@ai-ecoverse/slicc-vault 1.12.1 → 1.12.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/package.json +4 -3
package/README.md
CHANGED
|
@@ -359,7 +359,7 @@ The candidates are the placeholders that would pass the per-placeholder checks a
|
|
|
359
359
|
## Model and MCP endpoints
|
|
360
360
|
|
|
361
361
|
The vault never injects a secret into a model or MCP endpoint, whatever a rule says.
|
|
362
|
-
- **The built-in list** is generated at build time (`scripts/endpoints.mjs`, into the gitignored `src/endpoints.json`) from every provider base URL in pi-ai's catalog (`@earendil-works/pi-ai`, pinned in `devDependencies
|
|
362
|
+
- **The built-in list** is generated at build time (`scripts/endpoints.mjs`, into the gitignored `src/endpoints.json`) from every provider base URL in pi-ai's catalog (`@earendil-works/pi-ai`, pinned in `devDependencies`, the version slicc-agent runs), plus `bedrock-runtime.*` and `bedrock-runtime-fips.*.amazonaws.com`, Vertex AI's global `aiplatform.googleapis.com` (`google-vertex`), Azure OpenAI, AI services and Cognitive Services' OpenAI path (`*.openai.azure.com`, `*.services.ai.azure.com`, `*.cognitiveservices.azure.com/openai`, so Speech, Translator and the other Cognitive Services stay usable by rules), Adobe's LLM proxy, and the model base URLs pi-ai has retired but that still serve models (`opencode.ai/zen`, `api.kimi.com/coding`): the refused set never shrinks when pi-ai drops a URL, though no key goes there. `*` is exactly one label. The published package's `piAi` field in `package.json` names the pi-ai version the vault was built against, so slicc-agent can check that both run the same catalog; Renovate bumps it with the pin, labelled `pi-ai-lockstep` and never automerged. Each entry is a host (with `*` for one label) and a path prefix (`*` for one segment, from templated segments).
|
|
363
363
|
- **Registered endpoints:** the agent's `endpoints` op adds model base URLs and MCP servers for its namespace. They only ever add.
|
|
364
364
|
- **At policy parse:** a rule that can reach only refused URLs (its domain matches, and the endpoint has no path prefix or every path of the rule lies under it), and an `smtp` or `pg` session rule whose domain matches any endpoint's host, is dropped and listed in `list.refused` with the reason `NAME: host is a model or MCP endpoint; the vault never injects there`. Other rules on the same host stay.
|
|
365
365
|
- **At request time:** `forward` refuses any URL under the refused set, before rules: `403 host is a model or MCP endpoint; the vault never injects there`.
|
package/package.json
CHANGED
|
@@ -1,7 +1,8 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@ai-ecoverse/slicc-vault",
|
|
3
|
-
"version": "1.12.
|
|
3
|
+
"version": "1.12.2",
|
|
4
4
|
"description": "The separate-origin vault at vault.sliccy.ai: sealed secrets, OAuth tokens, and model and MCP credentials for SLICC seven, used only by its injector",
|
|
5
|
+
"piAi": "1.3.0",
|
|
5
6
|
"type": "module",
|
|
6
7
|
"license": "Apache-2.0",
|
|
7
8
|
"repository": {
|
|
@@ -47,13 +48,13 @@
|
|
|
47
48
|
},
|
|
48
49
|
"devDependencies": {
|
|
49
50
|
"@ai-ecoverse/jerk-oauth": "1.0.0",
|
|
50
|
-
"@ai-ecoverse/slicc-kernel": "1.
|
|
51
|
+
"@ai-ecoverse/slicc-kernel": "1.128.0",
|
|
51
52
|
"@ai-ecoverse/slicc-scrub": "1.0.0",
|
|
52
53
|
"@ai-ecoverse/slicc-shared-web": "1.24.2",
|
|
53
54
|
"@ai-ecoverse/wasm-bash": "5.3.0-20",
|
|
54
55
|
"@ai-ecoverse/wasm-coreutils": "9.12.0-10",
|
|
55
56
|
"@biomejs/biome": "2.5.15",
|
|
56
|
-
"@earendil-works/pi-ai": "1.
|
|
57
|
+
"@earendil-works/pi-ai": "1.3.0",
|
|
57
58
|
"@happy-dom/global-registrator": "20.14.6",
|
|
58
59
|
"@spectrum-css/button": "14.2.0",
|
|
59
60
|
"@spectrum-css/textfield": "8.2.0",
|