@solongate/proxy 0.25.3 → 0.25.4

package/dist/index.js

@@ -79,6 +79,27 @@ async function sendAuditLog(apiKey, apiUrl, entry) {
 `);
   }
 }
+async function fetchAiJudgeConfig(apiKey, apiUrl) {
+  try {
+    const res = await fetch(`${apiUrl}/api/v1/project-config/ai-judge`, {
+      headers: {
+        "Authorization": `Bearer ${apiKey}`,
+        "X-API-Key": apiKey
+      },
+      signal: AbortSignal.timeout(5e3)
+    });
+    if (!res.ok) return null;
+    const data = await res.json();
+    return {
+      enabled: Boolean(data.enabled),
+      model: String(data.model ?? "llama-3.1-8b-instant"),
+      endpoint: String(data.endpoint ?? "https://api.groq.com/openai"),
+      timeoutMs: Number(data.timeoutMs ?? 5e3)
+    };
+  } catch {
+    return null;
+  }
+}
 function ensureCatchAllAllow(policy) {
   const hasCatchAllAllow = policy.rules.some(
     (r) => r.effect === "ALLOW" && r.toolPattern === "*" && r.enabled !== false
@@ -6419,6 +6440,40 @@ var SolonGateProxy = class {
     this.registerToolsToCloud();
     this.registerServerToCloud();
     this.startPolicySync();
+    if (this.config.apiKey && !this.config.apiKey.startsWith("sg_test_")) {
+      try {
+        const cloudJudge = await fetchAiJudgeConfig(this.config.apiKey, apiUrl);
+        if (cloudJudge) {
+          if (this.config.aiJudge?.enabled) {
+            log2("AI Judge: CLI flags override cloud config.");
+          } else if (cloudJudge.enabled) {
+            let groqKey;
+            const dotenvPath = (await import("path")).resolve(".env");
+            const { existsSync: existsSync7, readFileSync: readFileSync6 } = await import("fs");
+            if (existsSync7(dotenvPath)) {
+              const content = readFileSync6(dotenvPath, "utf-8");
+              const match = content.match(/^GROQ_API_KEY=(.+)/m);
+              if (match) groqKey = match[1].trim();
+            }
+            if (!groqKey) groqKey = process.env.GROQ_API_KEY;
+            if (groqKey) {
+              this.config.aiJudge = {
+                enabled: true,
+                model: cloudJudge.model,
+                endpoint: cloudJudge.endpoint,
+                apiKey: groqKey,
+                timeoutMs: cloudJudge.timeoutMs
+              };
+              log2(`AI Judge enabled via dashboard (model: ${cloudJudge.model}).`);
+            } else {
+              log2("AI Judge enabled in dashboard but GROQ_API_KEY not found in .env \u2014 skipping.");
+            }
+          }
+        }
+      } catch (err) {
+        log2(`AI Judge cloud config fetch failed: ${err instanceof Error ? err.message : String(err)}`);
+      }
+    }
     if (this.config.aiJudge?.enabled) {
       const protectedFiles = this.extractProtectedFiles();
       const protectedPaths = this.extractProtectedPaths();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.25.3",
+  "version": "0.25.4",
   "description": "MCP security proxy — protect any MCP server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {