@amalgm/chat 0.2.0 → 0.2.1

package/README.md

@@ -92,3 +92,8 @@ npm install
 npm test
 npm pack --dry-run
 ```
+
+Package releases use `.github/workflows/publish-package.yml`. A reviewed main
+commit is tagged exactly `v<package version>`; trusted npm publishing stages
+that package, and a maintainer approves the staged artifact with 2FA. Manual
+dirty-worktree publishing is not a release path.

package/docs/contracts/platform-authorization.md

@@ -15,3 +15,8 @@ If issuance or proof creation fails, egress returns `503` without contacting
 the provider. The provider adapter propagates failure through the ordinary
 runtime pump, and Chat seals the turn as `failed`; stable host error codes are
 preserved in the durable turn error.
+
+The local relay accepts only its session capability, removes caller-supplied
+credentials and Amalgm metadata, bounds buffered request bytes, rejects
+redirects, and applies response backpressure. These are part of the egress
+boundary, not provider-specific adapter behavior.

package/host/platform-egress.js

@@ -1,9 +1,17 @@
+import { timingSafeEqual } from 'node:crypto';
+import { once } from 'node:events';
+
+const MAX_EGRESS_REQUEST_BYTES = 64 * 1024 * 1024;
+
 const HOP_HEADERS = new Set([
   'accept-encoding',
   'connection',
   'content-encoding',
   'content-length',
+  'cookie',
+  'dpop',
   'host',
+  'proxy-authorization',
   'transfer-encoding',
 ]);
 
@@ -25,7 +33,12 @@ function requestHeaders(request) {
   const headers = {};
   for (const [name, value] of Object.entries(request.headers || {})) {
     const lower = name.toLowerCase();
-    if (HOP_HEADERS.has(lower) || lower === 'authorization' || lower === 'x-api-key') continue;
+    if (
+      HOP_HEADERS.has(lower)
+      || lower === 'authorization'
+      || lower === 'x-api-key'
+      || lower.startsWith('x-amalgm-')
+    ) continue;
     if (value !== undefined) headers[lower] = Array.isArray(value) ? value[0] : value;
   }
   return headers;
@@ -43,17 +56,18 @@ function responseHeaders(response) {
 export async function forwardPlatformEgress({ request, response, contract, proxy, upstreamPath }) {
   const authorization = String(request.headers.authorization || '').replace(/^Bearer\s+/i, '').trim();
   const apiKey = String(request.headers['x-api-key'] || '').trim();
-  if (!contract.auth?.tokenRef || (authorization || apiKey) !== contract.auth.tokenRef) {
+  const presented = authorization || apiKey;
+  if (!contract.auth?.tokenRef || !secretMatches(presented, contract.auth.tokenRef)) {
     response.writeHead(401, { 'content-type': 'application/json', 'cache-control': 'no-store' });
     response.end(JSON.stringify({ error: 'Invalid Chat egress token' }));
     return;
   }
   const method = request.method || 'GET';
   const url = `${proxy.baseUrl.replace(/\/$/, '')}${upstreamPath}`;
-  const body = ['GET', 'HEAD'].includes(method) ? undefined : await requestBytes(request);
   const fetchImpl = proxy.fetch || fetch;
   let upstream;
   try {
+    const body = ['GET', 'HEAD'].includes(method) ? undefined : await requestBytes(request);
     for (let attempt = 0; attempt < 2; attempt += 1) {
       const grant = await proxy.credentialBroker.authorize({
         audience: 'amalgm-api-proxy',
@@ -70,6 +84,7 @@ export async function forwardPlatformEgress({ request, response, contract, proxy
           dpop: grant.dpop,
         },
         body,
+        redirect: 'error',
       });
       if (upstream.status !== 401 || attempt === 1) break;
       await upstream.body?.cancel().catch(() => undefined);
@@ -90,18 +105,19 @@ export async function forwardPlatformEgress({ request, response, contract, proxy
     while (true) {
       const { done, value } = await reader.read();
       if (done) break;
-      if (value) response.write(Buffer.from(value));
+      if (value && response.write(Buffer.from(value)) === false) await once(response, 'drain');
     }
   }
   response.end();
 }
 
 function scopeForPath(path) {
-  if (path.startsWith('/anthropic')) return 'llm:anthropic';
-  if (path.startsWith('/ai_gateway')) return 'llm:gateway';
-  if (path.startsWith('/google') || path.startsWith('/gemini')) return 'llm:google';
-  if (path.startsWith('/xai')) return 'llm:xai';
-  if (path.startsWith('/openai')) return 'llm:openai';
+  const provider = path.match(/^\/([^/?]+)(?:[/?]|$)/)?.[1];
+  if (provider === 'anthropic') return 'llm:anthropic';
+  if (provider === 'ai_gateway') return 'llm:gateway';
+  if (provider === 'google' || provider === 'gemini') return 'llm:google';
+  if (provider === 'xai') return 'llm:xai';
+  if (provider === 'openai') return 'llm:openai';
   throw Object.assign(new Error('Platform egress route has no authorization scope'), {
     code: 'EGRESS_SCOPE_UNKNOWN',
   });
@@ -109,6 +125,22 @@ function scopeForPath(path) {
 
 async function requestBytes(request) {
   const chunks = [];
-  for await (const chunk of request) chunks.push(Buffer.from(chunk));
+  let bytes = 0;
+  for await (const chunk of request) {
+    const value = Buffer.from(chunk);
+    bytes += value.byteLength;
+    if (bytes > MAX_EGRESS_REQUEST_BYTES) {
+      throw Object.assign(new Error('Platform egress request exceeds its byte limit'), {
+        code: 'EGRESS_REQUEST_TOO_LARGE',
+      });
+    }
+    chunks.push(value);
+  }
   return chunks.length > 0 ? Buffer.concat(chunks) : undefined;
 }
+
+function secretMatches(presented, expected) {
+  const left = Buffer.from(presented);
+  const right = Buffer.from(expected);
+  return left.byteLength === right.byteLength && timingSafeEqual(left, right);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amalgm/chat",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "A provider-agnostic agent chat SDK with ACP content, prepared execution, normalized streams, and usage.",
   "type": "module",
   "license": "UNLICENSED",
@@ -81,8 +81,7 @@
   },
   "scripts": {
     "build": "node scripts/clean-dist.mjs && tsc -p tsconfig.json",
-    "test": "npm run build && node --test tests/",
-    "test:parity": "npm run build && node --test tests/parity/"
+    "test": "npm run build && node --test"
   },
   "dependencies": {
     "@agentclientprotocol/sdk": "^1.4.0",