CyberMind-FR
f3cea01792
Implement secubox-ai-gateway package with intelligent AI request routing based on data sensitivity classification for GDPR/ANSSI compliance. Features: - 3-tier data classification: LOCAL_ONLY, SANITIZED, CLOUD_DIRECT - Provider hierarchy: LocalAI > Mistral (EU) > Claude > GPT > Gemini > xAI - PII sanitizer: IPv4/IPv6, MAC, credentials, private keys scrubbing - OpenAI-compatible API proxy on port 4050 - aigatewayctl CLI: status, classify, sanitize, provider, audit commands - RPCD backend with 11 ubus methods for LuCI integration - ANSSI CSPN audit logging in JSONL format Classification patterns detect: - IP addresses, MAC addresses, private keys - Credentials (password, secret, token, api_key) - System paths, security tool references - WireGuard configuration data All cloud providers are opt-in. Default LOCAL_ONLY ensures data sovereignty - sensitive data never leaves the device. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
56 lines
1.4 KiB
Bash
56 lines
1.4 KiB
Bash
#!/bin/sh
|
|
# SecuBox AI Gateway - OpenAI Provider Adapter
|
|
|
|
CONFIG="ai-gateway"
|
|
|
|
provider_request() {
|
|
local request_json="$1"
|
|
|
|
local endpoint=$(uci -q get ${CONFIG}.openai.endpoint || echo "https://api.openai.com/v1")
|
|
local api_key=$(uci -q get ${CONFIG}.openai.api_key)
|
|
local model=$(uci -q get ${CONFIG}.openai.model || echo "gpt-4o")
|
|
|
|
if [ -z "$api_key" ]; then
|
|
printf '{"error":{"message":"OpenAI API key not configured","type":"auth_error","code":"missing_api_key"}}'
|
|
return 1
|
|
fi
|
|
|
|
# Override model in request
|
|
request_json=$(echo "$request_json" | sed "s/\"model\":[^,}]*/\"model\":\"$model\"/")
|
|
|
|
# Send to OpenAI API
|
|
local response=$(echo "$request_json" | wget -q -O - \
|
|
--post-data=- \
|
|
--header="Content-Type: application/json" \
|
|
--header="Authorization: Bearer $api_key" \
|
|
"${endpoint}/chat/completions" 2>/dev/null)
|
|
|
|
if [ -z "$response" ]; then
|
|
printf '{"error":{"message":"OpenAI API request failed","type":"provider_error","code":"openai_error"}}'
|
|
return 1
|
|
fi
|
|
|
|
echo "$response"
|
|
}
|
|
|
|
provider_test() {
|
|
local api_key=$(uci -q get ${CONFIG}.openai.api_key)
|
|
|
|
echo "Testing OpenAI..."
|
|
|
|
if [ -z "$api_key" ]; then
|
|
echo "Status: NOT CONFIGURED (no API key)"
|
|
return 1
|
|
fi
|
|
|
|
# Check API key format
|
|
if echo "$api_key" | grep -q "^sk-"; then
|
|
echo "Status: CONFIGURED"
|
|
echo "API Key: sk-***"
|
|
return 0
|
|
else
|
|
echo "Status: INVALID API KEY FORMAT"
|
|
return 1
|
|
fi
|
|
}
|