@yiaany/ghostapi 0.1.7 → 0.1.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (322) hide show
  1. package/CHANGELOG.md +42 -2
  2. package/CONTRIBUTING.md +119 -117
  3. package/LICENSE +21 -21
  4. package/README.md +208 -181
  5. package/SECURITY.md +53 -37
  6. package/dist/actions/gateway.d.ts +179 -0
  7. package/dist/actions/gateway.js +514 -0
  8. package/dist/actions/gateway.js.map +1 -0
  9. package/dist/actions/index.d.ts +2 -0
  10. package/dist/actions/index.js +2 -0
  11. package/dist/actions/index.js.map +1 -0
  12. package/dist/ai/aiClient.js +4 -4
  13. package/dist/ai/aiClient.js.map +1 -1
  14. package/dist/ai/aiGenerator.d.ts +2 -2
  15. package/dist/ai/aiGenerator.js +21 -72
  16. package/dist/ai/aiGenerator.js.map +1 -1
  17. package/dist/ai/prompts.js +51 -51
  18. package/dist/ai/prompts.js.map +1 -1
  19. package/dist/approvals/approvalInbox.d.ts +150 -0
  20. package/dist/approvals/approvalInbox.js +412 -0
  21. package/dist/approvals/approvalInbox.js.map +1 -0
  22. package/dist/approvals/index.d.ts +2 -0
  23. package/dist/approvals/index.js +2 -0
  24. package/dist/approvals/index.js.map +1 -0
  25. package/dist/behavior/behaviorStore.d.ts +2 -0
  26. package/dist/behavior/behaviorStore.js +50 -46
  27. package/dist/behavior/behaviorStore.js.map +1 -1
  28. package/dist/cache/index.d.ts +2 -0
  29. package/dist/cache/index.js +58 -14
  30. package/dist/cache/index.js.map +1 -1
  31. package/dist/cli/index.js +438 -58
  32. package/dist/cli/index.js.map +1 -1
  33. package/dist/cli/openUrl.d.ts +10 -0
  34. package/dist/cli/openUrl.js +31 -0
  35. package/dist/cli/openUrl.js.map +1 -0
  36. package/dist/cli/parser.d.ts +155 -0
  37. package/dist/cli/parser.js +504 -2
  38. package/dist/cli/parser.js.map +1 -1
  39. package/dist/config/dataPaths.d.ts +31 -0
  40. package/dist/config/dataPaths.js +45 -0
  41. package/dist/config/dataPaths.js.map +1 -0
  42. package/dist/config/localConfig.d.ts +1 -2
  43. package/dist/config/localConfig.js +27 -21
  44. package/dist/config/localConfig.js.map +1 -1
  45. package/dist/config/serverConfig.d.ts +2 -0
  46. package/dist/config/serverConfig.js +8 -1
  47. package/dist/config/serverConfig.js.map +1 -1
  48. package/dist/contracts/contract.d.ts +76 -0
  49. package/dist/contracts/contract.js +603 -0
  50. package/dist/contracts/contract.js.map +1 -0
  51. package/dist/contracts/index.d.ts +2 -0
  52. package/dist/contracts/index.js +2 -0
  53. package/dist/contracts/index.js.map +1 -0
  54. package/dist/credentials/credentialBroker.d.ts +207 -0
  55. package/dist/credentials/credentialBroker.js +588 -0
  56. package/dist/credentials/credentialBroker.js.map +1 -0
  57. package/dist/credentials/index.d.ts +2 -0
  58. package/dist/credentials/index.js +2 -0
  59. package/dist/credentials/index.js.map +1 -0
  60. package/dist/dashboard/app.js +685 -615
  61. package/dist/dashboard/index.html +13 -7
  62. package/dist/dashboard/styles.css +349 -349
  63. package/dist/egress/capabilities.d.ts +32 -0
  64. package/dist/egress/capabilities.js +165 -0
  65. package/dist/egress/capabilities.js.map +1 -0
  66. package/dist/egress/linuxBootstrap.d.ts +1 -0
  67. package/dist/egress/linuxBootstrap.js +121 -0
  68. package/dist/egress/linuxBootstrap.js.map +1 -0
  69. package/dist/egress/run.d.ts +18 -0
  70. package/dist/egress/run.js +305 -0
  71. package/dist/egress/run.js.map +1 -0
  72. package/dist/errors/errorEngine.d.ts +2 -2
  73. package/dist/errors/errorEngine.js +3 -40
  74. package/dist/errors/errorEngine.js.map +1 -1
  75. package/dist/evals/evals.d.ts +126 -0
  76. package/dist/evals/evals.js +466 -0
  77. package/dist/evals/evals.js.map +1 -0
  78. package/dist/evals/index.d.ts +2 -0
  79. package/dist/evals/index.js +2 -0
  80. package/dist/evals/index.js.map +1 -0
  81. package/dist/evidence/index.d.ts +2 -0
  82. package/dist/evidence/index.js +2 -0
  83. package/dist/evidence/index.js.map +1 -0
  84. package/dist/evidence/report.d.ts +143 -0
  85. package/dist/evidence/report.js +556 -0
  86. package/dist/evidence/report.js.map +1 -0
  87. package/dist/fault/faultLab.d.ts +5 -4
  88. package/dist/fault/faultLab.js +66 -24
  89. package/dist/fault/faultLab.js.map +1 -1
  90. package/dist/index.d.ts +46 -0
  91. package/dist/index.js +23 -0
  92. package/dist/index.js.map +1 -1
  93. package/dist/inventory/analysis.d.ts +12 -0
  94. package/dist/inventory/analysis.js +457 -0
  95. package/dist/inventory/analysis.js.map +1 -0
  96. package/dist/inventory/index.d.ts +5 -0
  97. package/dist/inventory/index.js +4 -0
  98. package/dist/inventory/index.js.map +1 -0
  99. package/dist/inventory/inventoryController.d.ts +53 -0
  100. package/dist/inventory/inventoryController.js +1044 -0
  101. package/dist/inventory/inventoryController.js.map +1 -0
  102. package/dist/inventory/types.d.ts +579 -0
  103. package/dist/inventory/types.js +787 -0
  104. package/dist/inventory/types.js.map +1 -0
  105. package/dist/landing/assets/index-CxWsopzP.css +1 -0
  106. package/dist/landing/assets/index-DZlpyhqd.js +55 -0
  107. package/dist/landing/assets/index-Dk-Xezs3.js +55 -0
  108. package/dist/landing/index.html +15 -15
  109. package/dist/ledger/actionLedger.d.ts +125 -0
  110. package/dist/ledger/actionLedger.js +594 -0
  111. package/dist/ledger/actionLedger.js.map +1 -0
  112. package/dist/ledger/index.d.ts +2 -0
  113. package/dist/ledger/index.js +2 -0
  114. package/dist/ledger/index.js.map +1 -0
  115. package/dist/mcp/server.js +4 -3
  116. package/dist/mcp/server.js.map +1 -1
  117. package/dist/policy/index.d.ts +3 -0
  118. package/dist/policy/index.js +2 -0
  119. package/dist/policy/index.js.map +1 -0
  120. package/dist/policy/policy.d.ts +14 -0
  121. package/dist/policy/policy.js +282 -0
  122. package/dist/policy/policy.js.map +1 -0
  123. package/dist/policy/types.d.ts +52 -0
  124. package/dist/policy/types.js +2 -0
  125. package/dist/policy/types.js.map +1 -0
  126. package/dist/productTelemetry/index.d.ts +16 -0
  127. package/dist/productTelemetry/index.js +142 -0
  128. package/dist/productTelemetry/index.js.map +1 -0
  129. package/dist/providers/conformance.d.ts +7 -0
  130. package/dist/providers/conformance.js +48 -0
  131. package/dist/providers/conformance.js.map +1 -0
  132. package/dist/providers/index.d.ts +4 -2
  133. package/dist/providers/index.js +3 -1
  134. package/dist/providers/index.js.map +1 -1
  135. package/dist/providers/packs/resendPack.d.ts +2 -0
  136. package/dist/providers/packs/resendPack.js +147 -0
  137. package/dist/providers/packs/resendPack.js.map +1 -0
  138. package/dist/providers/packs/stripePack.d.ts +2 -0
  139. package/dist/providers/packs/stripePack.js +852 -0
  140. package/dist/providers/packs/stripePack.js.map +1 -0
  141. package/dist/providers/registry.d.ts +7 -3
  142. package/dist/providers/registry.js +55 -4
  143. package/dist/providers/registry.js.map +1 -1
  144. package/dist/providers/resend.js +2 -11
  145. package/dist/providers/resend.js.map +1 -1
  146. package/dist/providers/runtime.d.ts +8 -0
  147. package/dist/providers/runtime.js +48 -0
  148. package/dist/providers/runtime.js.map +1 -0
  149. package/dist/providers/stripeWebhook.d.ts +13 -0
  150. package/dist/providers/stripeWebhook.js +50 -0
  151. package/dist/providers/stripeWebhook.js.map +1 -0
  152. package/dist/providers/types.d.ts +153 -0
  153. package/dist/proxy/cacheKey.js +3 -3
  154. package/dist/proxy/cacheKey.js.map +1 -1
  155. package/dist/proxy/providerDetector.d.ts +2 -7
  156. package/dist/proxy/providerDetector.js +4 -4
  157. package/dist/proxy/providerDetector.js.map +1 -1
  158. package/dist/proxy/proxyHandler.js +116 -12
  159. package/dist/proxy/proxyHandler.js.map +1 -1
  160. package/dist/proxy/requestNormalizer.d.ts +0 -1
  161. package/dist/proxy/requestNormalizer.js +2 -5
  162. package/dist/proxy/requestNormalizer.js.map +1 -1
  163. package/dist/reliability/costGovernance.d.ts +175 -0
  164. package/dist/reliability/costGovernance.js +515 -0
  165. package/dist/reliability/costGovernance.js.map +1 -0
  166. package/dist/reliability/index.d.ts +8 -0
  167. package/dist/reliability/index.js +5 -0
  168. package/dist/reliability/index.js.map +1 -0
  169. package/dist/reliability/reconciliation.d.ts +157 -0
  170. package/dist/reliability/reconciliation.js +522 -0
  171. package/dist/reliability/reconciliation.js.map +1 -0
  172. package/dist/reliability/runtimeHealth.d.ts +60 -0
  173. package/dist/reliability/runtimeHealth.js +356 -0
  174. package/dist/reliability/runtimeHealth.js.map +1 -0
  175. package/dist/reliability/slo.d.ts +131 -0
  176. package/dist/reliability/slo.js +375 -0
  177. package/dist/reliability/slo.js.map +1 -0
  178. package/dist/report/safetyReport.js +7 -3
  179. package/dist/report/safetyReport.js.map +1 -1
  180. package/dist/safety/index.d.ts +2 -0
  181. package/dist/safety/index.js +2 -0
  182. package/dist/safety/index.js.map +1 -0
  183. package/dist/safety/safetyController.d.ts +187 -0
  184. package/dist/safety/safetyController.js +477 -0
  185. package/dist/safety/safetyController.js.map +1 -0
  186. package/dist/scenarios/scenarioBundle.d.ts +75 -0
  187. package/dist/scenarios/scenarioBundle.js +750 -0
  188. package/dist/scenarios/scenarioBundle.js.map +1 -0
  189. package/dist/scenarios/scenarioStore.d.ts +1 -0
  190. package/dist/scenarios/scenarioStore.js +47 -32
  191. package/dist/scenarios/scenarioStore.js.map +1 -1
  192. package/dist/security/headerSanitizer.d.ts +2 -0
  193. package/dist/security/headerSanitizer.js +36 -1
  194. package/dist/security/headerSanitizer.js.map +1 -1
  195. package/dist/security/secrets.js +24 -4
  196. package/dist/security/secrets.js.map +1 -1
  197. package/dist/server/accessControl.d.ts +5 -0
  198. package/dist/server/accessControl.js +100 -0
  199. package/dist/server/accessControl.js.map +1 -0
  200. package/dist/server/createServer.d.ts +0 -5
  201. package/dist/server/createServer.js +9 -29
  202. package/dist/server/createServer.js.map +1 -1
  203. package/dist/server/eventsStore.d.ts +6 -1
  204. package/dist/server/eventsStore.js +83 -15
  205. package/dist/server/eventsStore.js.map +1 -1
  206. package/dist/server/routes.js +42 -10
  207. package/dist/server/routes.js.map +1 -1
  208. package/dist/server/sse.d.ts +2 -1
  209. package/dist/server/sse.js +15 -3
  210. package/dist/server/sse.js.map +1 -1
  211. package/dist/setup/setupGenerator.js +53 -6
  212. package/dist/setup/setupGenerator.js.map +1 -1
  213. package/dist/state/stateStore.d.ts +5 -0
  214. package/dist/state/stateStore.js +48 -62
  215. package/dist/state/stateStore.js.map +1 -1
  216. package/dist/storage/fileStore.d.ts +10 -0
  217. package/dist/storage/fileStore.js +131 -0
  218. package/dist/storage/fileStore.js.map +1 -0
  219. package/dist/teamControl/controlPlane.d.ts +255 -0
  220. package/dist/teamControl/controlPlane.js +918 -0
  221. package/dist/teamControl/controlPlane.js.map +1 -0
  222. package/dist/teamControl/deployment.d.ts +33 -0
  223. package/dist/teamControl/deployment.js +67 -0
  224. package/dist/teamControl/deployment.js.map +1 -0
  225. package/dist/teamControl/index.d.ts +4 -0
  226. package/dist/teamControl/index.js +3 -0
  227. package/dist/teamControl/index.js.map +1 -0
  228. package/dist/tests/testGenerator.js +4 -1
  229. package/dist/tests/testGenerator.js.map +1 -1
  230. package/dist/trust/index.d.ts +2 -0
  231. package/dist/trust/index.js +2 -0
  232. package/dist/trust/index.js.map +1 -0
  233. package/dist/trust/trustLadder.d.ts +182 -0
  234. package/dist/trust/trustLadder.js +560 -0
  235. package/dist/trust/trustLadder.js.map +1 -0
  236. package/dist/worlds/index.d.ts +2 -0
  237. package/dist/worlds/index.js +2 -0
  238. package/dist/worlds/index.js.map +1 -0
  239. package/dist/worlds/worlds.d.ts +160 -0
  240. package/dist/worlds/worlds.js +491 -0
  241. package/dist/worlds/worlds.js.map +1 -0
  242. package/docs/assets/dashboard.png +0 -0
  243. package/docs/ci.md +49 -0
  244. package/docs/commercial/README.md +29 -0
  245. package/docs/commercial/data-inventory.md +36 -0
  246. package/docs/commercial/manual-invoicing.md +44 -0
  247. package/docs/commercial/metrics.md +51 -0
  248. package/docs/commercial/pricing.md +103 -0
  249. package/docs/commercial/privacy-policy-draft.md +41 -0
  250. package/docs/commercial/terms-topics-for-counsel.md +51 -0
  251. package/docs/design-partners/README.md +52 -0
  252. package/docs/design-partners/demo-narratives.md +33 -0
  253. package/docs/design-partners/design-partner-offer.md +39 -0
  254. package/docs/design-partners/discovery-questions.md +28 -0
  255. package/docs/design-partners/feedback-capture-template.md +48 -0
  256. package/docs/design-partners/icp-one-pager.md +43 -0
  257. package/docs/design-partners/onboarding-checklist.md +33 -0
  258. package/docs/design-partners/pilot-success-criteria.md +27 -0
  259. package/docs/design-partners/pricing-interview-script.md +18 -0
  260. package/docs/design-partners/telemetry-plan.md +48 -0
  261. package/docs/development/baseline.md +114 -0
  262. package/docs/development/onboarding-smoke.md +37 -0
  263. package/docs/development/verification-0.1.8.md +25 -0
  264. package/docs/enterprise-product-roadmap-ru.md +1879 -0
  265. package/docs/fundraising/README.md +87 -0
  266. package/docs/fundraising/data-room-checklist.md +72 -0
  267. package/docs/fundraising/demo-script.md +52 -0
  268. package/docs/fundraising/design-partners-50.md +74 -0
  269. package/docs/fundraising/launch-posts.md +37 -0
  270. package/docs/fundraising/metrics-and-evidence.md +30 -0
  271. package/docs/fundraising/roadmap-12-month.md +25 -0
  272. package/docs/fundraising/technical-due-diligence-index.md +37 -0
  273. package/docs/fundraising/yc-application.md +25 -0
  274. package/docs/github-actions.md +84 -0
  275. package/docs/hosted-pilot.md +111 -0
  276. package/docs/mcp.md +52 -50
  277. package/docs/operations/disaster-recovery-runbook.md +81 -0
  278. package/docs/operations/kill-switch-runbook.md +32 -0
  279. package/docs/policy.md +61 -0
  280. package/docs/providers/authoring-packs.md +175 -0
  281. package/docs/providers/stripe-core-pack.md +82 -0
  282. package/docs/release-checklist.md +83 -71
  283. package/docs/release-migration-and-rollback.md +63 -0
  284. package/docs/release-readiness.md +39 -0
  285. package/docs/security/action-gateway-threat-model.md +34 -0
  286. package/docs/security/action-ledger-incident-replay-threat-model.md +42 -0
  287. package/docs/security/approval-inbox-threat-model.md +35 -0
  288. package/docs/security/credential-broker-threat-model.md +52 -0
  289. package/docs/security/egress-threat-model.md +126 -0
  290. package/docs/security/inventory-threat-model.md +104 -0
  291. package/docs/security/kill-switch-budgets-threat-model.md +37 -0
  292. package/docs/security/reliability-threat-model.md +111 -0
  293. package/docs/security/trust-ladder-threat-model.md +33 -0
  294. package/docs/team-control-plane.md +72 -0
  295. package/docs/usage.md +571 -57
  296. package/examples/README.md +10 -0
  297. package/examples/agent-instructions/README.md +39 -39
  298. package/examples/ci-smoke/README.md +21 -0
  299. package/examples/ci-smoke/ghostapi.policy.yaml +22 -0
  300. package/examples/ci-smoke/package.json +9 -0
  301. package/examples/ci-smoke/production-egress.mjs +2 -0
  302. package/examples/ci-smoke/safe.mjs +17 -0
  303. package/examples/evals/README.md +24 -0
  304. package/examples/evals/retry-after.eval.json +52 -0
  305. package/examples/generic-rest/README.md +27 -27
  306. package/examples/github-fetch/README.md +35 -35
  307. package/examples/openai-streaming/README.md +16 -0
  308. package/examples/openai-streaming/streaming-tool-call.mjs +31 -0
  309. package/examples/policy/ghostapi.policy.yaml +27 -0
  310. package/examples/record-replay/README.md +19 -0
  311. package/examples/record-replay/replay-requests.json +22 -0
  312. package/examples/record-replay/stripe-checkout.har.json +30 -0
  313. package/examples/resend-node/README.md +22 -22
  314. package/examples/stripe-node/README.md +35 -29
  315. package/examples/stripe-node/checkout-flow.mjs +61 -0
  316. package/examples/twilio-node/README.md +21 -21
  317. package/examples/worlds/README.md +19 -0
  318. package/examples/worlds/subscription-recovery.mjs +12 -0
  319. package/package.json +27 -12
  320. package/dist/providers/stripe.d.ts +0 -2
  321. package/dist/providers/stripe.js +0 -15
  322. package/dist/providers/stripe.js.map +0 -1
@@ -12,15 +12,36 @@ import { broadcastEvent } from "../server/sse.js";
12
12
  import { inferGenericService } from "../ai/genericInference.js";
13
13
  import { decideFault, waitForFault } from "../fault/faultLab.js";
14
14
  import { findApiBehavior } from "../behavior/behaviorStore.js";
15
+ import { sanitizeSecrets } from "../security/secrets.js";
16
+ import { getProviderPack } from "../providers/registry.js";
17
+ import { assertProviderStateTransition, getProviderPackHeaders, prepareProviderPackExecution } from "../providers/runtime.js";
18
+ import { createProviderRuntime } from "../providers/runtime.js";
19
+ import { transactState } from "../state/stateStore.js";
20
+ import { corruptStripeWebhookSignature, createStripeWebhookSignature, isStripeWebhookDeliveryRequest, readStripeWebhookDelivery } from "../providers/stripeWebhook.js";
21
+ import { randomUUID } from "node:crypto";
22
+ import { sanitizeResponseHeaders } from "../security/headerSanitizer.js";
15
23
  export async function proxyHandler(request, response, config) {
16
24
  const t0 = performance.now();
17
25
  const provider = detectProvider({ path: request.path, headers: request.headers, query: request.query, body: request.body });
18
26
  const normalizedRequest = normalizeRequest(request);
19
27
  const providerLabel = provider === "generic" ? inferGenericService(normalizedRequest.path, normalizedRequest.query, normalizedRequest.body) : provider;
28
+ const pack = getProviderPack(provider);
29
+ const preparedPack = pack === null ? null : prepareProviderPackExecution(pack, normalizedRequest);
30
+ const packExecution = preparedPack !== null && !("error" in preparedPack) ? preparedPack : undefined;
31
+ if (packExecution !== undefined) {
32
+ for (const [key, value] of Object.entries(getProviderPackHeaders(packExecution)))
33
+ response.setHeader(key, value);
34
+ for (const [key, value] of Object.entries(packExecution.pack.createResponseHeaders({ apiVersion: packExecution.apiVersion, runtime: packExecution.runtime })))
35
+ response.setHeader(key, value);
36
+ }
37
+ else if (pack !== null && preparedPack !== null && "error" in preparedPack) {
38
+ for (const [key, value] of Object.entries(pack.createResponseHeaders({ apiVersion: pack.manifest.apiVersions.default, runtime: createProviderRuntime() })))
39
+ response.setHeader(key, value);
40
+ }
20
41
  async function completeRequest(source, status, body) {
21
42
  const durationMs = Math.round(performance.now() - t0);
22
43
  const event = {
23
- id: `evt_${Date.now().toString(36)}`,
44
+ id: randomUUID(),
24
45
  timestamp: new Date().toISOString(),
25
46
  provider: providerLabel,
26
47
  method: normalizedRequest.method,
@@ -33,22 +54,26 @@ export async function proxyHandler(request, response, config) {
33
54
  headers: normalizedRequest.headers,
34
55
  body: normalizedRequest.body
35
56
  },
36
- response: body
57
+ response: sanitizeSecrets(body)
37
58
  };
38
- await addEvent(event);
39
- broadcastEvent(event);
59
+ const safeEvent = await addEvent(event);
60
+ broadcastEvent(safeEvent);
40
61
  }
41
62
  const behavior = await findApiBehavior(normalizedRequest);
42
63
  if (behavior !== null) {
43
- for (const [key, value] of Object.entries(behavior.headers ?? {})) {
64
+ for (const [key, value] of Object.entries(sanitizeResponseHeaders(behavior.headers ?? {}))) {
44
65
  response.setHeader(key, value);
45
66
  }
46
67
  response.setHeader("x-ghostapi-behavior", "HIT");
68
+ if (behavior.delayMs !== undefined && behavior.delayMs > 0) {
69
+ response.setHeader("x-ghostapi-behavior-delay-ms", String(behavior.delayMs));
70
+ await waitForFault(behavior.delayMs);
71
+ }
47
72
  response.status(behavior.status).json(behavior.body);
48
73
  await completeRequest("behavior", behavior.status, behavior.body);
49
74
  return;
50
75
  }
51
- const fault = decideFault(provider);
76
+ const fault = await decideFault(provider);
52
77
  if (fault.type === "error") {
53
78
  await waitForFault(fault.latencyMs);
54
79
  response.setHeader("x-ghostapi-fault-lab", "error");
@@ -61,13 +86,77 @@ export async function proxyHandler(request, response, config) {
61
86
  response.setHeader("x-ghostapi-fault-lab", "delay");
62
87
  await waitForFault(fault.latencyMs);
63
88
  }
64
- const validationError = validateRequest(normalizedRequest, provider);
89
+ if (preparedPack !== null && "error" in preparedPack) {
90
+ const formattedError = createProviderError(provider, preparedPack.error);
91
+ response.setHeader("x-ghostapi-provider-pack", `${pack.name}@${pack.manifest.packVersion}`);
92
+ response.status(preparedPack.error.status).json(formattedError);
93
+ await completeRequest("error", preparedPack.error.status, formattedError);
94
+ return;
95
+ }
96
+ const validationError = validateRequest(normalizedRequest, provider, packExecution);
65
97
  if (validationError !== null) {
66
98
  const formattedError = createProviderError(provider, validationError);
67
99
  response.status(validationError.status).json(formattedError);
68
100
  await completeRequest("error", validationError.status, formattedError);
69
101
  return;
70
102
  }
103
+ if (packExecution?.pack.stateful) {
104
+ const generatedOption = await transactState((state) => {
105
+ const runtime = createProviderRuntime({ state: { snapshot: () => structuredClone(state) } });
106
+ const execution = prepareProviderPackExecution(packExecution.pack, normalizedRequest, runtime);
107
+ if ("error" in execution)
108
+ throw new Error(`Provider pack version changed during execution: ${execution.error.message}`);
109
+ const generated = execution.pack.handleDeterministic({
110
+ request: normalizedRequest,
111
+ parsedRequest: execution.parsedRequest,
112
+ apiVersion: execution.apiVersion,
113
+ runtime: execution.runtime
114
+ });
115
+ const transition = execution.pack.transitionState({
116
+ request: normalizedRequest,
117
+ response: generated,
118
+ apiVersion: execution.apiVersion,
119
+ runtime: execution.runtime
120
+ });
121
+ if (transition === null)
122
+ return { state, result: generated };
123
+ assertProviderStateTransition(execution.pack, transition);
124
+ return {
125
+ state: {
126
+ ...state,
127
+ [transition.key]: transition.value,
128
+ ...Object.fromEntries((transition.additionalWrites ?? []).map((write) => [write.key, write.value]))
129
+ },
130
+ result: generated
131
+ };
132
+ });
133
+ for (const [key, value] of Object.entries(generatedOption.headers))
134
+ response.setHeader(key, value);
135
+ response.setHeader("x-ghostapi-cache", "BYPASS");
136
+ if (normalizedRequest.method === "GET" && generatedOption.status < 400)
137
+ response.setHeader("x-ghostapi-state", "HIT");
138
+ if (packExecution.pack.name === "stripe" && isStripeWebhookDeliveryRequest(normalizedRequest)) {
139
+ const delivery = readStripeWebhookDelivery(normalizedRequest.query);
140
+ if (delivery.error !== null) {
141
+ const body = packExecution.pack.formatError(delivery.error);
142
+ response.status(delivery.error.status).json(body);
143
+ await completeRequest("error", delivery.error.status, body);
144
+ return;
145
+ }
146
+ if (delivery.delayMs > 0)
147
+ await waitForFault(delivery.delayMs);
148
+ const payload = JSON.stringify(generatedOption.body);
149
+ const signature = createStripeWebhookSignature(payload);
150
+ response.setHeader("stripe-signature", delivery.mode === "invalid_signature" ? corruptStripeWebhookSignature(signature) : signature);
151
+ response.setHeader("x-ghostapi-webhook-delivery", delivery.mode);
152
+ response.status(generatedOption.status).type("application/json").send(payload);
153
+ await completeRequest("state", generatedOption.status, generatedOption.body);
154
+ return;
155
+ }
156
+ response.status(generatedOption.status).json(generatedOption.body);
157
+ await completeRequest(generatedOption.status >= 400 ? "error" : "state", generatedOption.status, generatedOption.body);
158
+ return;
159
+ }
71
160
  const stateResolution = await resolveState(normalizedRequest, provider);
72
161
  if (stateResolution !== null) {
73
162
  for (const [key, value] of Object.entries(stateResolution.headers)) {
@@ -80,7 +169,7 @@ export async function proxyHandler(request, response, config) {
80
169
  const cacheKey = createCacheKey(normalizedRequest, provider);
81
170
  const cachedResponse = await getCachedResponse(provider, cacheKey);
82
171
  if (cachedResponse !== null) {
83
- for (const [key, value] of Object.entries(cachedResponse.headers)) {
172
+ for (const [key, value] of Object.entries(sanitizeResponseHeaders(cachedResponse.headers))) {
84
173
  response.setHeader(key, value);
85
174
  }
86
175
  response.setHeader("x-ghostapi-cache", "HIT");
@@ -88,7 +177,7 @@ export async function proxyHandler(request, response, config) {
88
177
  await completeRequest("cache", cachedResponse.status, cachedResponse.body);
89
178
  return;
90
179
  }
91
- const generatedOption = await generateAiMock(normalizedRequest, provider, response, config);
180
+ const generatedOption = await generateAiMock(normalizedRequest, provider, response, config, packExecution);
92
181
  if (generatedOption === "streamed") {
93
182
  await completeRequest("stream", 200, { streamed: true });
94
183
  return;
@@ -98,17 +187,32 @@ export async function proxyHandler(request, response, config) {
98
187
  headers: generatedOption.headers,
99
188
  body: generatedOption.body
100
189
  });
101
- if (["POST", "PUT", "PATCH"].includes(normalizedRequest.method)) {
190
+ if (packExecution !== undefined) {
191
+ const transition = packExecution.pack.transitionState({
192
+ request: normalizedRequest,
193
+ response: generatedOption,
194
+ apiVersion: packExecution.apiVersion,
195
+ runtime: packExecution.runtime
196
+ });
197
+ if (transition !== null) {
198
+ assertProviderStateTransition(packExecution.pack, transition);
199
+ await saveToStateStore(transition.key, transition.value);
200
+ for (const write of transition.additionalWrites ?? []) {
201
+ await saveToStateStore(write.key, write.value);
202
+ }
203
+ }
204
+ }
205
+ else if (["POST", "PUT", "PATCH"].includes(normalizedRequest.method)) {
102
206
  const extractedId = extractIdFromResponse(generatedOption.body);
103
207
  if (extractedId !== undefined) {
104
208
  await saveToStateStore(`${provider}:${extractedId}`, generatedOption.body);
105
209
  }
106
210
  }
107
- for (const [key, value] of Object.entries(generatedOption.headers)) {
211
+ for (const [key, value] of Object.entries(sanitizeResponseHeaders(generatedOption.headers))) {
108
212
  response.setHeader(key, value);
109
213
  }
110
214
  response.setHeader("x-ghostapi-cache", "MISS");
111
215
  response.status(generatedOption.status).json(generatedOption.body);
112
- await completeRequest(generatedOption.status >= 400 ? "error" : (String(generatedOption.body)?.includes("mock_response") ? "fallback" : "ai"), generatedOption.status, generatedOption.body);
216
+ await completeRequest(generatedOption.status >= 400 ? "error" : generatedOption.headers["x-ghostapi-generation-source"] === "local-fallback" ? "fallback" : "ai", generatedOption.status, generatedOption.body);
113
217
  }
114
218
  //# sourceMappingURL=proxyHandler.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"proxyHandler.js","sourceRoot":"","sources":["../../src/proxy/proxyHandler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE1E,OAAO,EAAE,QAAQ,EAAoB,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAG/D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAgB,EAAE,QAAkB,EAAE,MAAoB;IAC3F,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5H,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAEvJ,KAAK,UAAU,eAAe,CAAC,MAAmB,EAAE,MAAc,EAAE,IAAa;QAC/E,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG;YACZ,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE;YACpC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE,iBAAiB,CAAC,MAAM;YAChC,IAAI,EAAE,iBAAiB,CAAC,IAAI;YAC5B,UAAU,EAAE,MAAM;YAClB,MAAM;YACN,UAAU;YACV,OAAO,EAAE;gBACP,KAAK,EAAE,iBAAiB,CAAC,KAAK;gBAC9B,OAAO,EAAE,iBAAiB,CAAC,OAAO;gBAClC,IAAI,EAAE,iBAAiB,CAAC,IAAI;aAC7B;YACD,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtB,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,iBAAiB,CAAC,CAAC;IAC1D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YAClE,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,QAAQ,CAAC,SAAS,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QACjD,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,eAAe,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpC,QAAQ,CAAC,SAAS,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;QACpD,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACnE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,QAAQ,CAAC,SAAS,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,eAAe,GAAG,eAAe,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IACrE,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,cAAc,GAAG,mBAAmB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QACtE,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7D,MAAM,eAAe,CAAC,OAAO,EAAE,eAAe,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACvE,OAAO;IACT,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IACxE,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;YACnE,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,eAAe,CAAC,OAAO,EAAE,eAAe,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;QAC7E,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAEnE,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAClE,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,QAAQ,CAAC,SAAS,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QAC9C,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,eAAe,CAAC,OAAO,EAAE,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,cAAc,CAAC,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAE5F,IAAI,eAAe,KAAK,UAAU,EAAE,CAAC;QACnC,MAAM,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IAED,MAAM,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE;QAC1C,MAAM,EAAE,eAAe,CAAC,MAAM;QAC9B,OAAO,EAAE,eAAe,CAAC,OAAO;QAChC,IAAI,EAAE,eAAe,CAAC,IAAI;KAC3B,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChE,MAAM,WAAW,GAAG,qBAAqB,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,gBAAgB,CAAC,GAAG,QAAQ,IAAI,WAAW,EAAE,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;QACnE,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,QAAQ,CAAC,SAAS,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAC/C,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,eAAe,CAAC,eAAe,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/L,CAAC"}
1
+ {"version":3,"file":"proxyHandler.js","sourceRoot":"","sources":["../../src/proxy/proxyHandler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE1E,OAAO,EAAE,QAAQ,EAAoB,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,6BAA6B,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAC9H,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,6BAA6B,EAAE,4BAA4B,EAAE,8BAA8B,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AACvK,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAGzE,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAgB,EAAE,QAAkB,EAAE,MAAoB;IAC3F,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5H,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACvJ,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,4BAA4B,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAClG,MAAM,aAAa,GAAsC,YAAY,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAExI,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;YAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,UAAU,EAAE,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAChM,CAAC;SAAM,IAAI,IAAI,KAAK,IAAI,IAAI,YAAY,KAAK,IAAI,IAAI,OAAO,IAAI,YAAY,EAAE,CAAC;QAC7E,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC;YAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7L,CAAC;IAED,KAAK,UAAU,eAAe,CAAC,MAAmB,EAAE,MAAc,EAAE,IAAa;QAC/E,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG;YACZ,EAAE,EAAE,UAAU,EAAE;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE,iBAAiB,CAAC,MAAM;YAChC,IAAI,EAAE,iBAAiB,CAAC,IAAI;YAC5B,UAAU,EAAE,MAAM;YAClB,MAAM;YACN,UAAU;YACV,OAAO,EAAE;gBACP,KAAK,EAAE,iBAAiB,CAAC,KAAK;gBAC9B,OAAO,EAAE,iBAAiB,CAAC,OAAO;gBAClC,IAAI,EAAE,iBAAiB,CAAC,IAAI;aAC7B;YACD,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC;SAChC,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxC,cAAc,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,iBAAiB,CAAC,CAAC;IAC1D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YAC3F,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,QAAQ,CAAC,SAAS,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QACjD,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YAC3D,QAAQ,CAAC,SAAS,CAAC,8BAA8B,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC7E,MAAM,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QACD,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,eAAe,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpC,QAAQ,CAAC,SAAS,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;QACpD,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACnE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,QAAQ,CAAC,SAAS,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,YAAY,KAAK,IAAI,IAAI,OAAO,IAAI,YAAY,EAAE,CAAC;QACrD,MAAM,cAAc,GAAG,mBAAmB,CAAC,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACzE,QAAQ,CAAC,SAAS,CAAC,0BAA0B,EAAE,GAAG,IAAK,CAAC,IAAI,IAAI,IAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9F,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAChE,MAAM,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IAED,MAAM,eAAe,GAAG,eAAe,CAAC,iBAAiB,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IACpF,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,cAAc,GAAG,mBAAmB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QACtE,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7D,MAAM,eAAe,CAAC,OAAO,EAAE,eAAe,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACvE,OAAO;IACT,CAAC;IAED,IAAI,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,eAAe,GAAG,MAAM,aAAa,CAAC,CAAC,KAAK,EAAE,EAAE;YACpD,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7F,MAAM,SAAS,GAAG,4BAA4B,CAAC,aAAa,CAAC,IAAI,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;YAC/F,IAAI,OAAO,IAAI,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACxH,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,mBAAmB,CAAC;gBACnD,OAAO,EAAE,iBAAiB;gBAC1B,aAAa,EAAE,SAAS,CAAC,aAAa;gBACtC,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,OAAO,EAAE,SAAS,CAAC,OAAO;aAC3B,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC;gBAChD,OAAO,EAAE,iBAAiB;gBAC1B,QAAQ,EAAE,SAAS;gBACnB,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,OAAO,EAAE,SAAS,CAAC,OAAO;aAC3B,CAAC,CAAC;YACH,IAAI,UAAU,KAAK,IAAI;gBAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC7D,6BAA6B,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC1D,OAAO;gBACL,KAAK,EAAE;oBACL,GAAG,KAAK;oBACR,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,KAAK;oBAClC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;iBACpG;gBACD,MAAM,EAAE,SAAS;aAClB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC;YAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnG,QAAQ,CAAC,SAAS,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;QACjD,IAAI,iBAAiB,CAAC,MAAM,KAAK,KAAK,IAAI,eAAe,CAAC,MAAM,GAAG,GAAG;YAAE,QAAQ,CAAC,SAAS,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QAEtH,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,8BAA8B,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC9F,MAAM,QAAQ,GAAG,yBAAyB,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACpE,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC5D,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClD,MAAM,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YACD,IAAI,QAAQ,CAAC,OAAO,GAAG,CAAC;gBAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,SAAS,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;YACxD,QAAQ,CAAC,SAAS,CAAC,kBAAkB,EAAE,QAAQ,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,6BAA6B,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACrI,QAAQ,CAAC,SAAS,CAAC,6BAA6B,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjE,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/E,MAAM,eAAe,CAAC,OAAO,EAAE,eAAe,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QAED,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,eAAe,CAAC,eAAe,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,eAAe,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;QACvH,OAAO;IACT,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IACxE,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;YACnE,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,eAAe,CAAC,OAAO,EAAE,eAAe,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;QAC7E,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAEnE,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC3F,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,QAAQ,CAAC,SAAS,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QAC9C,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,eAAe,CAAC,OAAO,EAAE,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,cAAc,CAAC,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAE3G,IAAI,eAAe,KAAK,UAAU,EAAE,CAAC;QACnC,MAAM,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IAED,MAAM,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE;QAC1C,MAAM,EAAE,eAAe,CAAC,MAAM;QAC9B,OAAO,EAAE,eAAe,CAAC,OAAO;QAChC,IAAI,EAAE,eAAe,CAAC,IAAI;KAC3B,CAAC,CAAC;IAEH,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC;YACtD,OAAO,EAAE,iBAAiB;YAC1B,QAAQ,EAAE,eAAe;YACzB,UAAU,EAAE,aAAa,CAAC,UAAU;YACpC,OAAO,EAAE,aAAa,CAAC,OAAO;SAC/B,CAAC,CAAC;QACD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,6BAA6B,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC9D,MAAM,gBAAgB,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;YACzD,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAAC;gBACtD,MAAM,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACL,CAAC;SAAM,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QACvE,MAAM,WAAW,GAAG,qBAAqB,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,gBAAgB,CAAC,GAAG,QAAQ,IAAI,WAAW,EAAE,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC5F,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,QAAQ,CAAC,SAAS,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAC/C,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,eAAe,CAAC,eAAe,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,8BAA8B,CAAC,KAAK,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;AAClN,CAAC"}
@@ -5,7 +5,6 @@ export type NormalizedRequest = {
5
5
  query: Record<string, unknown>;
6
6
  headers: Record<string, string | string[]>;
7
7
  body: unknown;
8
- rawBody?: string;
9
8
  receivedAt: string;
10
9
  };
11
10
  export declare function normalizeRequest(request: Request): NormalizedRequest;
@@ -1,17 +1,14 @@
1
1
  import { sanitizeHeaders } from "../security/headerSanitizer.js";
2
- import { sanitizeSecrets } from "../security/secrets.js";
2
+ import { sanitizeSecrets, sanitizeSecretString } from "../security/secrets.js";
3
3
  export function normalizeRequest(request) {
4
4
  const normalized = {
5
5
  method: request.method,
6
- path: request.path,
6
+ path: sanitizeSecretString(request.path),
7
7
  query: sanitizeRecord(request.query),
8
8
  headers: sanitizeHeaders(request.headers),
9
9
  body: sanitizeSecrets(getSafeBody(request)),
10
10
  receivedAt: new Date().toISOString()
11
11
  };
12
- if (request.rawBody !== undefined) {
13
- normalized.rawBody = request.rawBody;
14
- }
15
12
  return normalized;
16
13
  }
17
14
  function getSafeBody(request) {
@@ -1 +1 @@
1
- {"version":3,"file":"requestNormalizer.js","sourceRoot":"","sources":["../../src/proxy/requestNormalizer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAYzD,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,MAAM,UAAU,GAAsB;QACpC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC;QACpC,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC;QACzC,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC3C,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IAEF,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACvC,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB;IACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,iBAAiB,OAAO,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC;IACvD,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC;AACtB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAEzC,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACpF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,SAAoC,CAAC;AAC9C,CAAC"}
1
+ {"version":3,"file":"requestNormalizer.js","sourceRoot":"","sources":["../../src/proxy/requestNormalizer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAW/E,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,MAAM,UAAU,GAAsB;QACpC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC;QACxC,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC;QACpC,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC;QACzC,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC3C,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IAEF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB;IACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,iBAAiB,OAAO,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC;IACvD,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC;AACtB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAEzC,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACpF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,SAAoC,CAAC;AAC9C,CAAC"}
@@ -0,0 +1,175 @@
1
+ export declare const COST_DIMENSIONS: readonly ["agent", "project", "provider", "action_class", "workflow"];
2
+ export type CostDimension = (typeof COST_DIMENSIONS)[number];
3
+ export declare const COST_AMOUNT_KEYS: readonly ["monetaryAmountMinor", "requests", "messages", "mutations", "deletes", "tokenCost"];
4
+ export type CostAmountKey = (typeof COST_AMOUNT_KEYS)[number];
5
+ export type CostAmounts = Record<CostAmountKey, number>;
6
+ export type CostAttribution = {
7
+ agentId: string;
8
+ projectId: string;
9
+ provider: string;
10
+ actionClass: string;
11
+ workflowId: string;
12
+ };
13
+ export type CostRecord = {
14
+ schemaVersion: 1;
15
+ kind: "ghostapi.cost-record";
16
+ recordId: string;
17
+ tenantId: string;
18
+ runId: string;
19
+ actionId: string;
20
+ recordedAt: string;
21
+ attribution: CostAttribution;
22
+ amounts: CostAmounts;
23
+ };
24
+ export type CostBudget = {
25
+ id: string;
26
+ scope: {
27
+ dimension: CostDimension;
28
+ value: string;
29
+ };
30
+ windowMs: number;
31
+ limits: Partial<Record<CostAmountKey, number>>;
32
+ alertOnExceed: boolean;
33
+ };
34
+ export type CostAlert = {
35
+ id: string;
36
+ budgetId: string;
37
+ scope: {
38
+ dimension: CostDimension;
39
+ value: string;
40
+ };
41
+ windowMs: number;
42
+ windowStart: string;
43
+ windowEnd: string;
44
+ exceeded: Array<{
45
+ key: CostAmountKey;
46
+ limit: number;
47
+ total: number;
48
+ }>;
49
+ created: string;
50
+ status: "open" | "acknowledged";
51
+ acknowledgedBy?: string;
52
+ acknowledgedAt?: string;
53
+ };
54
+ export type CostForecast = {
55
+ method: "linear-extrapolation";
56
+ approximation: true;
57
+ projectionDays: number;
58
+ sampleDays: number;
59
+ sampleStart: string;
60
+ sampleEnd: string;
61
+ averagePerDay: CostAmounts;
62
+ trendPerDay: CostAmounts;
63
+ nextPeriodEstimate: CostAmounts;
64
+ disclaimer: string;
65
+ };
66
+ export type CostBudgetEvaluation = {
67
+ id: string;
68
+ scope: {
69
+ dimension: CostDimension;
70
+ value: string;
71
+ };
72
+ windowMs: number;
73
+ limits: Partial<Record<CostAmountKey, number>>;
74
+ totals: CostAmounts;
75
+ status: "within" | "exceeded";
76
+ exceeded: Array<{
77
+ key: CostAmountKey;
78
+ limit: number;
79
+ total: number;
80
+ }>;
81
+ };
82
+ export type CostReport = {
83
+ schemaVersion: 1;
84
+ kind: "ghostapi.cost-report";
85
+ tenantId: string;
86
+ generatedAt: string;
87
+ runId: string;
88
+ windowMs: number;
89
+ windowStart: string;
90
+ windowEnd: string;
91
+ source: string;
92
+ totals: CostAmounts;
93
+ attribution: Array<{
94
+ dimension: CostDimension;
95
+ value: string;
96
+ totals: CostAmounts;
97
+ }>;
98
+ budgets: CostBudgetEvaluation[];
99
+ alerts: CostAlert[];
100
+ forecast: CostForecast;
101
+ };
102
+ export type CostStoreState = {
103
+ schemaVersion: 1;
104
+ kind: "ghostapi.costs";
105
+ records: CostRecord[];
106
+ budgets: CostBudget[];
107
+ alerts: CostAlert[];
108
+ };
109
+ export type CostOperatorPermission = "cost.record" | "cost.configure" | "cost.inspect" | "cost.acknowledge";
110
+ export type CostOperator = {
111
+ id: string;
112
+ principalId: string;
113
+ permissions: readonly CostOperatorPermission[];
114
+ tenantId?: string;
115
+ };
116
+ export interface CostOperatorAuthorizer {
117
+ authenticate(identity: unknown): Promise<CostOperator>;
118
+ }
119
+ export type CostControllerOptions = {
120
+ path?: string;
121
+ now?: () => Date;
122
+ operatorAuthorizer?: CostOperatorAuthorizer;
123
+ };
124
+ export type RecordCostInput = {
125
+ tenantId: string;
126
+ runId: string;
127
+ actionId: string;
128
+ attribution: CostAttribution;
129
+ amounts: CostAmounts;
130
+ };
131
+ export declare class CostGovernanceError extends Error {
132
+ constructor(message: string);
133
+ }
134
+ export declare function createLocalCostGovernance(options?: CostControllerOptions): LocalCostGovernance;
135
+ export declare class LocalCostGovernance {
136
+ private readonly path;
137
+ private readonly now;
138
+ private readonly operatorAuthorizer;
139
+ constructor(options?: CostControllerOptions);
140
+ recordCost(input: {
141
+ identity: unknown;
142
+ record: RecordCostInput;
143
+ }): Promise<CostRecord>;
144
+ configureBudget(input: {
145
+ identity: unknown;
146
+ budget: unknown;
147
+ }): Promise<CostBudget>;
148
+ removeBudget(input: {
149
+ identity: unknown;
150
+ budgetId: string;
151
+ }): Promise<void>;
152
+ report(input: {
153
+ identity: unknown;
154
+ windowMs?: number;
155
+ projectionDays?: number;
156
+ runId?: string;
157
+ }): Promise<CostReport>;
158
+ listAlerts(input: {
159
+ identity: unknown;
160
+ }): Promise<CostAlert[]>;
161
+ acknowledgeAlert(input: {
162
+ identity: unknown;
163
+ alertId: string;
164
+ }): Promise<CostAlert>;
165
+ private authorize;
166
+ private timestamp;
167
+ private read;
168
+ private mutate;
169
+ }
170
+ export declare function createDisabledCostOperatorAuthorizer(): CostOperatorAuthorizer;
171
+ export declare function createTestCostOperatorAuthorizer(): {
172
+ authorizer: CostOperatorAuthorizer;
173
+ issue(input: CostOperator): CostOperator;
174
+ };
175
+ export declare function formatCostReport(report: CostReport): string;