@skaile/transform-proxy 0.4.0 → 0.5.1

package/dist/{server-CicvlQ7q.d.mts → server-gwJGHF82.d.mts}

@@ -27,6 +27,14 @@ interface Transform {
   dispose?(): void | Promise<void>;
   /** Host-only state of this instance (e.g. the anon mapping), read through TransformProxy.inspect. Never called by the walkers, never sent anywhere. */
   inspect?(): unknown;
+  /**
+   * Originals this instance has already replaced in this session (forge-anon: its mapping), each with its kind.
+   * Used only by the proxy's leak check, which reports kind and JSON path, never the value; never sent anywhere.
+   */
+  knownOriginals?(): Iterable<{
+    readonly kind: string;
+    readonly value: string;
+  }>;
 }
 interface SessionFact {
   readonly kind: string;
@@ -58,6 +66,51 @@ interface TransformModule {
     readonly log: Logger;
   }): Promise<TransformFactory>;
 }
+/** One leak-check finding. Never carries the value itself. */
+interface TraceLeak {
+  /** Fact/original kind, e.g. 'person'. */
+  readonly kind: string;
+  /** Fact source (publisher id), or 'pipeline' for `Transform.knownOriginals`. */
+  readonly source: string;
+  /** JSON path in the rewritten request body, e.g. 'tools[0].description'. */
+  readonly at: string;
+}
+/** One line of the anon trace: what left for the provider (request) or what it answered before restore (response/error). */
+interface TraceEvent {
+  /** ISO timestamp. */
+  readonly at: string;
+  /** Per proxied request; links its request/response/error lines. */
+  readonly requestId: string;
+  readonly sessionId: string;
+  readonly pipeline: string;
+  /** `WireRoute.name`, e.g. 'anthropic.messages'. */
+  readonly route: string;
+  /** Forward target origin + path, no query string. */
+  readonly upstream: string;
+  /** Request body `model` when a string. */
+  readonly model?: string;
+  readonly phase: 'request' | 'response' | 'error';
+  /** response/error: HTTP status (502 when the upstream was unreachable). */
+  readonly status?: number;
+  /** response/error: ms since the request event. */
+  readonly durationMs?: number;
+  /**
+   * request: the delta, keyed by JSON path (`{ 'messages[4]': {...}, system: [...] }`), only entries not yet traced in
+   * this session; `{}` when nothing is new.
+   * response: the model reply before restore (streamed: assembled in the protocol's non-streamed shape; `undefined` when
+   * the stream ended before a complete reply).
+   * error: the upstream error body as text, cut to 4096 chars, or the fetch error message.
+   */
+  readonly content?: unknown;
+  /** Set only by `serializeTraceEvent`. */
+  readonly truncated?: boolean;
+  /** request: leak-check findings; response/error: []. */
+  readonly leaks: readonly TraceLeak[];
+}
+/** Synchronous. The proxy catches a throw, logs it, and never lets it reach the client. */
+interface TraceSink {
+  record(event: TraceEvent): void;
+}
 /** A configured transform: a module (object, npm specifier or relative path) and its config. */
 interface TransformSpec {
   readonly module: string | TransformModule;
@@ -79,6 +132,8 @@ interface TransformProxyOptions {
   /** Origins. Absent = any https origin plus loopback http. */
   allowUpstreams?: readonly string[];
   log?: Logger;
+  /** Records what goes upstream after the pipeline and what comes back before restore. Absent = no trace. */
+  trace?: TraceSink;
 }
 interface TransformProxy {
   readonly url: string;
@@ -91,7 +146,7 @@ interface TransformProxy {
   /**
    * Host-only, in-process: each stage's `inspect()` result of the session's pipeline instance, keyed by transform id.
    * `{}` when the session or pipeline is unknown, the instance is not built, or its build failed.
-   * Never builds an instance or creates session state; there is no HTTP route for it.
+   * Never builds an instance or creates session state; there is no HTTP route for it. Rejects when a stage's `inspect()` throws.
    */
   inspect(sessionId: string, pipelineId?: string): Promise<Record<string, unknown>>;
   close(): Promise<void>;
@@ -101,4 +156,4 @@ declare const SESSION_HEADER = "x-skaile-transform-session";
 declare const PIPELINE_HEADER = "x-skaile-transform-pipeline";
 declare const TOKEN_HEADER = "x-skaile-transform-token";
 declare function createTransformProxy(options: TransformProxyOptions): Promise<TransformProxy>;
-export { TransformModule as _, TransformProxyOptions as a, TransformSpec as c, SessionFactPublisher as d, SessionFacts as f, TransformFactory as g, Transform as h, TransformProxy as i, Logger as l, TextLeafKind as m, SESSION_HEADER as n, UPSTREAM_HEADER as o, TextLeaf as p, TOKEN_HEADER as r, createTransformProxy as s, PIPELINE_HEADER as t, SessionFact as u, TransformSessionContext as v };
+export { TraceSink as _, TransformProxyOptions as a, TransformModule as b, TransformSpec as c, SessionFactPublisher as d, SessionFacts as f, TraceLeak as g, TraceEvent as h, TransformProxy as i, Logger as l, TextLeafKind as m, SESSION_HEADER as n, UPSTREAM_HEADER as o, TextLeaf as p, TOKEN_HEADER as r, createTransformProxy as s, PIPELINE_HEADER as t, SessionFact as u, Transform as v, TransformSessionContext as x, TransformFactory as y };

package/package.json

@@ -1,16 +1,17 @@
 {
   "name": "@skaile/transform-proxy",
-  "version": "0.4.0",
+  "version": "0.5.1",
   "type": "module",
   "description": "Same-protocol passthrough proxy that runs model requests and replies through a chain of text transforms (Anthropic Messages, OpenAI chat, OpenAI responses)",
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/skaile-ai/skaile-transform-proxy.git"
+    "url": "git+https://github.com/skaile-ai/forge.git",
+    "directory": "packages/transform-proxy"
   },
-  "homepage": "https://github.com/skaile-ai/skaile-transform-proxy#readme",
+  "homepage": "https://github.com/skaile-ai/forge/tree/main/packages/transform-proxy#readme",
   "bugs": {
-    "url": "https://github.com/skaile-ai/skaile-transform-proxy/issues"
+    "url": "https://github.com/skaile-ai/forge/issues"
   },
   "keywords": [
     "llm",
@@ -54,9 +55,10 @@
   "scripts": {
     "prebuild": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\"",
     "build": "tsdown",
-    "prepare": "npm run build",
-    "test": "bun test",
-    "typecheck": "tsc --noEmit"
+    "prepublishOnly": "npm run build",
+    "test": "bun --bun vitest run",
+    "typecheck": "tsc --noEmit",
+    "check": "bun ../../scripts/check-package.ts"
   },
   "dependencies": {
     "yaml": "^2.9.0"
@@ -64,7 +66,6 @@
   "devDependencies": {
     "@types/bun": "^1.3.0",
     "@types/node": "^22.0.0",
-    "tsdown": "^0.23.1",
     "typescript": "^5.9.3"
   }
 }