Files
zeekayandGitHub 879ef2d2bb zip on Fiber v3 — canonical Hanzo Go framework (#1)
* wipe upstream zeekay/zip — rebuilding on Fiber v3

* core: zip on Fiber v3 — App, Ctx, Router, typed handlers, OpenAPI

zip wraps *fiber.App. Sinatra/Express idiom (app.Get/Post/...).
Generic zip.Get[I,O], zip.Post[I,O] etc. reflection-build OpenAPI 3.1
spec served at /.well-known/openapi.json + Swagger UI at /docs.

Ctx exposes Hanzo identity (Org/User/UserEmail/IsAdmin) from gateway
X-* headers per HIP-0026. luxfi/log per-request logger via c.Log().

Module(method+path, runtime, modulePath) mounts a HIP-0105 extension
as a Fiber route. Loader is duck-typed via zip/runtime.Loader so zip
does not pull hanzoai/base as a transitive dep — service binary
constructs *extruntime.Loader and injects via zip.Config.Loader.

go.mod: go 1.26.3 (forced by luxfi/log v1.4.3 floor; brief said
1.23.6 but luxfi canonical requires 1.26.x). Fiber v3.2.0, no major
bumps planned.

* middleware: Recover, RequestID, Logger, Timeout, MaxBody, CORS, Auth, RateLimit, Telemetry

Recover catches handler panics → luxfi/log + 500 JSON.
RequestID forwards X-Request-Id (or mints 16-byte hex).
Logger wraps each request with method/path/status/dur, enriches the
per-request luxfi/log Logger via c.SetLog().
Auth trusts gateway-minted X-* headers first; falls back to bearer
verification via injected AuthVerifier.
StripIdentityHeaders for non-gateway deployments.
RateLimit is per-org (or per-IP fallback) in-memory token bucket.
Telemetry plumbs to any O11ySink.

* adapters + wsx + zaprpc

AdaptNetHTTP/AdaptNetHTTPFunc/AdaptNetHTTPMiddleware via Fiber's
adaptor pkg. app.Mount(prefix, http.Handler) for legacy chi/gin/beego
migration. Each adapter doc'd as MIGRATION TOOL — costs ~5% vs native
Fiber dispatch.

wsx is fasthttp/websocket wrapped — wsx.Upgrade(fn) returns a
zip.Handler. Conn is *websocket.Conn from fasthttp/websocket; text/
binary/close/ping/pong message constants re-exported.

zaprpc ships Service + Registry + Dispatch. app.ZAPRegistry() returns
the per-App registry. app.ZAPListen(addr) reserves the port and logs
but the on-the-wire dispatcher is stubbed — full integration in a
follow-up PR pending zapc server type stabilization.

* examples + core tests

examples/
  hello/             — minimal Sinatra-style API
  zap-typed/         — generic typed handler + auto-OpenAPI + Swagger
  subsystem-mount/   — HIP-0106 Mount(*App, deps) idiom
  module-routes/     — app.Module() over a stub zip/runtime.Loader
  websocket/         — wsx.Upgrade echo server
  sse-streaming/     — c.SendStreamWriter Server-Sent Events
  migrate-from-gin/  — gin→zip mechanical port
  migrate-from-chi/  — chi→zip via AdaptNetHTTP
  migrate-from-beego/— beego→zip via AdaptNetHTTP

Verified live: hello binary serves /hello + /health 200s; zap-typed
serves /v1/validate + /.well-known/openapi.json with reflection-
derived schemas. Tests pass: 5 cases (basic routing, HTTPError, typed
validation, groups, identity headers).

* docs: README, HANZO_CHANGES, MIGRATION, MIDDLEWARE, MODULE_HANDLERS

README pitches zip as canonical Hanzo Go framework on Fiber v3.
HANZO_CHANGES documents the diff from upstream zeekay/zip — every
file replaced; only the name kept.
MIGRATION covers gin/chi/beego/net-http with per-route recipes.
MIDDLEWARE covers Recover/RequestID/Logger/Auth/etc.
MODULE_HANDLERS covers app.Module() over HIP-0105 with the wire
envelope and per-runtime guidance.

* ctx.Bind validates via reflection tags; tighten AuthVerifier interface

c.Bind/BindQuery/BindURI now run validate() after parse and return
*HTTPError(400) directly — handler code is one line:

	if err := c.Bind(&v); err != nil { return err }

AuthVerifier.Verify now takes context.Context (was an empty
interface{}). middleware import adjusted.

* module-routes: default Content-Type to application/json; add tests

Modules that don't set a Content-Type in their response envelope get
application/json; charset=utf-8 by default — the wire format is JSON
both directions.

Tests cover: happy path (POST /v1/eval echoed back), runtime mismatch
between caller and manifest, AllowedRuntimes refusal, nil Loader.
2026-05-18 23:36:43 -07:00

39 lines
1.1 KiB
Go

package middleware
import (
"time"
"github.com/hanzoai/zip"
)
// O11ySink is the minimum interface zip's telemetry middleware consumes.
// Real implementations live in hanzoai/insights / o11y SDKs. nil sink =
// no-op middleware.
type O11ySink interface {
// Record reports a single request to the o11y backend.
Record(method, path string, status int, dur time.Duration, attrs map[string]string)
}
// Telemetry returns middleware that records every request through sink.
// Use this alongside Logger() (which writes to luxfi/log); Telemetry()
// is for structured metrics/traces flowing to o11y backends.
func Telemetry(sink O11ySink) zip.Handler {
if sink == nil {
return func(c *zip.Ctx) error { return c.Continue() }
}
return func(c *zip.Ctx) error {
start := time.Now()
err := c.Continue()
dur := time.Since(start)
attrs := map[string]string{}
if rid := c.RequestID(); rid != "" {
attrs["request_id"] = rid
}
if org := c.Org(); org != "" {
attrs["org"] = org
}
sink.Record(c.Method(), c.Path(), c.Fiber().Response().StatusCode(), dur, attrs)
return err
}
}