1.6.18

• Improve coverage of private IP addresses (used for SSRF detection etc)
• Log a warning if Zen.setUser(...) is called outside of context (e.g. when source is not supported by Zen)
• Use sliding window for rate limiting (avoids burst abuse near window edges)
• Mark values as unsafe:

Useful when you want to explicitly label data as potentially dangerous, such as output from an LLM being used to generate a file name:

const toolCall = completion.choices[0].message.tool_calls[0];
const filepath = JSON.parse(toolCall.function.arguments).filepath;

// Mark the filepath as unsafe since it came from the LLM
Zen.markUnsafe(filepath);

// This will be blocked if the LLM tries to perform path traversal
// e.g. if filepath is "../../../etc/passwd"
await readFile(filepath);