tapimo 0.5.1 → 0.5.3

package/src/internal/EdgeCache.ts

@@ -33,12 +33,16 @@ const volatileHeaders = [
   'cf-cache-status',
   'content-encoding',
   'content-length',
-  'server-timing',
-  'set-cookie',
+  'payment-receipt',
+  'payment-session-snapshot',
   'ratelimit-limit',
   'ratelimit-remaining',
   'ratelimit-reset',
+  'ratelimit-scope',
+  'server-timing',
+  'set-cookie',
   'tempo-request-id',
+  'www-authenticate',
 ]
 
 /**
@@ -115,6 +119,8 @@ export function middleware<environment extends Env>(
     if (c.res.status < 200 || c.res.status >= 300) return
     if (c.res.headers.has('set-cookie')) return
     if (c.res.headers.get('content-type')?.includes('text/event-stream')) return
+    const responseDirectives = (c.res.headers.get('cache-control') ?? '').toLowerCase()
+    if (responseDirectives.includes('no-cache') || responseDirectives.includes('no-store')) return
 
     // Store a public, sanitized copy; the client still receives the original
     // (private, metered) response for this miss. Clone synchronously — the
@@ -247,7 +253,9 @@ function isTextual(contentType: string | null): boolean {
 function cacheKey(requestUrl: string) {
   const url = new URL(requestUrl)
   url.searchParams.sort()
-  return url.toString()
+  // Version the key so entries written before a sanitizer change cannot
+  // survive the deployment that changes the shared-cache boundary.
+  return `edge:v2:${url.toString()}`
 }
 
 function getWaitUntil(c: { executionCtx?: { waitUntil(promise: Promise<unknown>): void } }) {

package/src/internal/FundingQuotes.test.ts

@@ -235,6 +235,32 @@ describe('listQuoteCandidates', () => {
 
     expect(candidate?.id).toBe('tron-usdt-tempo-usdt0-rhino')
   })
+
+  test('selects proven Squid stablecoin corridors', () => {
+    const candidates = [
+      FundingQuotes.listQuoteCandidates({
+        destinationToken: 'USDC.e',
+        provider: 'squid',
+        sourceAmount: '1000000',
+        sourceAmountUnits: 'baseUnits',
+        sourceChain: 'base',
+        sourceToken: 'USDC',
+      })[0],
+      FundingQuotes.listQuoteCandidates({
+        destinationToken: 'USDT0',
+        provider: 'squid',
+        sourceAmount: '1000000',
+        sourceAmountUnits: 'baseUnits',
+        sourceChain: 'ethereum',
+        sourceToken: 'USDT',
+      })[0],
+    ]
+
+    expect(candidates.map((candidate) => candidate?.id)).toEqual([
+      'base-usdc-tempo-usdce-squid',
+      'ethereum-usdt-tempo-usdt0-squid',
+    ])
+  })
 })
 
 describe('listProviders', () => {
@@ -262,6 +288,13 @@ describe('listProviders', () => {
           "requiresApiKey": false,
           "status": "unconfigured",
         },
+        {
+          "id": "squid",
+          "kind": "solverNetwork",
+          "name": "Squid",
+          "requiresApiKey": true,
+          "status": "unconfigured",
+        },
       ]
     `)
   })

package/src/internal/FundingQuotes.ts

@@ -245,6 +245,13 @@ const providers = [
     requiresApiKey: false,
     status: 'unconfigured',
   },
+  {
+    id: 'squid',
+    kind: 'solverNetwork',
+    name: 'Squid',
+    requiresApiKey: true,
+    status: 'unconfigured',
+  },
 ] as const
 
 type TokenInput = (typeof sourceChains)[number]['tokens'][number]
@@ -369,7 +376,9 @@ const inventory: readonly InventoryEntry[] = [
   { destinationToken: 'usdce', provider: 'across', sourceChains: ['ethereum', 'base', 'bnb'], sourceTokens: ['USDC'] }, // prettier-ignore
   { destinationToken: 'usdce', provider: 'relay', sourceChains: ['ethereum', 'base', 'bnb'], sourceTokens: ['USDC', 'USDT'] }, // prettier-ignore
   { destinationToken: 'usdce', provider: 'rhino', sourceChains: ['base', 'solana'], sourceTokens: ['USDC'] }, // prettier-ignore
+  { destinationToken: 'usdce', provider: 'squid', sourceChains: ['ethereum', 'base', 'bnb'], sourceTokens: ['USDC'] }, // prettier-ignore
   { destinationToken: 'usdt0', provider: 'rhino', sourceChains: ['tron'], sourceTokens: ['USDT'] }, // prettier-ignore
+  { destinationToken: 'usdt0', provider: 'squid', sourceChains: ['ethereum', 'base', 'bnb'], sourceTokens: ['USDT'] }, // prettier-ignore
 ]
 
 type InventoryEntry = {

package/src/internal/RateLimit.test.ts

@@ -130,6 +130,18 @@ describe('edge', () => {
     expect(ip.limit).toHaveBeenCalledWith({ key: '2001:db8:abcd:12' })
   })
 
+  test('normalizes equivalent IPv6 addresses to the same /64 prefix', () => {
+    expect([
+      RateLimit.normalizeIp('2001:0db8:abcd:0012::1'),
+      RateLimit.normalizeIp('2001:db8:abcd:12:ffff::2'),
+    ]).toMatchInlineSnapshot(`
+      [
+        "2001:db8:abcd:12",
+        "2001:db8:abcd:12",
+      ]
+    `)
+  })
+
   test('returns 429 when any layer denies', async () => {
     const response = await RateLimit.edge(request({ asn: 64512, ip: '203.0.113.7' }), {
       asn: binding(false),

package/src/internal/RateLimit.ts

@@ -139,12 +139,12 @@ type CfProperties = { asn?: number | undefined }
 function clientKey(request: Request): string {
   const ip = request.headers.get('cf-connecting-ip')
   if (!ip) return 'unknown'
-  if (ip.includes('.')) return ip
-  return ipv6Prefix(ip)
+  return normalizeIp(ip)
 }
 
-/** First four hextets of an IPv6 address, with `::` expanded. */
-function ipv6Prefix(ip: string): string {
+/** Normalizes an IPv4 address or IPv6 /64 prefix for per-client quotas. */
+export function normalizeIp(ip: string): string {
+  if (ip.includes('.')) return ip
   const [address = ''] = ip.split('%')
   const [head = '', tail = ''] = address.split('::')
   const left = head ? head.split(':') : []