haechi 1.2.0 → 1.3.0

package/haechi.config.example.json

@@ -50,7 +50,8 @@
   "filters": {
     "customRules": [],
     "minConfidence": 0,
-    "allowlist": []
+    "allowlist": [],
+    "decodeAndRescan": false
   },
   "keys": {
     "provider": "local",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "haechi",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "Self-hosted AI context enforcement across LLM, MCP, vLLM, Ollama, and agent traffic — a stable, zero-dependency security gateway.",
   "license": "Apache-2.0",
   "type": "module",
@@ -76,11 +76,13 @@
     "checksums": "node scripts/release-checksums.mjs",
     "bench:payload": "node scripts/bench-payload.mjs",
     "bench:detection": "node scripts/bench-detection.mjs",
+    "bench:throughput": "node scripts/bench-throughput.mjs",
     "scan:detection": "node scripts/bench-detection.mjs --gate",
     "check:peer-ranges": "node scripts/check-satellite-peer-ranges.mjs",
     "release:preflight": "node scripts/release-preflight.mjs && node scripts/check-satellite-peer-ranges.mjs",
     "release:preflight:npm": "node scripts/release-preflight.mjs --require-npm-auth && node scripts/check-satellite-peer-ranges.mjs",
     "haechi": "node packages/cli/bin/haechi.mjs",
+    "demo": "node examples/local-proxy-demo/demo.mjs",
     "demo:init": "node packages/cli/bin/haechi.mjs init --force",
     "demo:protect": "node packages/cli/bin/haechi.mjs protect examples/llm-prompt-filtering/input.json --config haechi.config.json",
     "demo:report": "node packages/cli/bin/haechi.mjs report --audit .haechi/audit.jsonl"

package/packages/cli/bin/haechi.mjs

@@ -737,7 +737,8 @@ Enforcement
 
 Upstream + proxy
   target.type               llm-http | openai-compatible | vllm-openai |
-                            ollama | llama-cpp                 (unknown = fail)
+                            ollama | llama-cpp | anthropic |
+                            gemini                             (unknown = fail)
   target.upstream           the only upstream the proxy forwards to
   proxy.host / proxy.port   127.0.0.1 / ${DEFAULT_PROXY_PORT}
                             non-loopback host needs --allow-remote-bind (CLI flag)
@@ -777,7 +778,7 @@ Audit integrity
   audit.anchor.everyRecords anchor cadence                      (default 1)
 
 Privacy + MCP
-  privacy.profile           kr-pipa | eu-gdpr | us-general | null
+  privacy.profile           kr-pipa | eu-gdpr | asia-pdpa | us-general | jp-appi | null
   mcp.allowedMethods        client-callable method allowlist
 
 Binding beyond loopback (0.0.0.0):

package/packages/cli/runtime.mjs

@@ -103,7 +103,13 @@ export function defaultConfig() {
       // allowlist [] = no operator FP exceptions. Both additive; neither can
       // suppress a hard-block type (secret/api_key/kr_rrn/card) — see core.
       minConfidence: 0,
-      allowlist: []
+      allowlist: [],
+      // WS2d residual — opt-in base64/percent decode-and-rescan. Default false =
+      // byte-identical to prior behavior (no decode). When true, a string leaf
+      // that looks base64/percent-encoded is decoded and rescanned; a decoded
+      // hit fails closed to a WHOLE-LEAF detection and only fires for a validator-
+      // backed / hard-block match (precision guard against random-base64 FPs).
+      decodeAndRescan: false
     },
     keys: {
       provider: "local",
@@ -716,6 +722,11 @@ function validateFilters(filters) {
       }
     }
   }
+  // WS2d residual — opt-in base64/percent decode-and-rescan. Strict boolean,
+  // fail-closed: a non-boolean throws rather than silently coercing.
+  if (filters.decodeAndRescan !== undefined && typeof filters.decodeAndRescan !== "boolean") {
+    throw new Error("filters.decodeAndRescan must be a boolean");
+  }
 }
 
 function validatePolicyExtras(policy) {