npm - @zanii/gateway - Versions diffs - 0.1.2 → 0.1.3 - Mend

@zanii/gateway 0.1.2 → 0.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (12) hide show

package/README.md CHANGED Viewed

@@ -38,6 +38,7 @@ API key from `ZANII_API_KEY`.
 ## Changelog
+- **0.1.3** — `createAdvancedHandler` with opt-in controls: salted request / response body commitments, an egress path allow-list, PII type detection (`detectPiiTypes`; values never recorded), per-call cost, a response-integrity hash, per-route rate limits and idempotency-key replay protection. Refused calls never reach the upstream and are still receipted.
 - **0.1.2** — now on `@zanii/sdk` 0.5: request receipts commit their payload as RFC 8785 bytes, so they verify from Python and TypeScript alike, and carry the ledger-outage and chain fixes. No API change.
 - **0.1.0** — initial release: `createZaniiHandler` (fetch), `createZaniiGateway` (Node), `zanii-gateway` CLI.

package/dist/advanced.d.ts ADDED Viewed

@@ -0,0 +1,36 @@
+import type { GatewayOptions } from './index.js';
+export interface AdvancedOptions extends GatewayOptions {
+    /** Commit request and/or response bodies with a fresh salt. `onNonce` receives each salt to keep. */
+    bodyCommitment?: {
+        request?: boolean;
+        response?: boolean;
+        onNonce?: (target: string, kind: 'request' | 'response', nonce: string) => void;
+    };
+    /** Only these path prefixes may be forwarded. */
+    allowPaths?: string[];
+    /** Flag personal data in request bodies (types only are recorded, never the values). */
+    detectPii?: boolean;
+    /** Price a call (integer micro-units). */
+    cost?: (call: {
+        method: string;
+        path: string;
+        status: number;
+    }) => {
+        cost_micro: number;
+        currency: string;
+    } | undefined;
+    /** Hash the response body into the receipt (proves what the upstream returned). */
+    responseHash?: boolean;
+    /** Calls per window per path prefix. */
+    rateLimits?: Record<string, {
+        max: number;
+        windowMs: number;
+    }>;
+    /** Refuse a repeated `idempotency-key` within the window (stops double payments). */
+    replayWindowMs?: number;
+    now?: () => number;
+}
+/** Which kinds of personal data appear in a text (the values are never returned). */
+export declare function detectPiiTypes(text: string): string[];
+export declare function createAdvancedHandler(opts: AdvancedOptions): (request: Request) => Promise<Response>;
+//# sourceMappingURL=advanced.d.ts.map

package/dist/advanced.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"advanced.d.ts","sourceRoot":"","sources":["../src/advanced.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAa,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5D,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACrD,qGAAqG;IACrG,cAAc,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,UAAU,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,CAAC;IAC5I,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,wFAAwF;IACxF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,0CAA0C;IAC1C,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACxH,mFAAmF;IACnF,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,wCAAwC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/D,qFAAqF;IACrF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAqBD,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAKrD;AASD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,eAAe,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAqEpG"}

package/dist/advanced.js ADDED Viewed

@@ -0,0 +1,111 @@
+/**
+ * A gateway with more controls, all opt-in: salted body commitments, an egress allow-list,
+ * PII detection, per-call cost, a response-integrity hash, rate limits per route, and
+ * replay protection on idempotency keys. Refused calls never reach the upstream and are
+ * still receipted. `createZaniiHandler` itself is unchanged.
+ */
+import { createHash, randomBytes } from 'node:crypto';
+const PII = [
+    ['email', /[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/i],
+    ['phone', /(?:\+|00)\d[\d\s-]{7,14}\d/],
+    ['emirates-id', /\b784-?\d{4}-?\d{7}-?\d\b/],
+    ['iban', /\b[A-Z]{2}\d{2}[A-Z0-9]{11,30}\b/],
+];
+function luhn(digits) {
+    let sum = 0;
+    for (let i = 0; i < digits.length; i++) {
+        let d = Number(digits[digits.length - 1 - i]);
+        if (i % 2)
+            d = d * 2 > 9 ? d * 2 - 9 : d * 2;
+        sum += d;
+    }
+    return sum % 10 === 0;
+}
+/** Which kinds of personal data appear in a text (the values are never returned). */
+export function detectPiiTypes(text) {
+    const found = PII.filter(([, re]) => re.test(text)).map(([t]) => t);
+    const cards = text.match(/\b(?:\d[ -]?){13,19}\b/g) ?? [];
+    if (cards.some((c) => luhn(c.replace(/\D/g, ''))))
+        found.push('payment-card');
+    return found;
+}
+const sha = (b) => 'sha256:' + createHash('sha256').update(b).digest('hex');
+function targetFor(prefix, method, pathname) {
+    const path = pathname.replace(/[^a-z0-9]+/gi, '.').replace(/^\.|\.$/g, '') || 'root';
+    return `${prefix}.${method.toLowerCase()}.${path}`;
+}
+export function createAdvancedHandler(opts) {
+    const upstream = opts.upstream.replace(/\/$/, '');
+    const prefix = opts.prefix ?? 'http';
+    const fetchImpl = opts.fetchImpl ?? ((u, i) => fetch(u, i));
+    const now = opts.now ?? Date.now;
+    const calls = new Map();
+    const seenKeys = new Map();
+    const agent = opts.agent;
+    const refuse = async (target, base, status, reason) => {
+        await agent.record({ target, payload: { ...base, refused: reason } });
+        return new Response(JSON.stringify({ error: reason }), { status, headers: { 'content-type': 'application/json' } });
+    };
+    return async (request) => {
+        const url = new URL(request.url);
+        const method = request.method.toUpperCase();
+        const target = targetFor(prefix, method, url.pathname);
+        const base = { method, path: url.pathname };
+        const body = method === 'GET' || method === 'HEAD' ? undefined : await request.text();
+        if (opts.allowPaths && !opts.allowPaths.some((p) => url.pathname === p || url.pathname.startsWith(p.endsWith('/') ? p : p + '/'))) {
+            return refuse(target, base, 403, `path ${url.pathname} is not on the egress allow-list`);
+        }
+        for (const [p, l] of Object.entries(opts.rateLimits ?? {})) {
+            if (!url.pathname.startsWith(p))
+                continue;
+            const t = now();
+            const recent = (calls.get(p) ?? []).filter((x) => t - x < l.windowMs);
+            if (recent.length >= l.max)
+                return refuse(target, base, 429, `rate limit for ${p}: ${l.max} per ${l.windowMs} ms`);
+            recent.push(t);
+            calls.set(p, recent);
+        }
+        const key = request.headers.get('idempotency-key');
+        if (opts.replayWindowMs !== undefined && key) {
+            const prev = seenKeys.get(key);
+            if (prev !== undefined && now() - prev < opts.replayWindowMs)
+                return refuse(target, { ...base, idempotency_key: sha(key) }, 409, 'repeated idempotency key: possible replay');
+            seenKeys.set(key, now());
+        }
+        if (body !== undefined && opts.bodyCommitment?.request) {
+            const nonce = randomBytes(16).toString('hex');
+            base.request_body = sha(nonce + body);
+            opts.bodyCommitment.onNonce?.(target, 'request', nonce);
+        }
+        if (body !== undefined && opts.detectPii) {
+            const types = detectPiiTypes(body);
+            if (types.length)
+                base.pii = types;
+        }
+        const headers = {};
+        request.headers.forEach((v, k) => { if (k.toLowerCase() !== 'host')
+            headers[k] = v; });
+        try {
+            const res = await fetchImpl(`${upstream}${url.pathname}${url.search}`, { method, headers, body });
+            const buf = new Uint8Array(await res.arrayBuffer());
+            const payload = { ...base, status: res.status };
+            if (opts.responseHash)
+                payload.response = sha(buf);
+            if (opts.bodyCommitment?.response) {
+                const nonce = randomBytes(16).toString('hex');
+                payload.response_body = sha(Buffer.concat([Buffer.from(nonce), Buffer.from(buf)]));
+                opts.bodyCommitment.onNonce?.(target, 'response', nonce);
+            }
+            const c = opts.cost?.({ method, path: url.pathname, status: res.status });
+            if (c)
+                Object.assign(payload, c);
+            await agent.record({ target, payload });
+            return new Response(buf, { status: res.status, headers: res.headers });
+        }
+        catch (err) {
+            await agent.record({ target, payload: { ...base, error: String(err) } });
+            throw err;
+        }
+    };
+}
+//# sourceMappingURL=advanced.js.map

package/dist/advanced.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"advanced.js","sourceRoot":"","sources":["../src/advanced.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAwBtD,MAAM,GAAG,GAA4B;IACnC,CAAC,OAAO,EAAE,wCAAwC,CAAC;IACnD,CAAC,OAAO,EAAE,4BAA4B,CAAC;IACvC,CAAC,aAAa,EAAE,2BAA2B,CAAC;IAC5C,CAAC,MAAM,EAAE,kCAAkC,CAAC;CAC7C,CAAC;AAEF,SAAS,IAAI,CAAC,MAAc;IAC1B,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG,CAAC;YAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7C,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC9E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,CAAsB,EAAE,EAAE,CAAC,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEjG,SAAS,SAAS,CAAC,MAAc,EAAE,MAAc,EAAE,QAAgB;IACjE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;IACrF,OAAO,GAAG,MAAM,IAAI,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAqB;IACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC;IACrC,MAAM,SAAS,GAAc,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,KAAK,GAAU,IAAI,CAAC,KAAK,CAAC;IAEhC,MAAM,MAAM,GAAG,KAAK,EAAE,MAAc,EAAE,IAA6B,EAAE,MAAc,EAAE,MAAc,EAAE,EAAE;QACrG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACtE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACtH,CAAC,CAAC;IAEF,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,IAAI,GAA4B,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrE,MAAM,IAAI,GAAG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAEtF,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;YAClI,OAAO,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,GAAG,CAAC,QAAQ,kCAAkC,CAAC,CAAC;QAC3F,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC1C,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;YACtE,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG;gBAAE,OAAO,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC;YACnH,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACvB,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI,GAAG,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,cAAc;gBAAE,OAAO,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,eAAe,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,2CAA2C,CAAC,CAAC;YAC9K,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,CAAC;YACvD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,KAAK,CAAC,MAAM;gBAAE,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC;QACrC,CAAC;QAED,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM;YAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,QAAQ,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAClG,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YACpD,MAAM,OAAO,GAA4B,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;YACzE,IAAI,IAAI,CAAC,YAAY;gBAAE,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YACnD,IAAI,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC9C,OAAO,CAAC,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACnF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC;gBAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACjC,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACxC,OAAO,IAAI,QAAQ,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YACzE,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts CHANGED Viewed

@@ -27,4 +27,5 @@ export declare function createZaniiHandler(opts: GatewayOptions): (request: Requ
  * Node `http` server request listener wrapping the handler — for `http.createServer`.
  */
 export declare function createZaniiGateway(opts: GatewayOptions): (req: import("node:http").IncomingMessage, res: import("node:http").ServerResponse) => Promise<void>;
+export * from './advanced.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEjF,MAAM,WAAW,cAAc;IAC7B,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,UAAU,CAAC;IAClB,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAOD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,cAAc,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAuBhG;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,cAAc,IAEvC,KAAK,OAAO,WAAW,EAAE,eAAe,EAAE,KAAK,OAAO,WAAW,EAAE,cAAc,KAAG,OAAO,CAAC,IAAI,CAAC,CAkBhH"}
1	+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEjF,MAAM,WAAW,cAAc;IAC7B,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,UAAU,CAAC;IAClB,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAOD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,cAAc,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAuBhG;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,cAAc,IAEvC,KAAK,OAAO,WAAW,EAAE,eAAe,EAAE,KAAK,OAAO,WAAW,EAAE,cAAc,KAAG,OAAO,CAAC,IAAI,CAAC,CAkBhH;AACD,cAAc,eAAe,CAAC"}

package/dist/index.js CHANGED Viewed

@@ -57,4 +57,5 @@ export function createZaniiGateway(opts) {
         }
     };
 }
+export * from './advanced.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAsBA,SAAS,SAAS,CAAC,MAAc,EAAE,MAAc,EAAE,QAAgB;IACjE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;IACrF,OAAO,GAAG,MAAM,IAAI,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAoB;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAE5D,OAAO,KAAK,EAAE,OAAgB,EAAqB,EAAE;QACnD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACtF,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM;YAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,QAAQ,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAClG,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACjG,OAAO,IAAI,QAAQ,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YACjG,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAoB;IACrD,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,KAAK,EAAE,GAAwC,EAAE,GAAuC,EAAiB,EAAE;QAChH,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,EAAE;YAC7D,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,GAAG,CAAC,OAAiC;YAC9C,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;SACxD,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACxC,GAAG,CAAC,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC;YACjC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACxD,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,4BAA4B,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
1	+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAsBA,SAAS,SAAS,CAAC,MAAc,EAAE,MAAc,EAAE,QAAgB;IACjE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;IACrF,OAAO,GAAG,MAAM,IAAI,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAoB;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAE5D,OAAO,KAAK,EAAE,OAAgB,EAAqB,EAAE;QACnD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACtF,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM;YAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,QAAQ,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAClG,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACjG,OAAO,IAAI,QAAQ,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YACjG,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAoB;IACrD,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,KAAK,EAAE,GAAwC,EAAE,GAAuC,EAAiB,EAAE;QAChH,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,EAAE;YAC7D,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,GAAG,CAAC,OAAiC;YAC9C,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;SACxD,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACxC,GAAG,CAAC,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC;YACjC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACxD,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,4BAA4B,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AACD,cAAc,eAAe,CAAC"}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@zanii/gateway",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Drop-in proxy that receipts every HTTP API call an agent makes - zero code changes. Edge-compatible (fetch handler) plus a Node server and CLI.",
   "license": "Apache-2.0",
   "homepage": "https://ledger.zanii.agency",
@@ -32,11 +32,11 @@
     "@types/node": "^26.1.0",
     "typescript": "^5.8.2",
     "vitest": "^3.0.9",
-    "@zanii/sdk": "0.5.2",
+    "@zanii/sdk": "0.5.3",
     "@zanii/testing": "0.1.2"
   },
   "dependencies": {
-    "@zanii/sdk": "^0.5.2"
+    "@zanii/sdk": "^0.5.3"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",

package/src/advanced.ts ADDED Viewed

@@ -0,0 +1,132 @@
+/**
+ * A gateway with more controls, all opt-in: salted body commitments, an egress allow-list,
+ * PII detection, per-call cost, a response-integrity hash, rate limits per route, and
+ * replay protection on idempotency keys. Refused calls never reach the upstream and are
+ * still receipted. `createZaniiHandler` itself is unchanged.
+ */
+import { createHash, randomBytes } from 'node:crypto';
+import type { ZaniiAgent } from '@zanii/sdk';
+import type { FetchLike, GatewayOptions } from './index.js';
+export interface AdvancedOptions extends GatewayOptions {
+  /** Commit request and/or response bodies with a fresh salt. `onNonce` receives each salt to keep. */
+  bodyCommitment?: { request?: boolean; response?: boolean; onNonce?: (target: string, kind: 'request' | 'response', nonce: string) => void };
+  /** Only these path prefixes may be forwarded. */
+  allowPaths?: string[];
+  /** Flag personal data in request bodies (types only are recorded, never the values). */
+  detectPii?: boolean;
+  /** Price a call (integer micro-units). */
+  cost?: (call: { method: string; path: string; status: number }) => { cost_micro: number; currency: string } | undefined;
+  /** Hash the response body into the receipt (proves what the upstream returned). */
+  responseHash?: boolean;
+  /** Calls per window per path prefix. */
+  rateLimits?: Record<string, { max: number; windowMs: number }>;
+  /** Refuse a repeated `idempotency-key` within the window (stops double payments). */
+  replayWindowMs?: number;
+  now?: () => number;
+}
+type Agent = Pick<ZaniiAgent, 'record'>;
+const PII: Array<[string, RegExp]> = [
+  ['email', /[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/i],
+  ['phone', /(?:\+|00)\d[\d\s-]{7,14}\d/],
+  ['emirates-id', /\b784-?\d{4}-?\d{7}-?\d\b/],
+  ['iban', /\b[A-Z]{2}\d{2}[A-Z0-9]{11,30}\b/],
+];
+function luhn(digits: string): boolean {
+  let sum = 0;
+  for (let i = 0; i < digits.length; i++) {
+    let d = Number(digits[digits.length - 1 - i]);
+    if (i % 2) d = d * 2 > 9 ? d * 2 - 9 : d * 2;
+    sum += d;
+  }
+  return sum % 10 === 0;
+}
+/** Which kinds of personal data appear in a text (the values are never returned). */
+export function detectPiiTypes(text: string): string[] {
+  const found = PII.filter(([, re]) => re.test(text)).map(([t]) => t);
+  const cards = text.match(/\b(?:\d[ -]?){13,19}\b/g) ?? [];
+  if (cards.some((c) => luhn(c.replace(/\D/g, '')))) found.push('payment-card');
+  return found;
+}
+const sha = (b: string | Uint8Array) => 'sha256:' + createHash('sha256').update(b).digest('hex');
+function targetFor(prefix: string, method: string, pathname: string): string {
+  const path = pathname.replace(/[^a-z0-9]+/gi, '.').replace(/^\.|\.$/g, '') || 'root';
+  return `${prefix}.${method.toLowerCase()}.${path}`;
+}
+export function createAdvancedHandler(opts: AdvancedOptions): (request: Request) => Promise<Response> {
+  const upstream = opts.upstream.replace(/\/$/, '');
+  const prefix = opts.prefix ?? 'http';
+  const fetchImpl: FetchLike = opts.fetchImpl ?? ((u, i) => fetch(u, i));
+  const now = opts.now ?? Date.now;
+  const calls = new Map<string, number[]>();
+  const seenKeys = new Map<string, number>();
+  const agent: Agent = opts.agent;
+  const refuse = async (target: string, base: Record<string, unknown>, status: number, reason: string) => {
+    await agent.record({ target, payload: { ...base, refused: reason } });
+    return new Response(JSON.stringify({ error: reason }), { status, headers: { 'content-type': 'application/json' } });
+  };
+  return async (request) => {
+    const url = new URL(request.url);
+    const method = request.method.toUpperCase();
+    const target = targetFor(prefix, method, url.pathname);
+    const base: Record<string, unknown> = { method, path: url.pathname };
+    const body = method === 'GET' || method === 'HEAD' ? undefined : await request.text();
+    if (opts.allowPaths && !opts.allowPaths.some((p) => url.pathname === p || url.pathname.startsWith(p.endsWith('/') ? p : p + '/'))) {
+      return refuse(target, base, 403, `path ${url.pathname} is not on the egress allow-list`);
+    }
+    for (const [p, l] of Object.entries(opts.rateLimits ?? {})) {
+      if (!url.pathname.startsWith(p)) continue;
+      const t = now();
+      const recent = (calls.get(p) ?? []).filter((x) => t - x < l.windowMs);
+      if (recent.length >= l.max) return refuse(target, base, 429, `rate limit for ${p}: ${l.max} per ${l.windowMs} ms`);
+      recent.push(t);
+      calls.set(p, recent);
+    }
+    const key = request.headers.get('idempotency-key');
+    if (opts.replayWindowMs !== undefined && key) {
+      const prev = seenKeys.get(key);
+      if (prev !== undefined && now() - prev < opts.replayWindowMs) return refuse(target, { ...base, idempotency_key: sha(key) }, 409, 'repeated idempotency key: possible replay');
+      seenKeys.set(key, now());
+    }
+    if (body !== undefined && opts.bodyCommitment?.request) {
+      const nonce = randomBytes(16).toString('hex');
+      base.request_body = sha(nonce + body);
+      opts.bodyCommitment.onNonce?.(target, 'request', nonce);
+    }
+    if (body !== undefined && opts.detectPii) {
+      const types = detectPiiTypes(body);
+      if (types.length) base.pii = types;
+    }
+    const headers: Record<string, string> = {};
+    request.headers.forEach((v, k) => { if (k.toLowerCase() !== 'host') headers[k] = v; });
+    try {
+      const res = await fetchImpl(`${upstream}${url.pathname}${url.search}`, { method, headers, body });
+      const buf = new Uint8Array(await res.arrayBuffer());
+      const payload: Record<string, unknown> = { ...base, status: res.status };
+      if (opts.responseHash) payload.response = sha(buf);
+      if (opts.bodyCommitment?.response) {
+        const nonce = randomBytes(16).toString('hex');
+        payload.response_body = sha(Buffer.concat([Buffer.from(nonce), Buffer.from(buf)]));
+        opts.bodyCommitment.onNonce?.(target, 'response', nonce);
+      }
+      const c = opts.cost?.({ method, path: url.pathname, status: res.status });
+      if (c) Object.assign(payload, c);
+      await agent.record({ target, payload });
+      return new Response(buf, { status: res.status, headers: res.headers });
+    } catch (err) {
+      await agent.record({ target, payload: { ...base, error: String(err) } });
+      throw err;
+    }
+  };
+}

package/src/index.ts CHANGED Viewed

@@ -79,3 +79,4 @@ export function createZaniiGateway(opts: GatewayOptions) {
     }
   };
 }
+export * from './advanced.js';