Stop breaking API contracts and shipping bloated JSON
Trezko inspects live HTTP & webhook traffic at the edge, detects silent type drift across microservices, and gates pull requests when payload size or schema compatibility regresses.
npx @trezko/cli diff baseline.json candidate.json
OpenAPI specs lie. Production traffic tells the truth.
Hand-written Swagger files drift weeks behind hotfixes. Trezko reconstructs real contracts from live wire shapes and enforces compatibility on every merge.
Deterministic Breaking-Change Gate
Distinguishes safe additive fields from destructive type mutations (`integer` → `string`), missing required keys, and unexpected `null` regressions that crash mobile Kotlin/Swift decoders.
Payload Egress & Latency Profiler
Identifies ORM over-fetching, serialized internal debug traces, and sparse `null` matrices across high-RPS endpoints—quantifying monthly AWS/GCP NAT & CDN egress waste in dollars.
Zero-Data-Leak Structural Hashing
Our Rust/Go edge collector discards string literals, emails, tokens, and numeric values in memory before telemetry leaves your VPC. Only field keys, types, and byte lengths are indexed.
Drop into GitHub Actions in under three minutes
Run `@trezko/cli` against integration test fixtures or staging replay snapshots. Post structured diff tables directly onto pull requests with non-zero exit codes when breaking rules trigger.
-
Exit code
2on breaking field removal or primitive type mutation -
Configurable byte-budget thresholds per route (e.g.,
max_p95_bytes: 16384) - Exports updated TypeScript types & JSON Schema artifacts on merge
name: API Contract Gate
on: [pull_request]
jobs:
trezko-verify:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Run Integration Fixtures
run: npm run test:fixtures -- --dump=./artifacts/candidate.json
- name: Verify Backward Compatibility
run: |
npx @trezko/cli verify \
--baseline https://api.nerbo.xyz/v1/contracts/checkout-core/latest \
--candidate ./artifacts/candidate.json \
--fail-on breaking,leak-keys \
--max-bloat-pct 12
env:
TREZKO_TOKEN: ${{ secrets.TREZKO_TOKEN }}
Recent Changelog
Continuous improvements to our inference core, Cloud Run sidecar collector, and developer CLI.
View 2026–2027 Roadmap →Leak-Key Heuristics & Egress Cost Estimator
Added automatic detection for accidental ORM/SQL debug fields (`debug_*`, `*_dump`) and cloud egress dollar modeling per route RPS.
TypeScript AST Emitter & Nullable Union Tracking
Separated strict `TYPE_MISMATCH` errors from `NULLABILITY_DRIFT` warnings and shipped zero-dependency `.d.ts` interface generation.
Stateless Sidecar Proxy for Cloud Run & Kubernetes
14MB container image mirroring sampled JSON responses asynchronously with sub-millisecond tail latency impact.
Engineered for strict security and SRE standards
Does Trezko store raw customer request/response bodies?
No. Both the CLI and sidecar transform payloads in-memory into structural type trees (keys, value types, array lengths, byte counts) before transmission. Sensitive customer values never hit disk.
How is this different from Pact or static OpenAPI linters?
Pact requires maintaining brittle consumer mock suites across teams, and OpenAPI linters only validate YAML files. Trezko observes actual serialized JSON payloads produced by your runtime.
Can we run the inspector completely air-gapped in CI?
Yes. `@trezko/cli diff` and our browser workspace execute 100% locally against baseline snapshot files committed to your repository without requiring outbound network calls.
Which protocols and encodings are supported?
JSON over REST, webhooks, and GraphQL `data` envelopes are GA today. Protobuf/gRPC descriptor drift analysis is scheduled on our Q1 2027 roadmap.