legion-llm 0.3.2 → 0.3.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 45ff0d9cdd07ee541c80dbac46e66d37542af95a96a614e31fc4af2c2bdf7833
-  data.tar.gz: 1562706b98e0e6e301a76dec373cecbcf99a3eb3a8e74a0d258928fbbaaf5be7
+  metadata.gz: 7faf26458139d4c0e585e5c30e42602e85402e20abcbe2cd73ef8449ae17f947
+  data.tar.gz: 73fecb93dbfd407891e64a4278c21c9e9f7fcc2af8313660de4e075a3195bbc7
 SHA512:
-  metadata.gz: e28b6c1e39599d1ecd16a60ff67bf4c7625b2d3cdcb2406b465751640b13d44d8a16e593644a4ee30f0bdcaff577580a19e7577e48a7bb07dc3fcfaaf28b3de9
-  data.tar.gz: d8fe57b67e87f8035c9c78c9bc8489aea68d75d50e477ca0007cd471cd24254081cf6784d2350d128d721dbbf4e5332340ac8e5d8297e9feffb1efe826b87d11
+  metadata.gz: 067c7e99927b675df13517a6ca5aa12b494fdedd8e277e7a42ae060e7597033597fbd0f88f595d5368937ba4a00aa7f6e2e02c14e56d01763f4253eb1cd3f421
+  data.tar.gz: 9dc754975461db838b49d1f9826d54a80c7bdf106fa44fa6fe3d3693eefe70a1d503ed5025e551a458b367ab53580c67b7c9cf1fb9ee01e69cd5c2394181f150

data/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Legion LLM Changelog
 
+## [0.3.3] - 2026-03-17
+
+### Added
+- `Router::GatewayInterceptor`: optional gateway routing mode for cloud-tier LLM calls
+- Gateway settings: endpoint, API key, model policy per risk tier, fallback_to_direct
+- Identity header builder: X-Agent-Id, X-Tenant-Id, X-AIRB-Project-Id, X-Risk-Tier
+- Model selection policy: fnmatch-based allowlist per risk tier
+- Wired gateway interceptor into `chat_single` for automatic cloud-tier interception
+
 ## [0.3.2] - 2026-03-16
 
 ### Added

data/lib/legion/llm/router/gateway_interceptor.rb

@@ -0,0 +1,65 @@
+# frozen_string_literal: true
+
+module Legion
+  module LLM
+    module Router
+      module GatewayInterceptor
+        module_function
+
+        def intercept(resolution, context: {})
+          return resolution unless gateway_enabled?
+          return resolution unless resolution&.tier == :cloud
+
+          model = resolution.model
+          risk_tier = context[:risk_tier]&.to_sym
+
+          unless model_allowed?(model, risk_tier)
+            Legion::Logging.warn "[llm] gateway policy blocked model=#{model} risk_tier=#{risk_tier}"
+            return nil
+          end
+
+          Resolution.new(
+            tier:     :cloud,
+            provider: :gateway,
+            model:    model,
+            rule:     'gateway_intercept',
+            metadata: { original_provider: resolution.provider }
+          )
+        end
+
+        def gateway_enabled?
+          settings = gateway_settings
+          settings[:enabled] == true && !settings[:endpoint].nil?
+        end
+
+        def model_allowed?(model, risk_tier)
+          return true unless risk_tier
+
+          allowlist = gateway_settings.dig(:model_policy, risk_tier)
+          return true unless allowlist.is_a?(Array) && !allowlist.empty?
+
+          allowlist.any? { |pattern| File.fnmatch?(pattern, model.to_s) }
+        end
+
+        def gateway_headers(context)
+          {
+            'X-Agent-Id'        => context[:worker_id],
+            'X-Tenant-Id'       => context[:tenant_id],
+            'X-AIRB-Project-Id' => context[:airb_project_id],
+            'X-Risk-Tier'       => context[:risk_tier]&.to_s,
+            'X-Legion-Task-Id'  => context[:task_id]&.to_s
+          }.compact
+        end
+
+        def gateway_settings
+          llm = Legion::Settings[:llm]
+          return {} unless llm.is_a?(Hash)
+
+          (llm[:gateway] || {}).transform_keys(&:to_sym)
+        rescue StandardError
+          {}
+        end
+      end
+    end
+  end
+end

data/lib/legion/llm/router.rb

@@ -4,6 +4,7 @@ require_relative 'router/resolution'
 require_relative 'router/rule'
 require_relative 'router/health_tracker'
 require_relative 'router/escalation_chain'
+require_relative 'router/gateway_interceptor'
 require_relative 'discovery/ollama'
 require_relative 'discovery/system'
 

data/lib/legion/llm/settings.rb

@@ -11,7 +11,8 @@ module Legion
           default_provider: nil,
           providers:        providers,
           routing:          routing_defaults,
-          discovery:        discovery_defaults
+          discovery:        discovery_defaults,
+          gateway:          gateway_defaults
         }
       end
 
@@ -47,6 +48,18 @@ module Legion
         }
       end
 
+      def self.gateway_defaults
+        {
+          enabled:            false,
+          endpoint:           nil,
+          api_key:            nil,
+          timeout_seconds:    30,
+          model_policy:       {},
+          headers:            {},
+          fallback_to_direct: true
+        }
+      end
+
       def self.providers
         {
           bedrock:   {

data/lib/legion/llm/version.rb

@@ -2,6 +2,6 @@
 
 module Legion
   module LLM
-    VERSION = '0.3.2'
+    VERSION = '0.3.3'
   end
 end

data/lib/legion/llm.rb

@@ -114,6 +114,7 @@ module Legion
         if (intent || tier) && Router.routing_enabled?
           resolution = Router.resolve(intent: intent, tier: tier, model: model, provider: provider)
           if resolution
+            resolution = Router::GatewayInterceptor.intercept(resolution, context: kwargs.fetch(:context, {}))
             model    = resolution.model
             provider = resolution.provider
           end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: legion-llm
 version: !ruby/object:Gem::Version
-  version: 0.3.2
+  version: 0.3.3
 platform: ruby
 authors:
 - Esity
@@ -99,6 +99,7 @@ files:
 - lib/legion/llm/quality_checker.rb
 - lib/legion/llm/router.rb
 - lib/legion/llm/router/escalation_chain.rb
+- lib/legion/llm/router/gateway_interceptor.rb
 - lib/legion/llm/router/health_tracker.rb
 - lib/legion/llm/router/resolution.rb
 - lib/legion/llm/router/rule.rb