[ENG-4060] Declare every runtime option and keep the declarations in step

[patchstackdave]

protect.d.ts is written by hand, and it had fallen behind the runtime.

Added: declarations for the options the runtime already reads — onSkip, onRuleRejected, bootTimeoutMs, refreshTimeoutMs, acceptPartialBundle, allowGlobalWhitelists and the top-level maxBodyBytes — and for the coverage() method.

Corrected:

• fetchImpl is used by the reporters, not the rules client.
• reportManifest applies whenever a refresh path is configured, not only with refreshMs > 0.

New test: it compares the option names the runtime reads, and the members the protection object carries, with the declarations, in both directions. A new option or member without a declaration fails it, and so does a declaration the runtime no longer uses.

No runtime change.

Rebased onto current main. The test also passes against the options and members that have landed there since, so they are all declared.

Validation: full suite, typecheck, build.

Part of ENG-4060.

🤖 Generated with Claude Code

[coderbuds]

Adds missing runtime option declarations and robust drift tests.

🎯 Quality: 100% Elite · 📦 Size: Medium

🤖 Authorship: Agent-written — Claude Code, going by its own attribution. Whether a person read it is unknown; coding agents can call the report-ai-usage tool to say.

📈 This month: Your 164th PR — above team average · Averaging Excellent

_{See how your team is trending →}

[patchstackdave]

/review