@intutic/proxy 2.4.0 → 2.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +12 -11
  2. package/package.json +1 -1
package/README.md CHANGED
@@ -17,17 +17,18 @@ intutic-proxy is a high-performance AI agent proxy written in Rust (edition 2021
17
17
  - **No verdict refuses**: a rule stopped by either limit, or one that traps or returns something that is not a verdict, refuses the request with `GOVERNANCE_UNAVAILABLE`, whatever the fail setting
18
18
  - **Isolation**: Each plugin runs in a dedicated WASM store
19
19
 
20
- ### Plugin Chain
21
-
22
- The proxy processes every request through an ordered plugin chain:
23
-
24
- | Plugin | Purpose |
25
- |--------|---------|
26
- | Budget Gate | Enforce per-ticket and per-team token budgets |
27
- | DLP Gate | Block or redact sensitive data (secrets, PII, credentials) |
28
- | PCAS Gate | Prior Consent and Autonomy Scope enforcement |
29
- | Response Cache | Replay the answer to an identical request (exact match, Valkey), or to a reworded plain-text question in the same context (semantic match, TurboVec) |
30
- | SOP Prompt Injector | Inject workspace governance SOPs into system prompts |
20
+ ### Governance Steps
21
+
22
+ There is no plugin chain. Each step is called directly where it applies on the
23
+ request or response path:
24
+
25
+ | Step | Where | Purpose |
26
+ |------|-------|---------|
27
+ | Budget Gate | `plugins/budget_gate.rs`, called from `proxy.rs` | Enforce per-ticket and per-team token budgets |
28
+ | DLP | `dlp::scan`, inline on the request path | Block or redact sensitive data (secrets, PII, credentials); findings reach `DlpEscalationDetector` |
29
+ | Tool authorisation | `UnauthorizedToolDetector` and `plugins/response_gate.rs` | Refuse tools an SOP's `deny_tools` names, on the request and before a response's tool call reaches the client |
30
+ | Response Cache | `plugins/semantic_cache.rs` | Replay the answer to an identical request (exact match, Valkey), or to a reworded plain-text question in the same context (semantic match, TurboVec) |
31
+ | SOP injection | `sops.rs` | Resolve SOPs by role and inject their content into system prompts |
31
32
 
32
33
  ### Model Selection
33
34
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@intutic/proxy",
3
- "version": "2.4.0",
3
+ "version": "2.5.0",
4
4
  "description": "Native high-performance AI agent governance proxy binary",
5
5
  "type": "module",
6
6
  "main": "bin/proxy.js",