@solongate/proxy 0.25.2 → 0.25.4

package/dist/index.js

@@ -79,6 +79,27 @@ async function sendAuditLog(apiKey, apiUrl, entry) {
 `);
   }
 }
+async function fetchAiJudgeConfig(apiKey, apiUrl) {
+  try {
+    const res = await fetch(`${apiUrl}/api/v1/project-config/ai-judge`, {
+      headers: {
+        "Authorization": `Bearer ${apiKey}`,
+        "X-API-Key": apiKey
+      },
+      signal: AbortSignal.timeout(5e3)
+    });
+    if (!res.ok) return null;
+    const data = await res.json();
+    return {
+      enabled: Boolean(data.enabled),
+      model: String(data.model ?? "llama-3.1-8b-instant"),
+      endpoint: String(data.endpoint ?? "https://api.groq.com/openai"),
+      timeoutMs: Number(data.timeoutMs ?? 5e3)
+    };
+  } catch {
+    return null;
+  }
+}
 function ensureCatchAllAllow(policy) {
   const hasCatchAllAllow = policy.rules.some(
     (r) => r.effect === "ALLOW" && r.toolPattern === "*" && r.enabled !== false
@@ -620,11 +641,14 @@ function ensureEnvFile() {
   const envPath = resolve2(".env");
   if (!existsSync3(envPath)) {
     const envContent = `# SolonGate Configuration
-# Get your API key from: https://dashboard.solongate.com/api-keys
 # IMPORTANT: Never commit this file to git!
 
-# Your SolonGate API key \u2014 the proxy reads this automatically
+# Your SolonGate API key \u2014 get one at https://dashboard.solongate.com
 SOLONGATE_API_KEY=sg_live_your_key_here
+
+# AI Judge (semantic security layer) \u2014 get a free key at https://console.groq.com/keys
+# Enable with: npx @solongate/proxy --ai-judge ...
+GROQ_API_KEY=gsk_your_groq_key_here
 `;
     writeFileSync2(envPath, envContent);
     console.log(`  Created .env`);
@@ -6416,6 +6440,40 @@ var SolonGateProxy = class {
     this.registerToolsToCloud();
     this.registerServerToCloud();
     this.startPolicySync();
+    if (this.config.apiKey && !this.config.apiKey.startsWith("sg_test_")) {
+      try {
+        const cloudJudge = await fetchAiJudgeConfig(this.config.apiKey, apiUrl);
+        if (cloudJudge) {
+          if (this.config.aiJudge?.enabled) {
+            log2("AI Judge: CLI flags override cloud config.");
+          } else if (cloudJudge.enabled) {
+            let groqKey;
+            const dotenvPath = (await import("path")).resolve(".env");
+            const { existsSync: existsSync7, readFileSync: readFileSync6 } = await import("fs");
+            if (existsSync7(dotenvPath)) {
+              const content = readFileSync6(dotenvPath, "utf-8");
+              const match = content.match(/^GROQ_API_KEY=(.+)/m);
+              if (match) groqKey = match[1].trim();
+            }
+            if (!groqKey) groqKey = process.env.GROQ_API_KEY;
+            if (groqKey) {
+              this.config.aiJudge = {
+                enabled: true,
+                model: cloudJudge.model,
+                endpoint: cloudJudge.endpoint,
+                apiKey: groqKey,
+                timeoutMs: cloudJudge.timeoutMs
+              };
+              log2(`AI Judge enabled via dashboard (model: ${cloudJudge.model}).`);
+            } else {
+              log2("AI Judge enabled in dashboard but GROQ_API_KEY not found in .env \u2014 skipping.");
+            }
+          }
+        }
+      } catch (err) {
+        log2(`AI Judge cloud config fetch failed: ${err instanceof Error ? err.message : String(err)}`);
+      }
+    }
     if (this.config.aiJudge?.enabled) {
       const protectedFiles = this.extractProtectedFiles();
       const protectedPaths = this.extractProtectedPaths();

package/dist/init.js

@@ -283,11 +283,14 @@ function ensureEnvFile() {
   const envPath = resolve(".env");
   if (!existsSync(envPath)) {
     const envContent = `# SolonGate Configuration
-# Get your API key from: https://dashboard.solongate.com/api-keys
 # IMPORTANT: Never commit this file to git!
 
-# Your SolonGate API key \u2014 the proxy reads this automatically
+# Your SolonGate API key \u2014 get one at https://dashboard.solongate.com
 SOLONGATE_API_KEY=sg_live_your_key_here
+
+# AI Judge (semantic security layer) \u2014 get a free key at https://console.groq.com/keys
+# Enable with: npx @solongate/proxy --ai-judge ...
+GROQ_API_KEY=gsk_your_groq_key_here
 `;
     writeFileSync(envPath, envContent);
     console.log(`  Created .env`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.25.2",
+  "version": "0.25.4",
   "description": "MCP security proxy — protect any MCP server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {