- d36d15b: Added
- verbose logging utility with structured events and sensitive data redaction
- 0484842: Dependencies
- Dependabot updates
- f6cef45: Added
- failFirstN middleware
-
04a7422: Added
- Security and release governance setup (security policy, version/publish automation, and dependency update automation)
Changed
- CI hardening and release pipeline security (pinned actions, modern Node/npm install flow, and provenance-ready publish flow)
- Package metadata cleanup for npm/repository linkage and maintainer info
- Husky prepare script updated for current usage
- Coverage configuration now enforces minimum thresholds
Fixed
- Non-functional release hygiene gaps that could block trusted publishing and long-term maintenance
- 79d64f9: Added
- Observability support
- Expanded test coverage for telemetry modules, server branches, config parser, and middlewares
- docs folder with full reference guides
-
d73f4eb: Added:
- Tests for stream-aware body transformation behavior, including the case where response transform is configured but streamed responses remain unchanged
Changed:
- Response handling is now stream-aware per response instead of treating all responses the same
- bodyTransform response transforms now run only for non-stream responses
Fixed:
- bodyTransform no longer mutates streamed responses
- fe0e586: Fixed:
- Response bodies now pass through as raw buffers, preserving upstream formatting and Content-Length.
- 09a8089: Added
- Config hot reload (programmatically or via POST /reload endpoint)
- Improved documentation
- abb7281: Added:
- Deterministic seed support for randomness-based middlewares
- Preset chaos bundles in presets/
-
ec8b94a: Fixed:
- bodyTransform built-in registration regression (config-based bodyTransform now resolves correctly again)
- Proxy transport alignment for transforms:
- transformed request bodies are forwarded upstream correctly
- transformed response bodies/headers are applied before sending to client
- Client abort propagation to upstream proxy request/response streams
- Throttle burst state correctness: per-client burst budget is now persisted/refilled across sequential responses.
Changed:
- Upstream proxying now uses keep-alive HTTP/HTTPS agents
- Built-in registry test coverage was expanded to cover all currently registered built-ins.
- README clarified that enabling bodyTransform implies body buffering as an explicit tradeoff
Removed:
- Express-related dependencies
-
4d818d2: Breaking:
- bodyTransform middleware now now handles bot request and response body transformations
Added:
- headerTransform middleware
- e41db9b: Added
- Discord section to readme
- 5a84087: Added
- Discord release announcement
- a6d2bda: Changed
- package.json updated
- 184f5be: Changed
- changeset config
- 39501a2: Added
- package moved to @fetchkit/chaos-proxy
-
4a11b38: Added
- throttle middleware
- bodyTransform middleware
Changed
- tests moved to /test
- routing logic improved
- bd73374: Breaking Changes
- Migrated core from Express to Koa; all middleware and server logic now use Koa patterns.
- Refactored middleware API: all built-in and custom middlewares must be Koa async functions.
- Updated configuration format and options for Koa compatibility.
- Changed rateLimit middleware options (max → limit).
- Presets removed.
- b9880c6: Changed
- Use Node http/https for transparent proxy streaming
- a322b27: Fixed
- Proxy made fully transparent for request/response streaming and headers
- 6cf9d75: Fixed
- Executable build
- fc49ba3: Changed
- CLI/module load
- e33f185: Fixed
- Documented programmatic API exported
- 4ea5aa8: Fixed
- npm script fixed
- e4f56e9: Added
- prepublishOnly script added to package.json
- 471042e: Added
- CORS middleware
- husky commit hook
- e32031d: Added
- Initial release of Chaos Proxy.