@elisym/sdk 0.6.0 → 0.7.0

package/dist/index.cjs

@@ -2412,12 +2412,149 @@ function validateAgentName(name) {
   }
 }
 
+// src/primitives/rateLimiter.ts
+function createSlidingWindowLimiter(options) {
+  const { windowMs, maxPerWindow, maxKeys } = options;
+  if (windowMs <= 0) {
+    throw new RangeError("windowMs must be > 0");
+  }
+  if (maxPerWindow <= 0) {
+    throw new RangeError("maxPerWindow must be > 0");
+  }
+  if (maxKeys <= 0) {
+    throw new RangeError("maxKeys must be > 0");
+  }
+  const entries = /* @__PURE__ */ new Map();
+  function evictIfNeeded() {
+    while (entries.size > maxKeys) {
+      const oldestKey = entries.keys().next().value;
+      if (oldestKey === void 0) {
+        return;
+      }
+      entries.delete(oldestKey);
+    }
+  }
+  return {
+    peek(key, now = Date.now()) {
+      const entry = entries.get(key);
+      if (!entry) {
+        return { allowed: true, resetAt: now + windowMs, count: 0 };
+      }
+      const cutoff = now - windowMs;
+      const fresh = entry.hits.filter((timestamp) => timestamp > cutoff);
+      return {
+        allowed: fresh.length < maxPerWindow,
+        resetAt: (fresh[0] ?? now) + windowMs,
+        count: fresh.length
+      };
+    },
+    check(key, now = Date.now()) {
+      const entry = entries.get(key) ?? { hits: [] };
+      const cutoff = now - windowMs;
+      const fresh = entry.hits.filter((timestamp) => timestamp > cutoff);
+      if (fresh.length >= maxPerWindow) {
+        entries.delete(key);
+        entries.set(key, { hits: fresh });
+        return {
+          allowed: false,
+          resetAt: (fresh[0] ?? now) + windowMs,
+          count: fresh.length
+        };
+      }
+      fresh.push(now);
+      entries.delete(key);
+      entries.set(key, { hits: fresh });
+      evictIfNeeded();
+      return {
+        allowed: true,
+        resetAt: (fresh[0] ?? now) + windowMs,
+        count: fresh.length
+      };
+    },
+    prune(now = Date.now()) {
+      const cutoff = now - windowMs;
+      for (const [key, entry] of entries) {
+        const fresh = entry.hits.filter((timestamp) => timestamp > cutoff);
+        if (fresh.length === 0) {
+          entries.delete(key);
+        } else if (fresh.length !== entry.hits.length) {
+          entry.hits = fresh;
+        }
+      }
+    },
+    size() {
+      return entries.size;
+    },
+    reset() {
+      entries.clear();
+    }
+  };
+}
+
+// src/primitives/logRedact.ts
+var SECRET_REDACT_PATHS = [
+  "*.ELISYM_NOSTR_PRIVATE_KEY",
+  "*.ELISYM_SOLANA_PRIVATE_KEY",
+  "*.nostrPrivateKeyHex",
+  "*.solanaPrivateKeyBase58",
+  "*.secretKey",
+  "*.secret",
+  "ELISYM_NOSTR_PRIVATE_KEY",
+  "ELISYM_SOLANA_PRIVATE_KEY",
+  // Canonical on-disk `.secrets.json` field names. Logging the whole
+  // `secrets` object, or any single field directly, must not leak.
+  "llm_api_key",
+  "nostr_secret_key",
+  "solana_secret_key",
+  "*.llm_api_key",
+  "*.nostr_secret_key",
+  "*.solana_secret_key",
+  "secrets",
+  "*.secrets"
+];
+var INPUT_REDACT_PATHS = [
+  "content",
+  "input",
+  "prompt",
+  "*.content",
+  "*.input",
+  "*.prompt",
+  "event.content",
+  "*.event.content",
+  // JobLedger entries carry the raw Nostr event JSON (which embeds
+  // `event.content`) and the full LLM `resultContent` - both are
+  // customer-confidential and must never land in a structured log.
+  "rawEventJson",
+  "resultContent",
+  "*.rawEventJson",
+  "*.resultContent"
+];
+var DEFAULT_REDACT_PATHS = [...SECRET_REDACT_PATHS, ...INPUT_REDACT_PATHS];
+var INPUT_REDACT_LEAVES = /* @__PURE__ */ new Set([
+  "content",
+  "input",
+  "prompt",
+  "rawEventJson",
+  "resultContent"
+]);
+function makeCensor() {
+  return (_value, path) => {
+    const last = path[path.length - 1];
+    if (last !== void 0 && INPUT_REDACT_LEAVES.has(last)) {
+      return "[INPUT REDACTED]";
+    }
+    return "[REDACTED]";
+  };
+}
+
 exports.BoundedSet = BoundedSet;
 exports.DEFAULTS = DEFAULTS;
 exports.DEFAULT_KIND_OFFSET = DEFAULT_KIND_OFFSET;
+exports.DEFAULT_REDACT_PATHS = DEFAULT_REDACT_PATHS;
 exports.DiscoveryService = DiscoveryService;
 exports.ElisymClient = ElisymClient;
 exports.ElisymIdentity = ElisymIdentity;
+exports.INPUT_REDACT_PATHS = INPUT_REDACT_PATHS;
 exports.KIND_APP_HANDLER = KIND_APP_HANDLER;
 exports.KIND_JOB_FEEDBACK = KIND_JOB_FEEDBACK;
 exports.KIND_JOB_REQUEST = KIND_JOB_REQUEST;
@@ -2437,6 +2574,7 @@ exports.PROTOCOL_TREASURY = PROTOCOL_TREASURY;
 exports.PaymentRequestSchema = PaymentRequestSchema;
 exports.PingService = PingService;
 exports.RELAYS = RELAYS;
+exports.SECRET_REDACT_PATHS = SECRET_REDACT_PATHS;
 exports.SolanaPaymentStrategy = SolanaPaymentStrategy;
 exports.assertExpiry = assertExpiry;
 exports.assertLamports = assertLamports;
@@ -2445,12 +2583,14 @@ exports.calculateProtocolFee = calculateProtocolFee;
 exports.clearPriorityFeeCache = clearPriorityFeeCache;
 exports.clearProtocolConfigCache = clearProtocolConfigCache;
 exports.createPaymentRequestWithOnchainConfig = createPaymentRequestWithOnchainConfig;
+exports.createSlidingWindowLimiter = createSlidingWindowLimiter;
 exports.estimatePriorityFeeMicroLamports = estimatePriorityFeeMicroLamports;
 exports.formatSol = formatSol;
 exports.getProtocolConfig = getProtocolConfig;
 exports.getProtocolProgramId = getProtocolProgramId;
 exports.jobRequestKind = jobRequestKind;
 exports.jobResultKind = jobResultKind;
+exports.makeCensor = makeCensor;
 exports.nip44Decrypt = nip44Decrypt;
 exports.nip44Encrypt = nip44Encrypt;
 exports.parsePaymentRequest = parsePaymentRequest;