@intutic/proxy 1.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Intutic
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPORTED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,88 @@
+# intutic-proxy
+
+> High-performance AI agent proxy with WebAssembly-based governance policies.
+
+## Overview
+
+intutic-proxy is a high-performance AI agent proxy written in Rust (edition 2021) that intercepts agent-to-LLM traffic and enforces governance policies through a pluggable WASM sandbox. It is the local enforcement engine for the [Intutic](https://github.com/intutic/intutic) governance control plane.
+
+## Features
+
+### WASM Plugin Sandbox
+
+- **Runtime**: wasmtime v21 with pre-compiled module caching
+- **Memory limit**: 1 MB per plugin invocation
+- **Execution timeout**: 5 ms hard wall-clock cutoff
+- **Isolation**: Each plugin runs in a dedicated WASM store
+
+### Plugin Chain
+
+The proxy processes every request through an ordered plugin chain:
+
+| Plugin | Purpose |
+|--------|---------|
+| Budget Gate | Enforce per-ticket and per-team token budgets |
+| DLP Gate | Block or redact sensitive data (secrets, PII, credentials) |
+| PCAS Gate | Prior Consent and Autonomy Scope enforcement |
+| Semantic Cache | Deduplicate semantically similar prompts via Valkey |
+| SOP Prompt Injector | Inject workspace governance SOPs into system prompts |
+
+### Model Selection
+
+- **Thompson Sampling bandit**: Selects the optimal model per-task based on historical cost, latency, and quality signals
+
+### Network Enforcement
+
+- **TLS MITM**: Transparent interception for Windsurf and other harnesses
+- **OS-level firewall rules**: Generates platform-native rules to redirect agent traffic through the proxy
+  - macOS: `pf` (Packet Filter)
+  - Linux: `iptables` / `nftables`
+  - Windows: `netsh`
+
+### Security & Observability
+
+- **DLP scanner**: Pattern-based and entropy-based secret detection
+- **Code skeleton extraction**: Uses `tree-sitter` and `syn` for AST-level code analysis
+- **Token counting**: Accurate pre-flight token estimation via `tiktoken-rs`
+- **Telemetry**: OpenTelemetry OTLP export for traces, metrics, and logs
+
+## Dependencies
+
+| Crate | Purpose |
+|-------|---------|
+| `axum` | HTTP server framework |
+| `wasmtime` | WASM runtime |
+| `reqwest` | Upstream LLM HTTP client |
+| `redis` | Valkey / Redis connection |
+| `tree-sitter` | Source code parsing |
+| `tiktoken-rs` | Token counting |
+| `rcgen` | TLS certificate generation |
+
+## Development
+
+```bash
+# Build
+cargo build
+
+# Run tests
+cargo test
+
+# Run benchmarks
+cargo bench
+```
+
+## Binary
+
+The crate produces a single binary:
+
+```
+intutic-proxy
+```
+
+## Part of Intutic
+
+This package is part of the [Intutic](https://github.com/intutic/intutic) monorepo — an open-core AI governance control plane for developer teams.
+
+## License
+
+MIT — see [LICENSE](../../LICENSE) for details.

package/bin/proxy.js

@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+import { spawn } from 'child_process';
+import path from 'path';
+import fs from 'fs';
+import { fileURLToPath } from 'url';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const binaryName = process.platform === 'win32' ? 'intutic-proxy.exe' : 'intutic-proxy';
+const binaryPath = path.join(__dirname, binaryName);
+
+if (!fs.existsSync(binaryPath)) {
+  console.error(`Error: Native intutic-proxy binary not found at ${binaryPath}`);
+  process.exit(1);
+}
+
+const child = spawn(binaryPath, process.argv.slice(2), { stdio: 'inherit' });
+
+child.on('exit', (code, signal) => {
+  if (code !== null) {
+    process.exit(code);
+  } else if (signal) {
+    process.kill(process.pid, signal);
+  }
+});

package/package.json

@@ -0,0 +1,40 @@
+{
+  "name": "@intutic/proxy",
+  "version": "1.2.0",
+  "description": "Native high-performance AI agent governance proxy binary",
+  "type": "module",
+  "main": "./bin/proxy.js",
+  "bin": {
+    "intutic-proxy": "./bin/proxy.js"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "cargo build --release && mkdir -p bin && cp target/release/intutic-proxy bin/",
+    "prepublishOnly": "cargo build --release && mkdir -p bin && cp target/release/intutic-proxy bin/"
+  },
+  "files": [
+    "bin/",
+    "README.md",
+    "LICENSE"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/intutic/intutic"
+  },
+  "license": "MIT",
+  "homepage": "https://intutic.ai",
+  "keywords": [
+    "ai",
+    "governance",
+    "proxy",
+    "wasm",
+    "circuit-breaker",
+    "litellm",
+    "rust"
+  ],
+  "engines": {
+    "node": ">=18"
+  }
+}