@axlsdk/axl 0.20.0 → 0.21.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -71,6 +71,13 @@ Presets: `openrouter`, `azure`, `xai`, `deepseek`, `mistral`, `groq`, `bedrock`,
71
71
 
72
72
  Each provider also accepts an opt-in `rateLimit` (`{ maxConcurrent?, minIntervalMs?, acquireTimeoutMs? }`) for proactive client-side pacing on top of the automatic 429/503/529 backoff — useful when a large fan-out (e.g. an eval) shares one API key. It caps in-flight request concurrency (not token throughput) for that provider's chat calls. See [Providers → Rate limiting](../../docs/providers.md#rate-limiting-opt-in).
73
73
 
74
+ Built-in providers require HTTPS for remote endpoints and never follow redirects.
75
+ Literal loopback HTTP remains automatic for local inference; Docker service names,
76
+ private-network URLs, and other remote HTTP endpoints require the provider-local
77
+ `dangerouslyAllowInsecureHttp: true` acknowledgement. Keep Axl and proprietary
78
+ system prompts on your trusted backend—see
79
+ [Prompt confidentiality](../../docs/security.md#prompt-confidentiality-and-the-trusted-backend).
80
+
74
81
  State store options: `'memory'` (default), `'sqlite'` (requires `better-sqlite3`), or a `RedisStore` instance for multi-process deployments. See [State Stores](#state-stores).
75
82
 
76
83
  ### Tools, Agents, and Workflows