@zanii/gateway 0.1.0

package/LICENSE

@@ -0,0 +1,159 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or Derivative
+          Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or agreed
+      to in writing, Licensor provides the Work (and each Contributor
+      provides its Contributions) on an "AS IS" BASIS, WITHOUT WARRANTIES
+      OR CONDITIONS OF ANY KIND, either express or implied, including,
+      without limitation, any warranties or conditions of TITLE,
+      NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2026 Zanii
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,45 @@
+# @zanii/gateway
+
+A transparent HTTP proxy that records a signed Zanii receipt for **every API call
+an agent makes** — no changes to the agent's code. Point its HTTP client at the
+gateway; the gateway forwards to the real upstream and receipts each call as
+`http.<method>.<path>`.
+
+```sh
+npm install @zanii/gateway @zanii/sdk
+```
+
+## As a `fetch` handler (edge / serverless)
+
+```ts
+import { createZaniiHandler } from '@zanii/gateway';
+import { ZaniiAgent } from '@zanii/sdk';
+
+const agent = new ZaniiAgent({ /* did, key, delegation … */ });
+const handler = createZaniiHandler({ upstream: 'https://api.stripe.com', agent });
+
+// Cloudflare Workers / Vercel edge:
+export default { fetch: handler };
+```
+
+Each forwarded request is recorded before the response is returned. Works in any
+`fetch`-based runtime (Node 18+, Workers, Vercel edge).
+
+## As a CLI
+
+```sh
+zanii-gateway --upstream https://api.stripe.com --port 4800 --identity identity.json
+# now point the agent at http://localhost:4800 instead of api.stripe.com
+```
+
+`identity.json` is `{ "agent": { "did": "…", "privateKey": "<hex>" }, "delegation": [ … ] }`.
+Server URL comes from `ZANII_SERVER` (default `https://ledger.zanii.agency`),
+API key from `ZANII_API_KEY`.
+
+## Changelog
+
+- **0.1.0** — initial release: `createZaniiHandler` (fetch), `createZaniiGateway` (Node), `zanii-gateway` CLI.
+
+## License
+
+Apache-2.0.

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+import { readFileSync } from 'node:fs';
+import { createServer } from 'node:http';
+import { ZaniiAgent } from '@zanii/sdk';
+import { createZaniiGateway } from './index.js';
+const arg = (n) => {
+    const i = process.argv.indexOf(`--${n}`);
+    return i >= 0 ? process.argv[i + 1] : undefined;
+};
+const upstream = arg('upstream');
+if (!upstream) {
+    console.error('usage: zanii-gateway --upstream <url> [--port 4800] [--identity identity.json] [--prefix http]');
+    process.exit(2);
+}
+const port = Number(arg('port') ?? '4800');
+const identity = JSON.parse(readFileSync(arg('identity') ?? './identity.json', 'utf8'));
+const agent = new ZaniiAgent({
+    serverUrl: process.env.ZANII_SERVER ?? 'https://ledger.zanii.agency',
+    agentDid: identity.agent.did,
+    agentPrivateKey: Uint8Array.from(Buffer.from(identity.agent.privateKey, 'hex')),
+    delegation: identity.delegation,
+    apiKey: process.env.ZANII_API_KEY,
+});
+const gw = createZaniiGateway({ upstream, agent, prefix: arg('prefix') });
+createServer(gw).listen(port, () => console.error(`zanii-gateway: ${upstream} → :${port} (receipting for ${String(identity.agent.did).slice(0, 24)}…)`));
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAsB,EAAE;IAC5C,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;AACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;IACd,OAAO,CAAC,KAAK,CAAC,gGAAgG,CAAC,CAAC;IAChH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC;AAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;AACxF,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,6BAA6B;IACpE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG;IAC5B,eAAe,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC/E,UAAU,EAAE,QAAQ,CAAC,UAAU;IAC/B,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa;CAClC,CAAC,CAAC;AACH,MAAM,EAAE,GAAG,kBAAkB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC1E,YAAY,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,CACjC,OAAO,CAAC,KAAK,CAAC,kBAAkB,QAAQ,OAAO,IAAI,oBAAoB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CACpH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,30 @@
+/**
+ * @zanii/gateway — receipt every HTTP API call an agent makes, with zero code
+ * changes. Point the agent's HTTP client at the gateway; it forwards to the real
+ * upstream and records a signed receipt (`<prefix>.<method>.<path>`) for each call.
+ *
+ * The core is a `fetch`-style handler (edge/serverless-compatible). A Node
+ * `http` server wrapper + the `zanii-gateway` CLI build on it.
+ */
+import type { ZaniiAgent } from '@zanii/sdk';
+export type FetchLike = (input: string, init?: RequestInit) => Promise<Response>;
+export interface GatewayOptions {
+    /** The real upstream base URL requests are forwarded to. */
+    upstream: string;
+    agent: ZaniiAgent;
+    /** Receipt target prefix (default `http`). */
+    prefix?: string;
+    /** Forwarding fetch (default global fetch). */
+    fetchImpl?: FetchLike;
+}
+/**
+ * Returns a `(request: Request) => Promise<Response>` handler. Works in any
+ * fetch-based runtime (Node 18+, Vercel/Cloudflare edge). Each forwarded call is
+ * recorded — status + method + path on success, error on failure.
+ */
+export declare function createZaniiHandler(opts: GatewayOptions): (request: Request) => Promise<Response>;
+/**
+ * Node `http` server request listener wrapping the handler — for `http.createServer`.
+ */
+export declare function createZaniiGateway(opts: GatewayOptions): (req: import("node:http").IncomingMessage, res: import("node:http").ServerResponse) => Promise<void>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEjF,MAAM,WAAW,cAAc;IAC7B,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,UAAU,CAAC;IAClB,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAOD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,cAAc,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAuBhG;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,cAAc,IAEvC,KAAK,OAAO,WAAW,EAAE,eAAe,EAAE,KAAK,OAAO,WAAW,EAAE,cAAc,KAAG,OAAO,CAAC,IAAI,CAAC,CAkBhH"}

package/dist/index.js

@@ -0,0 +1,60 @@
+function targetFor(prefix, method, pathname) {
+    const path = pathname.replace(/[^a-z0-9]+/gi, '.').replace(/^\.|\.$/g, '') || 'root';
+    return `${prefix}.${method.toLowerCase()}.${path}`;
+}
+/**
+ * Returns a `(request: Request) => Promise<Response>` handler. Works in any
+ * fetch-based runtime (Node 18+, Vercel/Cloudflare edge). Each forwarded call is
+ * recorded — status + method + path on success, error on failure.
+ */
+export function createZaniiHandler(opts) {
+    const upstream = opts.upstream.replace(/\/$/, '');
+    const prefix = opts.prefix ?? 'http';
+    const fetchImpl = opts.fetchImpl ?? ((u, i) => fetch(u, i));
+    return async (request) => {
+        const url = new URL(request.url);
+        const target = targetFor(prefix, request.method, url.pathname);
+        const method = request.method.toUpperCase();
+        const body = method === 'GET' || method === 'HEAD' ? undefined : await request.text();
+        const headers = {};
+        request.headers.forEach((v, k) => { if (k.toLowerCase() !== 'host')
+            headers[k] = v; });
+        try {
+            const res = await fetchImpl(`${upstream}${url.pathname}${url.search}`, { method, headers, body });
+            const buf = await res.arrayBuffer();
+            await opts.agent.record({ target, payload: { method, path: url.pathname, status: res.status } });
+            return new Response(buf, { status: res.status, headers: res.headers });
+        }
+        catch (err) {
+            await opts.agent.record({ target, payload: { method, path: url.pathname, error: String(err) } });
+            throw err;
+        }
+    };
+}
+/**
+ * Node `http` server request listener wrapping the handler — for `http.createServer`.
+ */
+export function createZaniiGateway(opts) {
+    const handler = createZaniiHandler(opts);
+    return async (req, res) => {
+        const chunks = [];
+        for await (const c of req)
+            chunks.push(c);
+        const request = new Request(`http://gateway${req.url ?? '/'}`, {
+            method: req.method,
+            headers: req.headers,
+            body: chunks.length ? Buffer.concat(chunks) : undefined,
+        });
+        try {
+            const response = await handler(request);
+            res.statusCode = response.status;
+            response.headers.forEach((v, k) => res.setHeader(k, v));
+            res.end(Buffer.from(await response.arrayBuffer()));
+        }
+        catch (err) {
+            res.statusCode = 502;
+            res.end(JSON.stringify({ error: `gateway upstream failed: ${String(err)}` }));
+        }
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAsBA,SAAS,SAAS,CAAC,MAAc,EAAE,MAAc,EAAE,QAAgB;IACjE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;IACrF,OAAO,GAAG,MAAM,IAAI,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAoB;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAE5D,OAAO,KAAK,EAAE,OAAgB,EAAqB,EAAE;QACnD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACtF,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM;YAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,QAAQ,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAClG,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACjG,OAAO,IAAI,QAAQ,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YACjG,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAoB;IACrD,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,KAAK,EAAE,GAAwC,EAAE,GAAuC,EAAiB,EAAE;QAChH,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,EAAE;YAC7D,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,GAAG,CAAC,OAAiC;YAC9C,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;SACxD,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACxC,GAAG,CAAC,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC;YACjC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACxD,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,4BAA4B,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@zanii/gateway",
+  "version": "0.1.0",
+  "description": "Drop-in proxy that receipts every HTTP API call an agent makes - zero code changes. Edge-compatible (fetch handler) plus a Node server and CLI.",
+  "license": "Apache-2.0",
+  "homepage": "https://ledger.zanii.agency",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "bin": {
+    "zanii-gateway": "./dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "src",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "devDependencies": {
+    "@types/node": "^26.1.0",
+    "typescript": "^5.8.2",
+    "vitest": "^3.0.9",
+    "@zanii/sdk": "0.2.1",
+    "@zanii/testing": "0.1.0"
+  },
+  "dependencies": {
+    "@zanii/sdk": "0.2.1"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit"
+  }
+}

package/src/cli.ts

@@ -0,0 +1,29 @@
+#!/usr/bin/env node
+import { readFileSync } from 'node:fs';
+import { createServer } from 'node:http';
+import { ZaniiAgent } from '@zanii/sdk';
+import { createZaniiGateway } from './index.js';
+
+const arg = (n: string): string | undefined => {
+  const i = process.argv.indexOf(`--${n}`);
+  return i >= 0 ? process.argv[i + 1] : undefined;
+};
+
+const upstream = arg('upstream');
+if (!upstream) {
+  console.error('usage: zanii-gateway --upstream <url> [--port 4800] [--identity identity.json] [--prefix http]');
+  process.exit(2);
+}
+const port = Number(arg('port') ?? '4800');
+const identity = JSON.parse(readFileSync(arg('identity') ?? './identity.json', 'utf8'));
+const agent = new ZaniiAgent({
+  serverUrl: process.env.ZANII_SERVER ?? 'https://ledger.zanii.agency',
+  agentDid: identity.agent.did,
+  agentPrivateKey: Uint8Array.from(Buffer.from(identity.agent.privateKey, 'hex')),
+  delegation: identity.delegation,
+  apiKey: process.env.ZANII_API_KEY,
+});
+const gw = createZaniiGateway({ upstream, agent, prefix: arg('prefix') });
+createServer(gw).listen(port, () =>
+  console.error(`zanii-gateway: ${upstream} → :${port} (receipting for ${String(identity.agent.did).slice(0, 24)}…)`),
+);

package/src/index.ts

@@ -0,0 +1,81 @@
+/**
+ * @zanii/gateway — receipt every HTTP API call an agent makes, with zero code
+ * changes. Point the agent's HTTP client at the gateway; it forwards to the real
+ * upstream and records a signed receipt (`<prefix>.<method>.<path>`) for each call.
+ *
+ * The core is a `fetch`-style handler (edge/serverless-compatible). A Node
+ * `http` server wrapper + the `zanii-gateway` CLI build on it.
+ */
+import type { ZaniiAgent } from '@zanii/sdk';
+
+export type FetchLike = (input: string, init?: RequestInit) => Promise<Response>;
+
+export interface GatewayOptions {
+  /** The real upstream base URL requests are forwarded to. */
+  upstream: string;
+  agent: ZaniiAgent;
+  /** Receipt target prefix (default `http`). */
+  prefix?: string;
+  /** Forwarding fetch (default global fetch). */
+  fetchImpl?: FetchLike;
+}
+
+function targetFor(prefix: string, method: string, pathname: string): string {
+  const path = pathname.replace(/[^a-z0-9]+/gi, '.').replace(/^\.|\.$/g, '') || 'root';
+  return `${prefix}.${method.toLowerCase()}.${path}`;
+}
+
+/**
+ * Returns a `(request: Request) => Promise<Response>` handler. Works in any
+ * fetch-based runtime (Node 18+, Vercel/Cloudflare edge). Each forwarded call is
+ * recorded — status + method + path on success, error on failure.
+ */
+export function createZaniiHandler(opts: GatewayOptions): (request: Request) => Promise<Response> {
+  const upstream = opts.upstream.replace(/\/$/, '');
+  const prefix = opts.prefix ?? 'http';
+  const fetchImpl = opts.fetchImpl ?? ((u, i) => fetch(u, i));
+
+  return async (request: Request): Promise<Response> => {
+    const url = new URL(request.url);
+    const target = targetFor(prefix, request.method, url.pathname);
+    const method = request.method.toUpperCase();
+    const body = method === 'GET' || method === 'HEAD' ? undefined : await request.text();
+    const headers: Record<string, string> = {};
+    request.headers.forEach((v, k) => { if (k.toLowerCase() !== 'host') headers[k] = v; });
+
+    try {
+      const res = await fetchImpl(`${upstream}${url.pathname}${url.search}`, { method, headers, body });
+      const buf = await res.arrayBuffer();
+      await opts.agent.record({ target, payload: { method, path: url.pathname, status: res.status } });
+      return new Response(buf, { status: res.status, headers: res.headers });
+    } catch (err) {
+      await opts.agent.record({ target, payload: { method, path: url.pathname, error: String(err) } });
+      throw err;
+    }
+  };
+}
+
+/**
+ * Node `http` server request listener wrapping the handler — for `http.createServer`.
+ */
+export function createZaniiGateway(opts: GatewayOptions) {
+  const handler = createZaniiHandler(opts);
+  return async (req: import('node:http').IncomingMessage, res: import('node:http').ServerResponse): Promise<void> => {
+    const chunks: Buffer[] = [];
+    for await (const c of req) chunks.push(c as Buffer);
+    const request = new Request(`http://gateway${req.url ?? '/'}`, {
+      method: req.method,
+      headers: req.headers as Record<string, string>,
+      body: chunks.length ? Buffer.concat(chunks) : undefined,
+    });
+    try {
+      const response = await handler(request);
+      res.statusCode = response.status;
+      response.headers.forEach((v, k) => res.setHeader(k, v));
+      res.end(Buffer.from(await response.arrayBuffer()));
+    } catch (err) {
+      res.statusCode = 502;
+      res.end(JSON.stringify({ error: `gateway upstream failed: ${String(err)}` }));
+    }
+  };
+}