@intutic/proxy 1.10.0 → 1.10.1

package/README.md

@@ -30,7 +30,21 @@ The proxy processes every request through an ordered plugin chain:
 
 ### Model Selection
 
-- **Thompson Sampling bandit**: Selects the optimal model per-task based on historical cost, latency, and quality signals
+- **Thompson Sampling bandit**: selects a model per task cell from observed
+  **availability and latency**.
+
+  Two corrections to what this said before. It claimed selection was based on
+  "historical cost, latency, and quality signals". `RewardSignals`
+  (`src/routing/reward.rs:32`) carries `upstream_ok`, `latency_ms`,
+  `token_anomaly`, `raw_cost_usd` and `actual_cost_usd` — and the cost pair does
+  not move the reward: `cheaper_routed_model_earns_no_bonus` asserts a cheaper
+  route earns nothing, deliberately. There is **no quality signal at all**: a
+  cheap model returning a confidently wrong answer, quickly, scores a perfect
+  1.0.
+
+  So the router today optimises for *responding*, not for responding *well* or
+  *cheaply*. Do not describe it as saving money or preserving quality until
+  there is a measurement behind either word.
 
 ### Network Enforcement
 
@@ -45,7 +59,7 @@ The proxy processes every request through an ordered plugin chain:
 - **DLP scanner**: Pattern-based and entropy-based secret detection
 - **Code skeleton extraction**: Uses `tree-sitter` and `syn` for AST-level code analysis
 - **Token counting**: Accurate pre-flight token estimation via `tiktoken-rs`
-- **Telemetry**: OpenTelemetry OTLP export for traces, metrics, and logs
+- **Telemetry**: OpenTelemetry OTLP export for traces and metrics — a `SpanExporter` and `SdkMeterProvider` ship in `src/main.rs`, with the exported instrument set declared in `src/metrics.rs` (snip compaction histograms, egress counters, policy refusals). Still no logs pipeline (TD-161's resolution covers the metrics half only)
 
 ## Dependencies
 

package/bin/proxy.js

@@ -18,6 +18,7 @@ import { spawn } from 'child_process';
 import path from 'path';
 import fs from 'fs';
 import os from 'os';
+import crypto from 'crypto';
 import { createRequire } from 'module';
 import { fileURLToPath } from 'url';
 
@@ -28,9 +29,15 @@ const { version } = require('../package.json');
 const isWindows = process.platform === 'win32';
 const binaryName = isWindows ? 'intutic-proxy.exe' : 'intutic-proxy';
 
-/** Asset names MUST match publish.yml's build-rust-proxy matrix artifact_name. */
-function resolveAssetName() {
-  const { platform, arch } = process;
+/**
+ * Asset names MUST match publish.yml's build-rust-proxy matrix
+ * artifact_name — every value returned here has a live release asset
+ * verified against it (`gh release view` on v1.6.0 through the current
+ * release). `platform`/`arch` are parameters, not read from `process`
+ * directly, so proxy.test.mjs can exercise every platform/arch combination
+ * without needing to stub global process state.
+ */
+export function resolveAssetName(platform = process.platform, arch = process.arch) {
   if (platform === 'darwin') {
     if (arch === 'arm64') return 'intutic-proxy-darwin-arm64';
     if (arch === 'x64') return 'intutic-proxy-darwin-x64';
@@ -110,6 +117,57 @@ function pruneLegacyCache() {
   }
 }
 
+/** `sha256:<hex>` of `buffer` — the same shape publish.yml's checksums.json values use. */
+export function sha256Hex(buffer) {
+  return 'sha256:' + crypto.createHash('sha256').update(buffer).digest('hex');
+}
+
+/** Parses a checksums.json body into a plain name→digest map. Throws on any other shape. */
+export function parseChecksums(text) {
+  const data = JSON.parse(text);
+  if (typeof data !== 'object' || data === null || Array.isArray(data)) {
+    throw new Error('checksums.json did not parse to an object');
+  }
+  return data;
+}
+
+/**
+ * Throws unless `buffer`'s digest matches `checksums[assetName]`. A missing entry
+ * fails the same as a mismatch — an asset absent from the manifest is exactly as
+ * unverifiable as one that fails it, and treating it as "nothing to check" would
+ * make the whole guard optional for any release that forgot to list an asset.
+ */
+export function verifyChecksum(buffer, checksums, assetName) {
+  const expected = checksums[assetName];
+  const actual = sha256Hex(buffer);
+  if (!expected) {
+    throw new Error(
+      `checksums.json has no entry for ${assetName} — refusing to install an unverified binary.`
+    );
+  }
+  if (actual !== expected) {
+    throw new Error(
+      `Checksum mismatch for ${assetName}:\n` +
+        `  expected: ${expected}\n` +
+        `  actual:   ${actual}\n` +
+        `This could mean a corrupted download or a tampered release asset — refusing to install it. Do not retry blindly.`
+    );
+  }
+}
+
+async function fetchChecksums(assetVersion) {
+  const url = `https://github.com/intutic/intutic/releases/download/v${assetVersion}/checksums.json`;
+  const response = await fetch(url);
+  if (!response.ok) {
+    throw new Error(
+      `Failed to download checksums.json (HTTP ${response.status} ${response.statusText}).\n` +
+        `  URL: ${url}\n` +
+        `Refusing to install an unverified binary. Build from source instead: cargo build --release --package intutic-proxy`
+    );
+  }
+  return parseChecksums(await response.text());
+}
+
 async function downloadBinary(destPath) {
   const assetName = resolveAssetName();
   if (!assetName) {
@@ -132,6 +190,11 @@ async function downloadBinary(destPath) {
   }
 
   const buffer = Buffer.from(await response.arrayBuffer());
+
+  process.stderr.write(`intutic-proxy: verifying checksum…\n`);
+  const checksums = await fetchChecksums(version);
+  verifyChecksum(buffer, checksums, assetName);
+
   fs.mkdirSync(path.dirname(destPath), { recursive: true });
 
   // Write to a temp path and rename, so a partial download from an interrupted
@@ -183,4 +246,9 @@ async function main() {
   });
 }
 
-main();
+// Guarded so a test can `import` this module for its pure functions
+// (sha256Hex, parseChecksums, verifyChecksum) without triggering a real
+// download-and-spawn as a side effect of the import.
+if (import.meta.url === `file://${process.argv[1]}`) {
+  main();
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intutic/proxy",
-  "version": "1.10.0",
+  "version": "1.10.1",
   "description": "Native high-performance AI agent governance proxy binary",
   "type": "module",
   "main": "bin/proxy.js",