manifest 7.2.1 → 7.4.0

package/CONTRACT.md

@@ -63,7 +63,7 @@ Reports are best effort, bounded, and observable through Node warnings with code
 
 ## Tracked requests
 
-Every call the SDK sees and does not send to `POST /v1/heal`, whatever its status (2xx, 3xx, 401, 402, 403, 429, 5xx, and a 4xx that is not sent for healing: after a redirect, while the project is disabled, or while all eight heal slots are busy), is recorded and sent in batches to `POST /v1/requests`:
+Every call the SDK sees and does not send to `POST /v1/heal`, whatever its status (2xx, 3xx, 401, 402, 403, 429, 5xx, and a 4xx that is not sent for healing: after a redirect, while the project is disabled, or while all eight heal slots are busy), is recorded and sent in batches to `POST /v1/requests`. So is every call made through the `undici` package directly or through a `fetch` reference saved before `manifest()` ran: the SDK observes those on undici's diagnostics channels, so they are tracked, never healed. The SDK's own calls to Manifest are never tracked.
 
 ```json
 {"requests":[{"traceId":"a-uuid","method":"POST","url":"https://example.com/orders","statusCode":200,"responseTimeMs":84,"occurredAt":"2026-09-23T10:14:07.512Z"}]}

package/README.md

@@ -65,7 +65,7 @@ The prompt adds the one-line install to your entry file and stops to let you pas
 
    TypeScript, ESM and CommonJS. Zero dependencies.
 
-4. Set your key in the environment of your app:
+4. Set your key in the environment of your app, or in the project's `.env`:
 
    ```sh
    export MNFST_KEY='your-project-key'
@@ -77,7 +77,7 @@ The prompt adds the one-line install to your entry file and stops to let you pas
    npx manifest doctor
    ```
 
-   It resolves the installed SDK version, masks and validates the key, checks that Manifest loads before your app, and prints the runtime coverage.
+   It reads the key from the shell, then from the project's `.env.local` or `.env`. It resolves the installed SDK version, masks and validates the key, checks that Manifest loads before your app, and prints the runtime coverage.
 
 Some clients keep the `fetch` they saw when they were built, and a client built at import time runs before your call. Where that happens, or where the start command is not yours to change, preload the SDK instead:
 
@@ -133,6 +133,23 @@ console.log(res.status);
 
 The failed request appears in your [Manifest dashboard](https://dashboard.manifest.build), grouped with others like it in an issue. Once Manifest has a patch for that error, the next request that fails the same way is repaired and retried: `onHeal` reports `patched` or `unverified` with the retry's status code, and your app receives the answer to the retry.
 
+## Choosing which calls reach Manifest
+
+Keep calls out of Manifest entirely: they are neither repaired nor tracked, and nothing about them leaves your app. Each entry is a domain or a domain with a path:
+
+```sh
+MNFST_ALLOWLIST=stripe.com                       # only Stripe
+MNFST_ALLOWLIST=stripe.com/v1/payment_intents    # only this Stripe endpoint
+MNFST_DENYLIST=stripe.com/v1/charges,internal.example.com   # never these
+```
+
+- A domain covers its subdomains, with or without a path: `stripe.com` and `stripe.com/v1/charges` both match `api.stripe.com`.
+- A path matches whole segments: `/v1/charges` covers `/v1/charges/ch_123`, not `/v1/charges_export`. Paths are case-sensitive.
+- A scheme, port, query or fragment in an entry is ignored. `*` in a path is not supported yet: the entry is skipped with a warning, and an allowlist made only of skipped entries lets nothing through.
+- The denylist wins over the allowlist. With no allowlist, every call is eligible.
+
+Or in code: `manifest({ denylist: ['stripe.com/v1/charges'] })`. An option overrides its environment variable. When Manifest starts from a preload (`node -r manifest/register`), set the environment variables: a later `manifest()` call cannot change the configuration.
+
 ## More
 
 [Documentation](https://docs.manifest.build) · [Configuration, limits & development](docs/guide.md) · [API contract](CONTRACT.md) · [Python SDK](https://github.com/mnfst/manifest-python) · [PHP SDK](https://github.com/mnfst/manifest-php) · [Website](https://manifest.build)

package/dist/bin.cjs

@@ -25,15 +25,51 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 
 // src/cli.ts
 var import_node_module = require("module");
-var import_node_fs = require("fs");
+var import_node_fs2 = require("fs");
 var import_promises = require("fs/promises");
-var import_node_path = __toESM(require("path"), 1);
+var import_node_path2 = __toESM(require("path"), 1);
 
 // src/wire.ts
-var isObject = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var isObject = (value2) => value2 !== null && typeof value2 === "object" && !Array.isArray(value2);
 
 // src/api.ts
-var VERSION = "7.2.1";
+var VERSION = "7.4.0";
+
+// src/dotenv.ts
+var import_node_fs = require("fs");
+var import_node_path = __toESM(require("path"), 1);
+var FILES = [".env.local", ".env"];
+var LINE = /^\s*(?:export\s+)?(MNFST_KEY|MNFST_URL)\s*=(.*)$/;
+function value(raw) {
+  const trimmed = raw.trim();
+  const quote = trimmed[0];
+  if (quote === '"' || quote === "'") {
+    const end = trimmed.indexOf(quote, 1);
+    return end === -1 ? trimmed.slice(1) : trimmed.slice(1, end);
+  }
+  const hash = trimmed.indexOf(" #");
+  return (hash === -1 ? trimmed : trimmed.slice(0, hash)).trim();
+}
+function readDotEnv(cwd) {
+  const found = {};
+  for (const file of FILES) {
+    let contents;
+    try {
+      contents = (0, import_node_fs.readFileSync)(import_node_path.default.join(cwd, file), "utf8");
+    } catch {
+      continue;
+    }
+    for (const line of contents.split(/\r?\n/)) {
+      const match = LINE.exec(line);
+      if (!match) continue;
+      const name = match[1];
+      if (found[name] !== void 0) continue;
+      const parsed = value(match[2] ?? "");
+      if (parsed) found[name] = parsed;
+    }
+  }
+  return found;
+}
 
 // src/cli.ts
 var DEFAULT_URL = "https://api.manifest.build";
@@ -139,17 +175,17 @@ async function probe(url, key, doFetch) {
 }
 function installedVersion(cwd) {
   try {
-    const entry = (0, import_node_module.createRequire)(import_node_path.default.join(cwd, "package.json")).resolve(
+    const entry = (0, import_node_module.createRequire)(import_node_path2.default.join(cwd, "package.json")).resolve(
       "manifest"
     );
-    let dir = import_node_path.default.dirname(entry);
+    let dir = import_node_path2.default.dirname(entry);
     while (true) {
-      const manifest = import_node_path.default.join(dir, "package.json");
-      if ((0, import_node_fs.existsSync)(manifest)) {
-        const pkg = JSON.parse((0, import_node_fs.readFileSync)(manifest, "utf8"));
+      const manifest = import_node_path2.default.join(dir, "package.json");
+      if ((0, import_node_fs2.existsSync)(manifest)) {
+        const pkg = JSON.parse((0, import_node_fs2.readFileSync)(manifest, "utf8"));
         if (pkg.name === "manifest" && pkg.version) return pkg.version;
       }
-      const parent = import_node_path.default.dirname(dir);
+      const parent = import_node_path2.default.dirname(dir);
       if (parent === dir) return void 0;
       dir = parent;
     }
@@ -158,10 +194,10 @@ function installedVersion(cwd) {
   }
 }
 async function nearestPackage(cwd) {
-  let dir = import_node_path.default.resolve(cwd);
+  let dir = import_node_path2.default.resolve(cwd);
   while (true) {
-    const file = import_node_path.default.join(dir, "package.json");
-    if ((0, import_node_fs.existsSync)(file)) {
+    const file = import_node_path2.default.join(dir, "package.json");
+    if ((0, import_node_fs2.existsSync)(file)) {
       try {
         return {
           dir,
@@ -171,7 +207,7 @@ async function nearestPackage(cwd) {
         return void 0;
       }
     }
-    const parent = import_node_path.default.dirname(dir);
+    const parent = import_node_path2.default.dirname(dir);
     if (parent === dir) return void 0;
     dir = parent;
   }
@@ -195,9 +231,9 @@ async function loadCheck(cwd) {
     };
   const scripts = isObject(found.pkg.scripts) ? found.pkg.scripts : {};
   const values = Object.values(scripts).filter(
-    (value) => typeof value === "string"
+    (value2) => typeof value2 === "string"
   );
-  if (values.some((value) => value.includes("manifest/register")))
+  if (values.some((value2) => value2.includes("manifest/register")))
     return {
       label,
       status: "ok",
@@ -209,8 +245,8 @@ async function loadCheck(cwd) {
   };
   if ("next" in dependencies) {
     for (const relative of instrumentationFiles) {
-      const file = import_node_path.default.join(found.dir, relative);
-      if (!(0, import_node_fs.existsSync)(file)) continue;
+      const file = import_node_path2.default.join(found.dir, relative);
+      if (!(0, import_node_fs2.existsSync)(file)) continue;
       if (/manifest/.test(await (0, import_promises.readFile)(file, "utf8")))
         return {
           label,
@@ -248,19 +284,23 @@ function sdkCheck(cwd, injected) {
     };
   return { label, status: "ok", detail: `manifest ${version}` };
 }
+function nonBlank(value2) {
+  return value2 && value2.trim() !== "" ? value2 : void 0;
+}
 async function runDoctor(options = {}) {
   const cwd = options.cwd ?? process.cwd();
   const env = options.env ?? process.env;
   const doFetch = options.fetch ?? globalThis.fetch;
   const checks = [sdkCheck(cwd, options.sdkVersion)];
-  const rawUrl = options.url ?? env.MNFST_URL ?? DEFAULT_URL;
+  const dotenv = readDotEnv(cwd);
+  const rawUrl = options.url ?? nonBlank(env.MNFST_URL) ?? dotenv.MNFST_URL ?? DEFAULT_URL;
   const url = normalizeBase(rawUrl);
-  const key = env.MNFST_KEY;
+  const key = nonBlank(env.MNFST_KEY) ?? dotenv.MNFST_KEY;
   if (!key) {
     checks.push({
       label: "MNFST_KEY set",
       status: "fail",
-      detail: "MNFST_KEY is not set"
+      detail: "MNFST_KEY is not set in the environment or the project's .env"
     });
   } else {
     checks.push({ label: "MNFST_KEY set", status: "ok", detail: maskKey(key) });
@@ -332,7 +372,7 @@ function render(report) {
   lines.push("");
   lines.push("Runtime coverage");
   lines.push(
-    "  Node.js runtime   fetch, http.request, https.request, http.get are patched"
+    "  Node.js runtime   fetch, http.request, https.request, http.get are patched; undici is tracked"
   );
   lines.push(
     "  Edge runtime      not supported \u2014 middleware.ts and Edge route handlers are never covered"
@@ -347,9 +387,9 @@ function parseArgs(argv) {
     if (arg === "-h" || arg === "--help") args.help = true;
     else if (arg === "-v" || arg === "--version") args.version = true;
     else if (arg === "--url") {
-      const value = argv[++index];
-      if (!value) throw new Error("--url needs a value");
-      args.url = value;
+      const value2 = argv[++index];
+      if (!value2) throw new Error("--url needs a value");
+      args.url = value2;
     } else if (arg.startsWith("--url=")) args.url = arg.slice("--url=".length);
     else if (arg.startsWith("-")) throw new Error(`unknown option: ${arg}`);
     else if (args.command === void 0) args.command = arg;

package/dist/bin.js

@@ -2,13 +2,51 @@
 import {
   VERSION,
   isObject
-} from "./chunk-OXOZQLZ3.js";
+} from "./chunk-TX6KHYCJ.js";
 
 // src/cli.ts
 import { createRequire } from "module";
-import { existsSync, readFileSync } from "fs";
+import { existsSync, readFileSync as readFileSync2 } from "fs";
 import { readFile } from "fs/promises";
+import path2 from "path";
+
+// src/dotenv.ts
+import { readFileSync } from "fs";
 import path from "path";
+var FILES = [".env.local", ".env"];
+var LINE = /^\s*(?:export\s+)?(MNFST_KEY|MNFST_URL)\s*=(.*)$/;
+function value(raw) {
+  const trimmed = raw.trim();
+  const quote = trimmed[0];
+  if (quote === '"' || quote === "'") {
+    const end = trimmed.indexOf(quote, 1);
+    return end === -1 ? trimmed.slice(1) : trimmed.slice(1, end);
+  }
+  const hash = trimmed.indexOf(" #");
+  return (hash === -1 ? trimmed : trimmed.slice(0, hash)).trim();
+}
+function readDotEnv(cwd) {
+  const found = {};
+  for (const file of FILES) {
+    let contents;
+    try {
+      contents = readFileSync(path.join(cwd, file), "utf8");
+    } catch {
+      continue;
+    }
+    for (const line of contents.split(/\r?\n/)) {
+      const match = LINE.exec(line);
+      if (!match) continue;
+      const name = match[1];
+      if (found[name] !== void 0) continue;
+      const parsed = value(match[2] ?? "");
+      if (parsed) found[name] = parsed;
+    }
+  }
+  return found;
+}
+
+// src/cli.ts
 var DEFAULT_URL = "https://api.manifest.build";
 var REQUEST_TIMEOUT_MS = 1e4;
 var symbols = {
@@ -112,17 +150,17 @@ async function probe(url, key, doFetch) {
 }
 function installedVersion(cwd) {
   try {
-    const entry = createRequire(path.join(cwd, "package.json")).resolve(
+    const entry = createRequire(path2.join(cwd, "package.json")).resolve(
       "manifest"
     );
-    let dir = path.dirname(entry);
+    let dir = path2.dirname(entry);
     while (true) {
-      const manifest = path.join(dir, "package.json");
+      const manifest = path2.join(dir, "package.json");
       if (existsSync(manifest)) {
-        const pkg = JSON.parse(readFileSync(manifest, "utf8"));
+        const pkg = JSON.parse(readFileSync2(manifest, "utf8"));
         if (pkg.name === "manifest" && pkg.version) return pkg.version;
       }
-      const parent = path.dirname(dir);
+      const parent = path2.dirname(dir);
       if (parent === dir) return void 0;
       dir = parent;
     }
@@ -131,9 +169,9 @@ function installedVersion(cwd) {
   }
 }
 async function nearestPackage(cwd) {
-  let dir = path.resolve(cwd);
+  let dir = path2.resolve(cwd);
   while (true) {
-    const file = path.join(dir, "package.json");
+    const file = path2.join(dir, "package.json");
     if (existsSync(file)) {
       try {
         return {
@@ -144,7 +182,7 @@ async function nearestPackage(cwd) {
         return void 0;
       }
     }
-    const parent = path.dirname(dir);
+    const parent = path2.dirname(dir);
     if (parent === dir) return void 0;
     dir = parent;
   }
@@ -168,9 +206,9 @@ async function loadCheck(cwd) {
     };
   const scripts = isObject(found.pkg.scripts) ? found.pkg.scripts : {};
   const values = Object.values(scripts).filter(
-    (value) => typeof value === "string"
+    (value2) => typeof value2 === "string"
   );
-  if (values.some((value) => value.includes("manifest/register")))
+  if (values.some((value2) => value2.includes("manifest/register")))
     return {
       label,
       status: "ok",
@@ -182,7 +220,7 @@ async function loadCheck(cwd) {
   };
   if ("next" in dependencies) {
     for (const relative of instrumentationFiles) {
-      const file = path.join(found.dir, relative);
+      const file = path2.join(found.dir, relative);
       if (!existsSync(file)) continue;
       if (/manifest/.test(await readFile(file, "utf8")))
         return {
@@ -221,19 +259,23 @@ function sdkCheck(cwd, injected) {
     };
   return { label, status: "ok", detail: `manifest ${version}` };
 }
+function nonBlank(value2) {
+  return value2 && value2.trim() !== "" ? value2 : void 0;
+}
 async function runDoctor(options = {}) {
   const cwd = options.cwd ?? process.cwd();
   const env = options.env ?? process.env;
   const doFetch = options.fetch ?? globalThis.fetch;
   const checks = [sdkCheck(cwd, options.sdkVersion)];
-  const rawUrl = options.url ?? env.MNFST_URL ?? DEFAULT_URL;
+  const dotenv = readDotEnv(cwd);
+  const rawUrl = options.url ?? nonBlank(env.MNFST_URL) ?? dotenv.MNFST_URL ?? DEFAULT_URL;
   const url = normalizeBase(rawUrl);
-  const key = env.MNFST_KEY;
+  const key = nonBlank(env.MNFST_KEY) ?? dotenv.MNFST_KEY;
   if (!key) {
     checks.push({
       label: "MNFST_KEY set",
       status: "fail",
-      detail: "MNFST_KEY is not set"
+      detail: "MNFST_KEY is not set in the environment or the project's .env"
     });
   } else {
     checks.push({ label: "MNFST_KEY set", status: "ok", detail: maskKey(key) });
@@ -305,7 +347,7 @@ function render(report) {
   lines.push("");
   lines.push("Runtime coverage");
   lines.push(
-    "  Node.js runtime   fetch, http.request, https.request, http.get are patched"
+    "  Node.js runtime   fetch, http.request, https.request, http.get are patched; undici is tracked"
   );
   lines.push(
     "  Edge runtime      not supported \u2014 middleware.ts and Edge route handlers are never covered"
@@ -320,9 +362,9 @@ function parseArgs(argv) {
     if (arg === "-h" || arg === "--help") args.help = true;
     else if (arg === "-v" || arg === "--version") args.version = true;
     else if (arg === "--url") {
-      const value = argv[++index];
-      if (!value) throw new Error("--url needs a value");
-      args.url = value;
+      const value2 = argv[++index];
+      if (!value2) throw new Error("--url needs a value");
+      args.url = value2;
     } else if (arg.startsWith("--url=")) args.url = arg.slice("--url=".length);
     else if (arg.startsWith("-")) throw new Error(`unknown option: ${arg}`);
     else if (args.command === void 0) args.command = arg;

package/dist/{chunk-RO6CIYR2.js → chunk-6RNG7PBO.js}

@@ -15,7 +15,7 @@ import {
   trackedUrl,
   travelingBody,
   warn
-} from "./chunk-OXOZQLZ3.js";
+} from "./chunk-TX6KHYCJ.js";
 
 // src/http.ts
 import http from "http";
@@ -140,6 +140,85 @@ var CallBuffer = class {
   }
 };
 
+// src/undici.ts
+import { AsyncLocalStorage } from "async_hooks";
+import { subscribe, unsubscribe } from "diagnostics_channel";
+var handling = new AsyncLocalStorage();
+var handled = (work) => handling.run(true, work);
+function installUndici(runtime) {
+  const manifestOrigin = new URL(runtime.options.url).origin;
+  const inFlight = /* @__PURE__ */ new WeakMap();
+  const onCreate = (message) => {
+    const { request } = message;
+    if (handling.getStore() || String(request.origin) === manifestOrigin) return;
+    inFlight.set(request, { startedAt: Date.now(), started: performance.now() });
+  };
+  const onHeaders = (message) => {
+    const { request, response } = message;
+    const started = inFlight.get(request);
+    if (!started) return;
+    inFlight.delete(request);
+    let url;
+    try {
+      url = new URL(request.path ?? "/", String(request.origin)).href;
+    } catch {
+      return;
+    }
+    if (runtime.excluded(url)) return;
+    runtime.track(
+      request.method ?? "GET",
+      () => url,
+      response.statusCode,
+      started.startedAt,
+      performance.now() - started.started
+    );
+  };
+  subscribe("undici:request:create", onCreate);
+  subscribe("undici:request:headers", onHeaders);
+  return () => {
+    unsubscribe("undici:request:create", onCreate);
+    unsubscribe("undici:request:headers", onHeaders);
+  };
+}
+
+// src/filter.ts
+var HOST = /^(?:[a-z0-9_-]+(?:\.[a-z0-9_-]+)*|\[[0-9a-f:.]+\])$/;
+function parseRule(entry) {
+  const rest = entry.trim().replace(/^[a-z][a-z0-9+.-]*:\/\//i, "").split(/[?#]/)[0] ?? "";
+  const slash = rest.indexOf("/");
+  const authority = (slash < 0 ? rest : rest.slice(0, slash)).toLowerCase();
+  const path = slash < 0 ? "" : rest.slice(slash).replace(/\/+$/, "");
+  const host = authority.replace(/^\*\./, "").replace(/:\d+$/, "").replace(/^\.+|\.+$/g, "");
+  if (!HOST.test(host) || path.includes("*")) return null;
+  return { host: host.replace(/^\[|\]$/g, ""), path: path || null };
+}
+var entries = (value) => (typeof value === "string" ? value.split(",") : value ?? []).map((e) => String(e).trim()).filter(Boolean);
+function resolveFilter(options, env) {
+  const invalid = [];
+  const pick = (option, name) => {
+    const given = entries(option).length > 0 ? entries(option) : entries(env[name]);
+    const rules = given.map((e) => parseRule(e) ?? (invalid.push(e), null)).filter((r) => r !== null);
+    return { given: given.length > 0, rules };
+  };
+  const allow = pick(options.allowlist, "MNFST_ALLOWLIST");
+  const deny = pick(options.denylist, "MNFST_DENYLIST");
+  return { filter: { allow: allow.given ? allow.rules : null, deny: deny.rules }, invalid };
+}
+var covers = (rule, host, path) => (host === rule.host || host.endsWith("." + rule.host)) && (rule.path === null || path === rule.path || path.startsWith(rule.path + "/"));
+function isExcluded(filter, url) {
+  let host;
+  let path;
+  try {
+    const parsed = new URL(url);
+    host = parsed.hostname.toLowerCase().replace(/\.$/, "").replace(/^\[|\]$/g, "");
+    path = parsed.pathname || "/";
+  } catch {
+    return false;
+  }
+  if (filter.deny.some((r) => covers(r, host, path))) return true;
+  return filter.allow !== null && !filter.allow.some((r) => covers(r, host, path));
+}
+
 // src/runtime.ts
 var forbidden = /* @__PURE__ */ new Set([401, 402, 403, 429]);
 var bodyless = ["GET", "HEAD", "DELETE", "OPTIONS"];
@@ -151,7 +230,7 @@ var Runtime = class {
     this.original = original;
     this.api = api ?? new HealApi(original, options.key, options.url);
     this.tracker = new CallBuffer(
-      (batch, signal) => this.api.sendRequests(batch, signal),
+      (batch, signal) => handled(() => this.api.sendRequests(batch, signal)),
       { immediate: isServerless() }
     );
   }
@@ -180,7 +259,16 @@ var Runtime = class {
     } catch {
     }
   }
-  fetch = async (input, init) => {
+  /** A call kept out of Manifest by the allowlist or denylist: never healed, never tracked. */
+  excluded(url) {
+    return this.options.filter ? isExcluded(this.options.filter, url) : false;
+  }
+  // Marked as handled, so the undici channels do not count this call (or its
+  // retry) a second time.
+  fetch = (input, init) => handled(() => this.send(input, init));
+  async send(input, init) {
+    const target = typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
+    if (this.excluded(target)) return this.original(input, init);
     const request = new Request(input, init);
     const extras = { ...init };
     delete extras.body;
@@ -195,7 +283,7 @@ var Runtime = class {
       return response;
     }
     return this.handleResponse(request, response, await bodyPromise, responseTimeMs, extras);
-  };
+  }
   async handleResponse(request, response, body, responseTimeMs, extras = {}) {
     if (!eligible(response.status) || response.redirected || !this.api.enabled()) return response;
     return this.repair(request, extras, response, body, responseTimeMs);
@@ -331,6 +419,7 @@ function wrapRequest(original, protocol, runtime) {
     const emit = request.emit.bind(request);
     request.emit = ((event, ...values) => {
       if (event !== "response") return emit(event, ...values);
+      if (excluded(runtime, request, protocol)) return emit(event, ...values);
       const response = values[0];
       if (!eligible(response.statusCode ?? 0) || !runtime.api.canHeal()) {
         runtime.track(
@@ -358,6 +447,13 @@ async function handleResponse(runtime, clientRequest, incoming, protocol, body,
   const healed = await runtime.handleResponse(request, response, body, performance.now() - started);
   return incomingResponse(healed, clientRequest);
 }
+function excluded(runtime, request, protocol) {
+  try {
+    return runtime.excluded(requestUrl(request, protocol).toString());
+  } catch {
+    return false;
+  }
+}
 function requestUrl(request, protocol) {
   const authority = String(request.getHeader("host") ?? request.host);
   return new URL(request.path, `${protocol}//${authority}`);
@@ -496,10 +592,12 @@ function manifest(options = {}) {
     );
   }
   if (!url.pathname.endsWith("/")) url.pathname += "/";
-  const resolved = { ...options, key, url: url.toString() };
+  const { filter, invalid } = resolveFilter(options, process.env);
+  if (invalid.length > 0) warn(`Ignoring unreadable allowlist/denylist entries: ${invalid.join(", ")}`);
+  const resolved = { ...options, key, url: url.toString(), filter };
   const existing = globals[STATE];
   if (existing) {
-    if (existing.options.key !== key || existing.options.url !== resolved.url || existing.options.onHeal !== options.onHeal) {
+    if (existing.options.key !== key || existing.options.url !== resolved.url || existing.options.onHeal !== options.onHeal || JSON.stringify(existing.options.filter) !== JSON.stringify(filter)) {
       warn(
         "Manifest is already configured; changing configuration requires a process restart"
       );
@@ -509,6 +607,7 @@ function manifest(options = {}) {
   const runtime = new Runtime(resolved, globalThis.fetch.bind(globalThis));
   globalThis.fetch = runtime.fetch;
   installHttp(runtime);
+  installUndici(runtime);
   globals[STATE] = runtime;
   runtime.api.hello(`node-${process.versions.node}`);
   process.once("beforeExit", () => {

package/dist/{chunk-OXOZQLZ3.js → chunk-TX6KHYCJ.js}

@@ -314,7 +314,7 @@ function keepAlive(promise) {
 }
 
 // src/api.ts
-var VERSION = "7.2.1";
+var VERSION = "7.4.0";
 var MAX_HEALS_IN_FLIGHT = 8;
 var warn = (message) => process.emitWarning(message, { code: "MNFST" });
 var HealApi = class {

package/dist/index.cjs

@@ -361,7 +361,7 @@ function keepAlive(promise) {
 }
 
 // src/api.ts
-var VERSION = "7.2.1";
+var VERSION = "7.4.0";
 var MAX_HEALS_IN_FLIGHT = 8;
 var warn = (message) => process.emitWarning(message, { code: "MNFST" });
 var HealApi = class {
@@ -660,6 +660,85 @@ var CallBuffer = class {
   }
 };
 
+// src/undici.ts
+var import_node_async_hooks = require("async_hooks");
+var import_node_diagnostics_channel = require("diagnostics_channel");
+var handling = new import_node_async_hooks.AsyncLocalStorage();
+var handled = (work) => handling.run(true, work);
+function installUndici(runtime) {
+  const manifestOrigin = new URL(runtime.options.url).origin;
+  const inFlight = /* @__PURE__ */ new WeakMap();
+  const onCreate = (message) => {
+    const { request } = message;
+    if (handling.getStore() || String(request.origin) === manifestOrigin) return;
+    inFlight.set(request, { startedAt: Date.now(), started: performance.now() });
+  };
+  const onHeaders = (message) => {
+    const { request, response } = message;
+    const started = inFlight.get(request);
+    if (!started) return;
+    inFlight.delete(request);
+    let url;
+    try {
+      url = new URL(request.path ?? "/", String(request.origin)).href;
+    } catch {
+      return;
+    }
+    if (runtime.excluded(url)) return;
+    runtime.track(
+      request.method ?? "GET",
+      () => url,
+      response.statusCode,
+      started.startedAt,
+      performance.now() - started.started
+    );
+  };
+  (0, import_node_diagnostics_channel.subscribe)("undici:request:create", onCreate);
+  (0, import_node_diagnostics_channel.subscribe)("undici:request:headers", onHeaders);
+  return () => {
+    (0, import_node_diagnostics_channel.unsubscribe)("undici:request:create", onCreate);
+    (0, import_node_diagnostics_channel.unsubscribe)("undici:request:headers", onHeaders);
+  };
+}
+
+// src/filter.ts
+var HOST = /^(?:[a-z0-9_-]+(?:\.[a-z0-9_-]+)*|\[[0-9a-f:.]+\])$/;
+function parseRule(entry) {
+  const rest = entry.trim().replace(/^[a-z][a-z0-9+.-]*:\/\//i, "").split(/[?#]/)[0] ?? "";
+  const slash = rest.indexOf("/");
+  const authority = (slash < 0 ? rest : rest.slice(0, slash)).toLowerCase();
+  const path = slash < 0 ? "" : rest.slice(slash).replace(/\/+$/, "");
+  const host = authority.replace(/^\*\./, "").replace(/:\d+$/, "").replace(/^\.+|\.+$/g, "");
+  if (!HOST.test(host) || path.includes("*")) return null;
+  return { host: host.replace(/^\[|\]$/g, ""), path: path || null };
+}
+var entries = (value) => (typeof value === "string" ? value.split(",") : value ?? []).map((e) => String(e).trim()).filter(Boolean);
+function resolveFilter(options, env) {
+  const invalid = [];
+  const pick = (option, name) => {
+    const given = entries(option).length > 0 ? entries(option) : entries(env[name]);
+    const rules = given.map((e) => parseRule(e) ?? (invalid.push(e), null)).filter((r) => r !== null);
+    return { given: given.length > 0, rules };
+  };
+  const allow = pick(options.allowlist, "MNFST_ALLOWLIST");
+  const deny = pick(options.denylist, "MNFST_DENYLIST");
+  return { filter: { allow: allow.given ? allow.rules : null, deny: deny.rules }, invalid };
+}
+var covers = (rule, host, path) => (host === rule.host || host.endsWith("." + rule.host)) && (rule.path === null || path === rule.path || path.startsWith(rule.path + "/"));
+function isExcluded(filter, url) {
+  let host;
+  let path;
+  try {
+    const parsed = new URL(url);
+    host = parsed.hostname.toLowerCase().replace(/\.$/, "").replace(/^\[|\]$/g, "");
+    path = parsed.pathname || "/";
+  } catch {
+    return false;
+  }
+  if (filter.deny.some((r) => covers(r, host, path))) return true;
+  return filter.allow !== null && !filter.allow.some((r) => covers(r, host, path));
+}
+
 // src/runtime.ts
 var forbidden = /* @__PURE__ */ new Set([401, 402, 403, 429]);
 var bodyless = ["GET", "HEAD", "DELETE", "OPTIONS"];
@@ -671,7 +750,7 @@ var Runtime = class {
     this.original = original;
     this.api = api ?? new HealApi(original, options.key, options.url);
     this.tracker = new CallBuffer(
-      (batch, signal) => this.api.sendRequests(batch, signal),
+      (batch, signal) => handled(() => this.api.sendRequests(batch, signal)),
       { immediate: isServerless() }
     );
   }
@@ -700,7 +779,16 @@ var Runtime = class {
     } catch {
     }
   }
-  fetch = async (input, init) => {
+  /** A call kept out of Manifest by the allowlist or denylist: never healed, never tracked. */
+  excluded(url) {
+    return this.options.filter ? isExcluded(this.options.filter, url) : false;
+  }
+  // Marked as handled, so the undici channels do not count this call (or its
+  // retry) a second time.
+  fetch = (input, init) => handled(() => this.send(input, init));
+  async send(input, init) {
+    const target = typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
+    if (this.excluded(target)) return this.original(input, init);
     const request = new Request(input, init);
     const extras = { ...init };
     delete extras.body;
@@ -715,7 +803,7 @@ var Runtime = class {
       return response;
     }
     return this.handleResponse(request, response, await bodyPromise, responseTimeMs, extras);
-  };
+  }
   async handleResponse(request, response, body, responseTimeMs, extras = {}) {
     if (!eligible(response.status) || response.redirected || !this.api.enabled()) return response;
     return this.repair(request, extras, response, body, responseTimeMs);
@@ -851,6 +939,7 @@ function wrapRequest(original, protocol, runtime) {
     const emit = request.emit.bind(request);
     request.emit = ((event, ...values) => {
       if (event !== "response") return emit(event, ...values);
+      if (excluded(runtime, request, protocol)) return emit(event, ...values);
       const response = values[0];
       if (!eligible(response.statusCode ?? 0) || !runtime.api.canHeal()) {
         runtime.track(
@@ -878,6 +967,13 @@ async function handleResponse(runtime, clientRequest, incoming, protocol, body,
   const healed = await runtime.handleResponse(request, response, body, performance.now() - started);
   return incomingResponse(healed, clientRequest);
 }
+function excluded(runtime, request, protocol) {
+  try {
+    return runtime.excluded(requestUrl(request, protocol).toString());
+  } catch {
+    return false;
+  }
+}
 function requestUrl(request, protocol) {
   const authority = String(request.getHeader("host") ?? request.host);
   return new URL(request.path, `${protocol}//${authority}`);
@@ -1016,10 +1112,12 @@ function manifest(options = {}) {
     );
   }
   if (!url.pathname.endsWith("/")) url.pathname += "/";
-  const resolved = { ...options, key, url: url.toString() };
+  const { filter, invalid } = resolveFilter(options, process.env);
+  if (invalid.length > 0) warn(`Ignoring unreadable allowlist/denylist entries: ${invalid.join(", ")}`);
+  const resolved = { ...options, key, url: url.toString(), filter };
   const existing = globals[STATE];
   if (existing) {
-    if (existing.options.key !== key || existing.options.url !== resolved.url || existing.options.onHeal !== options.onHeal) {
+    if (existing.options.key !== key || existing.options.url !== resolved.url || existing.options.onHeal !== options.onHeal || JSON.stringify(existing.options.filter) !== JSON.stringify(filter)) {
       warn(
         "Manifest is already configured; changing configuration requires a process restart"
       );
@@ -1029,6 +1127,7 @@ function manifest(options = {}) {
   const runtime = new Runtime(resolved, globalThis.fetch.bind(globalThis));
   globalThis.fetch = runtime.fetch;
   installHttp(runtime);
+  installUndici(runtime);
   globals[STATE] = runtime;
   runtime.api.hello(`node-${process.versions.node}`);
   process.once("beforeExit", () => {

package/dist/index.d.cts

@@ -2,6 +2,13 @@ interface ManifestOptions {
     key?: string;
     url?: string;
     onHeal?: (event: HealEvent) => void | Promise<void>;
+    /**
+     * Only these calls reach Manifest. Each entry is a domain (`stripe.com`, subdomains included)
+     * or a domain with a path (`stripe.com/v1/charges`). Default: `MNFST_ALLOWLIST`.
+     */
+    allowlist?: string[] | string;
+    /** These calls never reach Manifest; same entries as `allowlist`, and it wins. Default: `MNFST_DENYLIST`. */
+    denylist?: string[] | string;
 }
 interface HealEvent {
     url: string;
@@ -12,7 +19,7 @@ interface HealEvent {
     operations?: unknown[];
 }
 
-declare const VERSION = "7.2.1";
+declare const VERSION = "7.4.0";
 
 /** Install once, before libraries capture their own reference to global fetch. */
 declare function manifest(options?: ManifestOptions): void;

package/dist/index.d.ts

@@ -2,6 +2,13 @@ interface ManifestOptions {
     key?: string;
     url?: string;
     onHeal?: (event: HealEvent) => void | Promise<void>;
+    /**
+     * Only these calls reach Manifest. Each entry is a domain (`stripe.com`, subdomains included)
+     * or a domain with a path (`stripe.com/v1/charges`). Default: `MNFST_ALLOWLIST`.
+     */
+    allowlist?: string[] | string;
+    /** These calls never reach Manifest; same entries as `allowlist`, and it wins. Default: `MNFST_DENYLIST`. */
+    denylist?: string[] | string;
 }
 interface HealEvent {
     url: string;
@@ -12,7 +19,7 @@ interface HealEvent {
     operations?: unknown[];
 }
 
-declare const VERSION = "7.2.1";
+declare const VERSION = "7.4.0";
 
 /** Install once, before libraries capture their own reference to global fetch. */
 declare function manifest(options?: ManifestOptions): void;

package/dist/index.js

@@ -1,9 +1,9 @@
 import {
   manifest
-} from "./chunk-RO6CIYR2.js";
+} from "./chunk-6RNG7PBO.js";
 import {
   VERSION
-} from "./chunk-OXOZQLZ3.js";
+} from "./chunk-TX6KHYCJ.js";
 export {
   VERSION,
   manifest

package/dist/register.cjs

@@ -348,7 +348,7 @@ function keepAlive(promise) {
 }
 
 // src/api.ts
-var VERSION = "7.2.1";
+var VERSION = "7.4.0";
 var MAX_HEALS_IN_FLIGHT = 8;
 var warn = (message) => process.emitWarning(message, { code: "MNFST" });
 var HealApi = class {
@@ -647,6 +647,85 @@ var CallBuffer = class {
   }
 };
 
+// src/undici.ts
+var import_node_async_hooks = require("async_hooks");
+var import_node_diagnostics_channel = require("diagnostics_channel");
+var handling = new import_node_async_hooks.AsyncLocalStorage();
+var handled = (work) => handling.run(true, work);
+function installUndici(runtime) {
+  const manifestOrigin = new URL(runtime.options.url).origin;
+  const inFlight = /* @__PURE__ */ new WeakMap();
+  const onCreate = (message) => {
+    const { request } = message;
+    if (handling.getStore() || String(request.origin) === manifestOrigin) return;
+    inFlight.set(request, { startedAt: Date.now(), started: performance.now() });
+  };
+  const onHeaders = (message) => {
+    const { request, response } = message;
+    const started = inFlight.get(request);
+    if (!started) return;
+    inFlight.delete(request);
+    let url;
+    try {
+      url = new URL(request.path ?? "/", String(request.origin)).href;
+    } catch {
+      return;
+    }
+    if (runtime.excluded(url)) return;
+    runtime.track(
+      request.method ?? "GET",
+      () => url,
+      response.statusCode,
+      started.startedAt,
+      performance.now() - started.started
+    );
+  };
+  (0, import_node_diagnostics_channel.subscribe)("undici:request:create", onCreate);
+  (0, import_node_diagnostics_channel.subscribe)("undici:request:headers", onHeaders);
+  return () => {
+    (0, import_node_diagnostics_channel.unsubscribe)("undici:request:create", onCreate);
+    (0, import_node_diagnostics_channel.unsubscribe)("undici:request:headers", onHeaders);
+  };
+}
+
+// src/filter.ts
+var HOST = /^(?:[a-z0-9_-]+(?:\.[a-z0-9_-]+)*|\[[0-9a-f:.]+\])$/;
+function parseRule(entry) {
+  const rest = entry.trim().replace(/^[a-z][a-z0-9+.-]*:\/\//i, "").split(/[?#]/)[0] ?? "";
+  const slash = rest.indexOf("/");
+  const authority = (slash < 0 ? rest : rest.slice(0, slash)).toLowerCase();
+  const path = slash < 0 ? "" : rest.slice(slash).replace(/\/+$/, "");
+  const host = authority.replace(/^\*\./, "").replace(/:\d+$/, "").replace(/^\.+|\.+$/g, "");
+  if (!HOST.test(host) || path.includes("*")) return null;
+  return { host: host.replace(/^\[|\]$/g, ""), path: path || null };
+}
+var entries = (value) => (typeof value === "string" ? value.split(",") : value ?? []).map((e) => String(e).trim()).filter(Boolean);
+function resolveFilter(options, env) {
+  const invalid = [];
+  const pick = (option, name) => {
+    const given = entries(option).length > 0 ? entries(option) : entries(env[name]);
+    const rules = given.map((e) => parseRule(e) ?? (invalid.push(e), null)).filter((r) => r !== null);
+    return { given: given.length > 0, rules };
+  };
+  const allow = pick(options.allowlist, "MNFST_ALLOWLIST");
+  const deny = pick(options.denylist, "MNFST_DENYLIST");
+  return { filter: { allow: allow.given ? allow.rules : null, deny: deny.rules }, invalid };
+}
+var covers = (rule, host, path) => (host === rule.host || host.endsWith("." + rule.host)) && (rule.path === null || path === rule.path || path.startsWith(rule.path + "/"));
+function isExcluded(filter, url) {
+  let host;
+  let path;
+  try {
+    const parsed = new URL(url);
+    host = parsed.hostname.toLowerCase().replace(/\.$/, "").replace(/^\[|\]$/g, "");
+    path = parsed.pathname || "/";
+  } catch {
+    return false;
+  }
+  if (filter.deny.some((r) => covers(r, host, path))) return true;
+  return filter.allow !== null && !filter.allow.some((r) => covers(r, host, path));
+}
+
 // src/runtime.ts
 var forbidden = /* @__PURE__ */ new Set([401, 402, 403, 429]);
 var bodyless = ["GET", "HEAD", "DELETE", "OPTIONS"];
@@ -658,7 +737,7 @@ var Runtime = class {
     this.original = original;
     this.api = api ?? new HealApi(original, options.key, options.url);
     this.tracker = new CallBuffer(
-      (batch, signal) => this.api.sendRequests(batch, signal),
+      (batch, signal) => handled(() => this.api.sendRequests(batch, signal)),
       { immediate: isServerless() }
     );
   }
@@ -687,7 +766,16 @@ var Runtime = class {
     } catch {
     }
   }
-  fetch = async (input, init) => {
+  /** A call kept out of Manifest by the allowlist or denylist: never healed, never tracked. */
+  excluded(url) {
+    return this.options.filter ? isExcluded(this.options.filter, url) : false;
+  }
+  // Marked as handled, so the undici channels do not count this call (or its
+  // retry) a second time.
+  fetch = (input, init) => handled(() => this.send(input, init));
+  async send(input, init) {
+    const target = typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
+    if (this.excluded(target)) return this.original(input, init);
     const request = new Request(input, init);
     const extras = { ...init };
     delete extras.body;
@@ -702,7 +790,7 @@ var Runtime = class {
       return response;
     }
     return this.handleResponse(request, response, await bodyPromise, responseTimeMs, extras);
-  };
+  }
   async handleResponse(request, response, body, responseTimeMs, extras = {}) {
     if (!eligible(response.status) || response.redirected || !this.api.enabled()) return response;
     return this.repair(request, extras, response, body, responseTimeMs);
@@ -838,6 +926,7 @@ function wrapRequest(original, protocol, runtime) {
     const emit = request.emit.bind(request);
     request.emit = ((event, ...values) => {
       if (event !== "response") return emit(event, ...values);
+      if (excluded(runtime, request, protocol)) return emit(event, ...values);
       const response = values[0];
       if (!eligible(response.statusCode ?? 0) || !runtime.api.canHeal()) {
         runtime.track(
@@ -865,6 +954,13 @@ async function handleResponse(runtime, clientRequest, incoming, protocol, body,
   const healed = await runtime.handleResponse(request, response, body, performance.now() - started);
   return incomingResponse(healed, clientRequest);
 }
+function excluded(runtime, request, protocol) {
+  try {
+    return runtime.excluded(requestUrl(request, protocol).toString());
+  } catch {
+    return false;
+  }
+}
 function requestUrl(request, protocol) {
   const authority = String(request.getHeader("host") ?? request.host);
   return new URL(request.path, `${protocol}//${authority}`);
@@ -1003,10 +1099,12 @@ function manifest(options = {}) {
     );
   }
   if (!url.pathname.endsWith("/")) url.pathname += "/";
-  const resolved = { ...options, key, url: url.toString() };
+  const { filter, invalid } = resolveFilter(options, process.env);
+  if (invalid.length > 0) warn(`Ignoring unreadable allowlist/denylist entries: ${invalid.join(", ")}`);
+  const resolved = { ...options, key, url: url.toString(), filter };
   const existing = globals[STATE];
   if (existing) {
-    if (existing.options.key !== key || existing.options.url !== resolved.url || existing.options.onHeal !== options.onHeal) {
+    if (existing.options.key !== key || existing.options.url !== resolved.url || existing.options.onHeal !== options.onHeal || JSON.stringify(existing.options.filter) !== JSON.stringify(filter)) {
       warn(
         "Manifest is already configured; changing configuration requires a process restart"
       );
@@ -1016,6 +1114,7 @@ function manifest(options = {}) {
   const runtime = new Runtime(resolved, globalThis.fetch.bind(globalThis));
   globalThis.fetch = runtime.fetch;
   installHttp(runtime);
+  installUndici(runtime);
   globals[STATE] = runtime;
   runtime.api.hello(`node-${process.versions.node}`);
   process.once("beforeExit", () => {

package/dist/register.js

@@ -1,7 +1,7 @@
 import {
   manifest
-} from "./chunk-RO6CIYR2.js";
-import "./chunk-OXOZQLZ3.js";
+} from "./chunk-6RNG7PBO.js";
+import "./chunk-TX6KHYCJ.js";
 
 // src/register.ts
 manifest();

package/docs/guide.md

@@ -6,13 +6,15 @@
 
 Call `manifest()` once at startup, before other libraries save a reference to `fetch`, `node:http` or `node:https`. Where a client is built at import time and would capture the original `fetch` first, [preload the register entry](#preloading) instead.
 
-It reads `MNFST_KEY` and `MNFST_URL` and takes no options.
+It reads `MNFST_KEY`, `MNFST_URL`, `MNFST_ALLOWLIST` and `MNFST_DENYLIST`; every option is optional.
 
 | Option | Environment | Default |
 | --- | --- | --- |
 | `key` | `MNFST_KEY` | Disabled with a warning if missing |
 | `url` | `MNFST_URL` | `https://api.manifest.build` |
 | `onHeal` | — | Optional local callback |
+| `allowlist` | `MNFST_ALLOWLIST` | Every call eligible ([entries](../README.md#choosing-which-calls-reach-manifest)) |
+| `denylist` | `MNFST_DENYLIST` | None excluded |
 
 Explicit options take precedence. Reconfiguration requires a restart. ESM and CommonJS imports share one process-wide installation; CommonJS uses `const { manifest } = require('manifest')`.
 
@@ -75,6 +77,8 @@ Run the doctor from the project directory. It checks the install without guessin
 npx manifest doctor
 ```
 
+It reads `MNFST_KEY` and `MNFST_URL` from the environment first, then from the project's `.env.local` or `.env` (the first file that sets a variable wins) — the files Next.js and `dotenv` keep them in.
+
 ```
   ✅ SDK installed          manifest 7.0.0
   ✅ MNFST_KEY set          mnfst_proj_…DZDw
@@ -84,7 +88,7 @@ npx manifest doctor
   ⚠️ Requests received      no requests received yet
 
 Runtime coverage
-  Node.js runtime   fetch, http.request, https.request, http.get are patched
+  Node.js runtime   fetch, http.request, https.request, http.get are patched; undici is tracked
   Edge runtime      not supported — middleware.ts and Edge route handlers are never covered
 ```
 
@@ -106,8 +110,9 @@ You can also verify by hand: send a JSON request that your test API rejects with
 - One retry per capture. Same-origin URL and header repairs are supported by the SDK; the current app returns structured body repairs.
 - Successful calls and successful retries remain streamed. Failed responses retain their bytes, status, headers, URL and redirect metadata.
 - Every call that is not healed, whatever its status, is tracked as metadata only and sent in batches, off the request path (see "Data sent to Manifest").
+- Calls made through the `undici` package directly (its `fetch` or `request`, as `@vercel/blob` does) and through a `fetch` reference saved before initialization are **tracked, not healed**: the SDK observes them on undici's diagnostics channels, which can see a response but not replace it.
 
-**Not covered:** browser JavaScript, HTTP/2, directly imported `undici.fetch`, and `fetch` references saved before initialization (see `manifest/register` above). Those transports need separate integration. This SDK does not claim to intercept every Node HTTP client.
+**Not covered:** browser JavaScript and HTTP/2. Those transports need separate integration. This SDK does not claim to intercept every Node HTTP client.
 
 ## Limits and failure behavior
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "manifest",
-  "version": "7.2.1",
+  "version": "7.4.0",
   "description": "Repair eligible failed API calls made by Node HTTP clients.",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -57,7 +57,8 @@
     "axios": "^1.7.0",
     "tsup": "^8.5.0",
     "tsx": "^4.20.0",
-    "typescript": "^5.9.0"
+    "typescript": "^5.9.0",
+    "undici": "^5.29.0"
   },
   "repository": {
     "type": "git",