@solongate/proxy 0.34.0 → 0.36.0

package/dist/index.js

@@ -274,6 +274,9 @@ function parseArgs(argv) {
       aiJudgeApiKey = process.env.GROQ_API_KEY;
     }
   }
+  if (aiJudgeApiKey && (aiJudgeApiKey.includes("your_") || aiJudgeApiKey.includes("_here") || aiJudgeApiKey.length < 10)) {
+    aiJudgeApiKey = void 0;
+  }
   const aiJudge = aiJudgeEnabled ? {
     enabled: true,
     model: aiJudgeModel,
@@ -5671,6 +5674,12 @@ CRITICAL: Only DENY access to files EXPLICITLY in the protected_files list. "cat
 
 Respond with ONLY valid JSON, no markdown, no explanation outside the JSON:
 {"decision": "ALLOW" or "DENY", "reason": "brief one-line explanation", "confidence": 0.0 to 1.0}`;
+var AuthError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "AuthError";
+  }
+};
 var AiJudge = class _AiJudge {
   config;
   protectedFiles;
@@ -5727,6 +5736,13 @@ var AiJudge = class _AiJudge {
       this.consecutiveFailures++;
       this.lastFailureTime = Date.now();
       const message = err instanceof Error ? err.message : String(err);
+      if (err instanceof AuthError) {
+        return {
+          decision: "ALLOW",
+          reason: `AI Judge auth error (skipping): ${message.slice(0, 100)}`,
+          confidence: 0.5
+        };
+      }
       return {
         decision: "DENY",
         reason: `AI Judge error (fail-closed): ${message.slice(0, 100)}`,
@@ -5808,6 +5824,9 @@ var AiJudge = class _AiJudge {
       });
       if (!res.ok) {
         const errBody = await res.text().catch(() => "");
+        if (res.status === 401 || res.status === 403) {
+          throw new AuthError(`LLM auth failed (${res.status}): ${errBody.slice(0, 200)}`);
+        }
         throw new Error(`LLM endpoint returned ${res.status}: ${errBody.slice(0, 200)}`);
       }
       const data = await res.json();
@@ -6048,6 +6067,9 @@ var SolonGateProxy = class {
               if (match) groqKey = match[1].trim();
             }
             if (!groqKey) groqKey = process.env.GROQ_API_KEY;
+            if (groqKey && (groqKey.includes("your_") || groqKey.includes("_here") || groqKey.length < 10)) {
+              groqKey = void 0;
+            }
             if (groqKey) {
               this.config.aiJudge = {
                 enabled: true,

package/dist/lib.js

@@ -3973,6 +3973,12 @@ CRITICAL: Only DENY access to files EXPLICITLY in the protected_files list. "cat
 
 Respond with ONLY valid JSON, no markdown, no explanation outside the JSON:
 {"decision": "ALLOW" or "DENY", "reason": "brief one-line explanation", "confidence": 0.0 to 1.0}`;
+var AuthError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "AuthError";
+  }
+};
 var AiJudge = class _AiJudge {
   config;
   protectedFiles;
@@ -4029,6 +4035,13 @@ var AiJudge = class _AiJudge {
       this.consecutiveFailures++;
       this.lastFailureTime = Date.now();
       const message = err instanceof Error ? err.message : String(err);
+      if (err instanceof AuthError) {
+        return {
+          decision: "ALLOW",
+          reason: `AI Judge auth error (skipping): ${message.slice(0, 100)}`,
+          confidence: 0.5
+        };
+      }
       return {
         decision: "DENY",
         reason: `AI Judge error (fail-closed): ${message.slice(0, 100)}`,
@@ -4110,6 +4123,9 @@ var AiJudge = class _AiJudge {
       });
       if (!res.ok) {
         const errBody = await res.text().catch(() => "");
+        if (res.status === 401 || res.status === 403) {
+          throw new AuthError(`LLM auth failed (${res.status}): ${errBody.slice(0, 200)}`);
+        }
         throw new Error(`LLM endpoint returned ${res.status}: ${errBody.slice(0, 200)}`);
       }
       const data = await res.json();
@@ -4350,6 +4366,9 @@ var SolonGateProxy = class {
               if (match) groqKey = match[1].trim();
             }
             if (!groqKey) groqKey = process.env.GROQ_API_KEY;
+            if (groqKey && (groqKey.includes("your_") || groqKey.includes("_here") || groqKey.length < 10)) {
+              groqKey = void 0;
+            }
             if (groqKey) {
               this.config.aiJudge = {
                 enabled: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.34.0",
+  "version": "0.36.0",
   "description": "AI tool security proxy — protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {