +1 -0
- package/dist/bin/{chunk-x0ywfbk5.js → chunk-kzpzkdpd.js} +1 -1
- package/dist/bin/chunk-m8p7mw67.js +1 -0
- package/dist/bin/{chunk-6r5mehaj.js → chunk-mex7tac5.js} +4 -4
- package/dist/bin/chunk-mh3rgn0e.js +1 -0
- package/dist/bin/{chunk-07qwk0sj.js → chunk-n7yefy09.js} +5 -5
- package/dist/bin/{chunk-7rpj0qhb.js → chunk-nj9x0tb8.js} +2 -2
- package/dist/bin/{chunk-tt3m3fda.js → chunk-nmqjmx30.js} +22 -22
- package/dist/bin/{chunk-8496fsmq.js → chunk-nqn983fx.js} +104 -104
- package/dist/bin/chunk-p9baztvr.js +1 -0
- package/dist/bin/{chunk-aykdp1wv.js → chunk-pj5svs6q.js} +2 -2
- package/dist/bin/{chunk-qxg95ndf.js → chunk-q40k9jvk.js} +2 -2
- package/dist/bin/chunk-qgqgdkg0.js +1 -0
- package/dist/bin/chunk-s77kny9g.js +1 -0
- package/dist/bin/{chunk-4h60xsat.js → chunk-sfzdr2b3.js} +3 -3
- package/dist/bin/chunk-t5kqyr8m.js +1 -0
- package/dist/bin/{chunk-e0kapeev.js → chunk-v9wf266f.js} +14 -14
- package/dist/bin/chunk-w232tc20.js +1 -0
- package/dist/bin/chunk-w9rx90s2.js +1 -0
- package/dist/bin/{chunk-w6yx9bhb.js → chunk-zvbc92pc.js} +1 -1
- package/dist/bin/cli.js +173 -173
- package/dist/bin/dashboard-server.js +1 -1
- package/dist/{chunk-yrcv3hrj.js → chunk-0evxayn1.js} +7 -7
- package/dist/chunk-1yhrkahz.js +1 -0
- package/dist/chunk-27y037yh.js +1 -0
- package/dist/chunk-2ns1w1fe.js +1 -0
- package/dist/chunk-2vrv31sk.js +37 -0
- package/dist/{chunk-n1r9313b.js → chunk-3s8dtcz8.js} +2 -2
- package/dist/chunk-3w7q4sjs.js +2 -0
- package/dist/{chunk-tbn385ak.js → chunk-5n1y5ehd.js} +94 -94
- package/dist/chunk-74yycwrd.js +1 -0
- package/dist/{chunk-t52wetq8.js → chunk-7eaech9q.js} +1 -1
- package/dist/{chunk-2n4ktft4.js → chunk-97gre81w.js} +1 -1
- package/dist/{chunk-zvyrpmvd.js → chunk-9e4afej1.js} +1 -1
- package/dist/{chunk-3cyszqzh.js → chunk-9mv07nz0.js} +2 -2
- package/dist/{chunk-t80x808z.js → chunk-bez9ytaz.js} +108 -108
- package/dist/{chunk-kpjhfgbh.js → chunk-bfbahave.js} +4 -4
- package/dist/{chunk-xr7ew64s.js → chunk-bwtxb2hf.js} +3 -3
- package/dist/{chunk-dg834141.js → chunk-cgcthvq9.js} +5 -5
- package/dist/chunk-e9z4gzmg.js +1 -0
- package/dist/{chunk-ffba3270.js → chunk-jbtnyhrh.js} +2 -2
- package/dist/{chunk-gcqq9m4b.js → chunk-kexwq2h0.js} +4 -4
- package/dist/{chunk-p4rknh9f.js → chunk-mxprxjd4.js} +1 -1
- package/dist/{chunk-c45ay9fx.js → chunk-my61jkg1.js} +5 -5
- package/dist/{chunk-kkeb1dk1.js → chunk-qbbap3bt.js} +1 -1
- package/dist/{chunk-jsnhb1p4.js → chunk-qg03hfb6.js} +19 -19
- package/dist/{chunk-bx3jmgd0.js → chunk-r3m1fjd4.js} +2 -2
- package/dist/{chunk-nzmangkw.js → chunk-v6hysd5c.js} +5 -5
- package/dist/{chunk-kyn6a4zf.js → chunk-varjr6np.js} +1 -1
- package/dist/chunk-vd2jqt9w.js +1 -0
- package/dist/{chunk-n8g8t8hf.js → chunk-w78e5n94.js} +3 -3
- package/dist/{chunk-q08s698e.js → chunk-yjh3y68t.js} +71 -71
- package/dist/{chunk-ej9dqt2r.js → chunk-ype3pqh5.js} +5 -5
- package/dist/{chunk-j1aq97br.js → chunk-ysx5m6cs.js} +2 -2
- package/dist/{chunk-qhtgfjhd.js → chunk-yt6m703r.js} +23 -23
- package/dist/deploy/index.js +1 -1
- package/dist/dns/index.js +1 -1
- package/dist/drivers/index.js +1 -1
- package/dist/index.d.ts +1 -0
- package/dist/index.js +42 -42
- package/dist/operations/index.js +1 -1
- package/dist/protection/index.js +1 -1
- package/dist/r2/index.d.ts +8 -0
- package/dist/r2/provider.d.ts +303 -0
- package/dist/r2/provider.test.d.ts +1 -0
- package/dist/r2/reconcile.d.ts +98 -0
- package/dist/r2/reconcile.test.d.ts +1 -0
- package/dist/r2/test-fetch.d.ts +32 -0
- package/dist/spend/index.js +1 -1
- package/dist/ui/404.html +1 -1
- package/dist/ui/accept-invitation.html +1 -1
- package/dist/ui/access-denied.html +1 -1
- package/dist/ui/account/automation.html +6 -6
- package/dist/ui/account/security.html +2 -2
- package/dist/ui/applications/compose.html +6 -6
- package/dist/ui/applications/new.html +2 -2
- package/dist/ui/data/backups.html +6 -6
- package/dist/ui/data/services.html +6 -6
- package/dist/ui/data/volumes.html +6 -6
- package/dist/ui/index.html +6 -6
- package/dist/ui/infrastructure/topology.html +6 -6
- package/dist/ui/integrations.html +1 -1
- package/dist/ui/operations/alerts.html +6 -6
- package/dist/ui/operations/configuration.html +6 -6
- package/dist/ui/operations/jobs.html +5 -5
- package/dist/ui/operations/maintenance.html +6 -6
- package/dist/ui/operations/observability.html +5 -5
- package/dist/ui/operations/previews.html +6 -6
- package/dist/ui/operations/queue.html +6 -6
- package/dist/ui/operations/regions.html +6 -6
- package/dist/ui/operations/releases.html +6 -6
- package/dist/ui/operations/spend.html +5 -5
- package/dist/ui/operations/workloads.html +6 -6
- package/dist/ui/security.html +1 -1
- package/dist/ui/server/actions.html +6 -6
- package/dist/ui/server/activity.html +2 -2
- package/dist/ui/server/capacity.html +5 -5
- package/dist/ui/server/database.html +5 -5
- package/dist/ui/server/deployments.html +6 -6
- package/dist/ui/server/diagnostics.html +2 -2
- package/dist/ui/server/firewall.html +6 -6
- package/dist/ui/server/fleet.html +6 -6
- package/dist/ui/server/logs.html +6 -6
- package/dist/ui/server/metrics.html +6 -6
- package/dist/ui/server/security.html +2 -2
- package/dist/ui/server/services.html +2 -2
- package/dist/ui/server/sites.html +6 -6
- package/dist/ui/server/ssh-keys.html +6 -6
- package/dist/ui/server/team.html +6 -6
- package/dist/ui/server/terminal.html +2 -2
- package/dist/ui/serverless/alarms.html +6 -6
- package/dist/ui/serverless/assets.html +2 -2
- package/dist/ui/serverless/cost.html +2 -2
- package/dist/ui/serverless/data.html +6 -6
- package/dist/ui/serverless/deployments.html +2 -2
- package/dist/ui/serverless/firewall.html +1 -1
- package/dist/ui/serverless/functions.html +6 -6
- package/dist/ui/serverless/logs.html +6 -6
- package/dist/ui/serverless/metrics.html +2 -2
- package/dist/ui/serverless/queues.html +6 -6
- package/dist/ui/serverless/secrets.html +6 -6
- package/dist/ui/serverless/traces.html +6 -6
- package/dist/ui/serverless.html +5 -5
- package/package.json +3 -3
- package/dist/bin/chunk-0c5vn8rp.js +0 -1
- package/dist/bin/chunk-1wf1s8db.js +0 -1
- package/dist/bin/chunk-4dtrry0t.js +0 -1
- package/dist/bin/chunk-6kcxf3b2.js +0 -1
- package/dist/bin/chunk-6ksbfg6t.js +0 -1
- package/dist/bin/chunk-7rkg1yph.js +0 -1
- package/dist/bin/chunk-989j6ezd.js +0 -1
- package/dist/bin/chunk-bgdvhp6m.js +0 -1
- package/dist/bin/chunk-cvc9bxd4.js +0 -2
- package/dist/bin/chunk-czzrfhn7.js +0 -1
- package/dist/bin/chunk-d5arnf2f.js +0 -1
- package/dist/bin/chunk-e06m9m6z.js +0 -1
- package/dist/bin/chunk-e51ajfyr.js +0 -1
- package/dist/bin/chunk-e6mfcw0v.js +0 -6
- package/dist/bin/chunk-fh5bjm3d.js +0 -1
- package/dist/bin/chunk-fw6hbyeg.js +0 -1
- package/dist/bin/chunk-h7gfd2yq.js +0 -1
- package/dist/bin/chunk-jxnw879g.js +0 -1
- package/dist/bin/chunk-k3yq569a.js +0 -1
- package/dist/bin/chunk-nhrwct94.js +0 -1
- package/dist/bin/chunk-pa4fymr0.js +0 -1
- package/dist/bin/chunk-s9xven24.js +0 -1
- package/dist/bin/chunk-w8jfw39t.js +0 -2
- package/dist/bin/chunk-wgv9nv0z.js +0 -1
- package/dist/bin/chunk-y5980ycr.js +0 -1
- package/dist/bin/chunk-y5ez6ba7.js +0 -1
- package/dist/bin/chunk-ya71t2ed.js +0 -1
- package/dist/bin/chunk-zb1nh252.js +0 -1
- package/dist/chunk-1ty76ybd.js +0 -1
- package/dist/chunk-2mypcz4a.js +0 -1
- package/dist/chunk-5vk7nss8.js +0 -2
- package/dist/chunk-fe5sbczg.js +0 -1
- package/dist/chunk-gtc1gvfj.js +0 -1
- package/dist/chunk-j5t1amn0.js +0 -1
- package/dist/chunk-s20830hg.js +0 -1
- package/dist/chunk-v83qx041.js +0 -37
|
@@ -0,0 +1 @@
|
|
|
1
|
+
import{Td,Ed,wd,Ad,Up,Bp}from"./chunk-9vszh4dj.js";import"./chunk-ecd4swb7.js";import"./chunk-b2kdxqd5.js";import"./chunk-7593hjcq.js";import"./chunk-f64jvh96.js";import"./chunk-nmqjmx30.js";import"./chunk-dkf2kcsc.js";export{Up as deleteStaticSite,Ed as deployStaticSite,Bp as deployStaticSiteFull,Td as generateStaticSiteTemplate,Ad as invalidateCache,wd as uploadStaticFiles};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
import{_p,vd,oc,sc,Cd,Op,$p,Qt,Rn,Yt,Vi,Lp,In,Zo}from"./chunk-zvbc92pc.js";import{Ke,us,fc,ui,ps,Hp}from"./chunk-n7yefy09.js";import{jd,fo,Vd,zd,Hd,Cr,om,ho}from"./chunk-k343q24p.js";import{Ja,Xa,Qa,ad,ji,cd,ld,Jo,Ya,Za}from"./chunk-1jwmkbzx.js";import"./chunk-4yym8xm4.js";export{Xa as CHAIN_HEADER,Rn as DEFAULT_ATTACK_MODE_HOURS,jd as DEFAULT_DDOS_THRESHOLDS,ji as DEFAULT_RECURSION_LIMITS,Ja as DEPTH_HEADER,Qt as MAX_CONTROL_HOURS,Yt as ProtectionControlStore,_p as RATE_LIMIT_KEY_SEPARATOR,Cd as RateLimiter,Jo as RecursionGuard,Qa as TRACE_HEADER,In as applyControlsToDdos,Lp as applyControlsToRateLimits,ho as applyMitigationFactor,$p as defaultRateLimitRules,Vi as describePosture,Ke as escapeSecLang,ad as functionFingerprint,vd as globMatches,fc as globToRegex,ld as inspectInvocation,us as isSafePattern,fo as isValidCidr,Zo as mergeControlsIntoConfig,cd as parseChain,om as planMitigation,Ya as propagationHeaders,Op as rateLimitHeaders,sc as rateLimitKey,Za as recursionBlockedResponse,Cr as renderDdosInstallScript,Hd as renderNftablesRuleset,zd as renderSysctlFile,ui as renderWafConfig,ps as renderWafInstallScript,oc as ruleMatches,Vd as sysctlHardening,Hp as wafEventTelemetry};
|
|
@@ -1 +1 @@
|
|
|
1
|
-
import{
|
|
1
|
+
import{fo}from"./chunk-k343q24p.js";var _p="\x00";function vd(t,i){if(t==="*"||t==="**")return!0;let e=t.replace(/[.+^${}()|[\]\\]/g,"\\$&").replace(/\*\*/g,"\x01").replace(/\*/g,"[^/]*").replace(/\u0001/g,".*");return new RegExp(`^${e}$`).test(i)}function g(t,i){if(t.startsWith("*.")){let e=t.slice(1);return i.endsWith(e)&&i.length>e.length}return t===i}function oc(t,i){if(t.enabled===!1)return!1;if(t.methods?.length&&!t.methods.some((e)=>e.toUpperCase()===i.method.toUpperCase()))return!1;if(t.path&&!vd(t.path,i.path))return!1;if(t.host&&!g(t.host,i.host??""))return!1;return!0}function sc(t,i){let e=t.key??{source:"ip"},o=e.fallbackToIp!==!1,r;if(e.source==="ip")r=i.ip;else if(e.source==="global")r="global";else if(e.source==="host")r=i.host??"";else if(e.source==="path")r=i.path;else if(e.source==="header")r=e.name?i.headers?.[e.name.toLowerCase()]:void 0;else if(e.source==="cookie")r=e.name?i.cookies?.[e.name]:void 0;if(!r&&e.source!=="global")r=o?i.ip:"__missing__";return`${t.id}\x00${r}`}class Cd{clock;maxTrackedKeys;buckets=new Map;windows=new Map;rules;constructor(t,i=()=>Date.now(),e=1e5){this.clock=i;this.maxTrackedKeys=e;this.rules=[...t].sort((o,r)=>(o.priority??0)-(r.priority??0))}check(t){let i=this.clock(),e=this.rules.filter((n)=>oc(n,t)),o;for(let n of e){let s=this.test(n,t,i);if(s.allowed)continue;if(!o||d(s.action)>d(o.action))o=s}if(o)return o;let r={action:"allow",allowed:!0};for(let n of e){let s=this.consume(n,t,i);if(s.remaining!=null&&(r.remaining??1/0)>s.remaining)r=s}return r}test(t,i,e){let o=sc(t,i);if((t.algorithm??"token_bucket")==="token_bucket"){let n=t.burst??t.limit,s=this.buckets.get(o),a=s?Math.min(n,s.tokens+this.refill(t,e-s.updatedAt)):n;if(a>=1)return{action:"allow",allowed:!0};return this.blocked(t,o,0,this.msPerToken(t)*(1-a),e)}let r=(this.windows.get(o)?.hits??[]).filter((n)=>n>e-t.windowMs);if(r.length<t.limit)return{action:"allow",allowed:!0};return this.blocked(t,o,0,r[0]+t.windowMs-e,e)}peek(t){let i=this.clock();for(let e of this.rules){if(!oc(e,t))continue;let o=this.test(e,t,i);if(!o.allowed)return o}return{action:"allow",allowed:!0}}msPerToken(t){return t.windowMs/Math.max(1,t.limit)}refill(t,i){return Math.max(0,i)/this.msPerToken(t)}blocked(t,i,e,o,r){let n=t.action??"deny";return{action:n,allowed:n==="allow"||n==="log",ruleId:t.id,limit:t.limit,remaining:e,retryAfterMs:Math.max(0,Math.ceil(o)),resetAt:r+Math.max(0,o),key:i}}consume(t,i,e){let o=sc(t,i);if((t.algorithm??"token_bucket")==="token_bucket"){let l=t.burst??t.limit,u=this.buckets.get(o)??{tokens:l,updatedAt:e},c=Math.min(l,u.tokens+this.refill(t,e-u.updatedAt));if(c<1)return this.buckets.set(o,{tokens:c,updatedAt:e}),this.blocked(t,o,0,this.msPerToken(t)*(1-c),e);return this.evictIfNeeded(this.buckets),this.buckets.set(o,{tokens:c-1,updatedAt:e}),{action:"allow",allowed:!0,ruleId:t.id,limit:l,remaining:Math.floor(c-1),resetAt:e+this.msPerToken(t)*(l-(c-1)),key:o}}let n=this.windows.get(o)??{hits:[]},s=e-t.windowMs,a=n.hits.filter((l)=>l>s);if(a.length>=t.limit)return this.windows.set(o,{hits:a}),this.blocked(t,o,0,a[0]+t.windowMs-e,e);return a.push(e),this.evictIfNeeded(this.windows),this.windows.set(o,{hits:a}),{action:"allow",allowed:!0,ruleId:t.id,limit:t.limit,remaining:t.limit-a.length,resetAt:a[0]+t.windowMs,key:o}}evictIfNeeded(t){if(t.size<this.maxTrackedKeys)return;let i=t.size-this.maxTrackedKeys+1,e=0;for(let o of t.keys())if(t.delete(o),++e>=i)break}sweep(){let t=this.clock(),i=0;for(let[e,o]of this.windows){let r=e.split("\x00")[0],n=this.rules.find((s)=>s.id===r);if(!n){this.windows.delete(e),i++;continue}if(o.hits.every((s)=>s<=t-n.windowMs))this.windows.delete(e),i++}for(let[e,o]of this.buckets){let r=e.split("\x00")[0],n=this.rules.find((s)=>s.id===r);if(!n||t-o.updatedAt>n.windowMs*2)this.buckets.delete(e),i++}return i}get trackedKeys(){return this.buckets.size+this.windows.size}}function d(t){return{allow:0,log:1,throttle:2,challenge:3,deny:4}[t]}function Op(t){let i={};if(t.limit!=null)i["ratelimit-limit"]=String(t.limit);if(t.remaining!=null)i["ratelimit-remaining"]=String(t.remaining);if(t.resetAt!=null)i["ratelimit-reset"]=String(Math.max(0,Math.ceil((t.resetAt-Date.now())/1000)));if(!t.allowed&&t.retryAfterMs!=null)i["retry-after"]=String(Math.max(1,Math.ceil(t.retryAfterMs/1000)));return i}function $p(){return[{id:"global-ip",limit:600,windowMs:60000,burst:100,key:{source:"ip"},action:"deny",priority:100},{id:"api-ip",limit:120,windowMs:60000,burst:30,path:"/api/**",key:{source:"ip"},action:"deny",priority:50},{id:"auth-ip",limit:10,windowMs:60000,algorithm:"sliding_window",path:"/auth/**",methods:["POST"],key:{source:"ip"},action:"challenge",priority:10}]}var m="protection.controls",Qt=24,Rn=4,R={ipRules:{allow:[],block:[]}};function p(t,i){if(!t?.enabled)return;return new Date(t.expiresAt).getTime()>i.getTime()?t:void 0}function h(t,i){let e=Number.isFinite(t)?Number(t):i;return Math.min(Qt,Math.max(0.25,e))}var f=500;class Yt{controlPlane;options;constructor(t,i={}){this.controlPlane=t;this.options=i}now(){return this.options.now?.()??new Date}read(){let t=this.controlPlane.getSetting(m);if(!t||typeof t!=="object"||Array.isArray(t))return{...R,ipRules:{allow:[],block:[]}};let i=t;return{attackMode:i.attackMode,mitigationPause:i.mitigationPause,ipRules:{allow:Array.isArray(i.ipRules?.allow)?i.ipRules.allow:[],block:Array.isArray(i.ipRules?.block)?i.ipRules.block:[]},updatedAt:i.updatedAt}}write(t){let i={...t,updatedAt:this.now().toISOString()};return this.controlPlane.setSetting(m,i),i}raw(){return this.read()}current(){let t=this.now(),i=this.read();return{attackMode:p(i.attackMode,t),mitigationPause:p(i.mitigationPause,t),ipRules:i.ipRules}}enableAttackMode(t){let i=this.now(),e={enabled:!0,startedAt:i.toISOString(),expiresAt:new Date(i.getTime()+h(t.hours,Rn)*3600000).toISOString(),reason:t.reason.trim()||"Attack mode enabled by an operator.",actorId:t.actorId};return this.write({...this.read(),attackMode:e}),e}disableAttackMode(){let t=this.read();if(!t.attackMode?.enabled)return!1;return this.write({...t,attackMode:{...t.attackMode,enabled:!1}}),!0}pauseMitigations(t){let i=t.reason.trim();if(!i)throw Error("Pausing mitigations requires a reason: you are liable for the traffic it admits.");let e=this.now(),o={enabled:!0,startedAt:e.toISOString(),expiresAt:new Date(e.getTime()+h(t.hours,Qt)*3600000).toISOString(),reason:i,actorId:t.actorId};return this.write({...this.read(),mitigationPause:o}),o}resumeMitigations(){let t=this.read();if(!t.mitigationPause?.enabled)return!1;return this.write({...t,mitigationPause:{...t.mitigationPause,enabled:!1}}),!0}addIpRule(t,i){let e=i.trim();if(!fo(e))throw Error(`Not a valid IP or CIDR: ${i}`);let o=this.read(),r={...o.ipRules,[t]:[...new Set([...o.ipRules[t],e])]};if(r[t].length>f)throw Error(`At most ${f} ${t} rules are supported.`);let n=t==="allow"?"block":"allow";return r[n]=r[n].filter((s)=>s!==e),this.write({...o,ipRules:r}),r}removeIpRule(t,i){let e=this.read(),o={...e.ipRules,[t]:e.ipRules[t].filter((r)=>r!==i.trim())};return this.write({...e,ipRules:o}),o}}function Vi(t){if(t.mitigationPause)return{attackMode:!!t.attackMode,mitigationPaused:!0,summary:`Automatic mitigation is paused until ${t.mitigationPause.expiresAt}. All traffic is being served and billed.`,expiresAt:t.mitigationPause.expiresAt};if(t.attackMode)return{attackMode:!0,mitigationPaused:!1,summary:`Attack mode is on until ${t.attackMode.expiresAt}. Every visitor is being challenged.`,expiresAt:t.attackMode.expiresAt};return{attackMode:!1,mitigationPaused:!1,summary:"Protection is in its normal posture."}}function Lp(t,i){if(i.mitigationPause)return t.map((e)=>({...e,enabled:!1}));if(!i.attackMode)return[...t];return t.map((e)=>({...e,action:e.action==="deny"?"deny":"challenge",burst:Math.max(1,Math.min(e.burst??e.limit,5))}))}function In(t,i){let e=[...new Set([...t.allowlist??[],...i.ipRules.allow])],o=[...new Set([...t.blocklist??[],...i.ipRules.block])];if(i.mitigationPause)return{...t,allowlist:e,blocklist:o,monitorOnly:!0};if(!i.attackMode)return{...t,allowlist:e,blocklist:o};let r=t.thresholds??{};return{...t,allowlist:e,blocklist:o,thresholds:{...r,newConnectionsPerSecond:Math.max(1,Math.floor((r.newConnectionsPerSecond??50)/5)),concurrentPerSource:Math.max(1,Math.floor((r.concurrentPerSource??100)/5))}}}function Zo(t,i){let e=t?.infrastructure?.compute;if(!e||e.ddos===!1)return t;let o=typeof e.ddos==="object"&&e.ddos!==null?e.ddos:{};return{...t,infrastructure:{...t.infrastructure,compute:{...e,ddos:In(o,i)}}}}export{_p,vd,oc,sc,Cd,Op,$p,Qt,Rn,Yt,Vi,Lp,In,Zo};
|