@solongate/proxy 0.10.0 → 0.10.1

package/dist/index.js

@@ -6171,6 +6171,61 @@ var SolonGateProxy = class {
         };
       }
       log2(`Tool call: ${name}`);
+      let piResult;
+      if (args && typeof args === "object") {
+        const guardConfig = this.config.advancedDetection ? { ...DEFAULT_INPUT_GUARD_CONFIG2, advancedDetection: this.config.advancedDetection } : DEFAULT_INPUT_GUARD_CONFIG2;
+        const argsCheck = this.config.advancedDetection ? await sanitizeInputAsync("tool.arguments", args, guardConfig) : sanitizeInput("tool.arguments", args);
+        const hasPromptInjection = argsCheck.threats.some((t) => t.type === "PROMPT_INJECTION");
+        if (hasPromptInjection) {
+          const trustResult = "trustScore" in argsCheck ? argsCheck.trustScore : void 0;
+          const matchedCategories = trustResult?.stages?.[0]?.details?.filter((d) => d.startsWith("matched:"))?.map((d) => d.replace("matched:", "")) ?? [];
+          piResult = {
+            detected: true,
+            trustScore: trustResult?.trustScore ?? 0,
+            blocked: true,
+            matchedCategories,
+            stageScores: {
+              rules: trustResult?.stages?.[0]?.score ?? 0,
+              embedding: trustResult?.stages?.[1]?.score ?? 0,
+              classifier: trustResult?.stages?.[2]?.score ?? 0
+            }
+          };
+          const threats = argsCheck.threats.map((t) => `${t.type}: ${t.description}`).join("; ");
+          log2(`DENY tool call: ${name} \u2014 ${threats}`);
+          if (this.config.apiKey && !this.config.apiKey.startsWith("sg_test_")) {
+            const apiUrl = this.config.apiUrl ?? "https://api.solongate.com";
+            sendAuditLog(this.config.apiKey, apiUrl, {
+              tool: name,
+              arguments: args ?? {},
+              decision: "DENY",
+              reason: `Prompt injection detected: ${threats}`,
+              evaluationTimeMs: 0,
+              promptInjection: piResult
+            });
+          }
+          return {
+            content: [{ type: "text", text: `Tool call blocked by input guard: ${threats}` }],
+            isError: true
+          };
+        }
+        if (this.config.advancedDetection && "trustScore" in argsCheck) {
+          const trustResult = argsCheck.trustScore;
+          if (trustResult) {
+            const matchedCategories = trustResult.stages?.[0]?.details?.filter((d) => d.startsWith("matched:"))?.map((d) => d.replace("matched:", "")) ?? [];
+            piResult = {
+              detected: trustResult.rawScore > 0,
+              trustScore: trustResult.trustScore,
+              blocked: false,
+              matchedCategories,
+              stageScores: {
+                rules: trustResult.stages?.[0]?.score ?? 0,
+                embedding: trustResult.stages?.[1]?.score ?? 0,
+                classifier: trustResult.stages?.[2]?.score ?? 0
+              }
+            };
+          }
+        }
+      }
       const mutex = this.toolMutexes.get(name);
       try {
         await mutex.acquire(MUTEX_TIMEOUT_MS);
@@ -6219,7 +6274,8 @@ var SolonGateProxy = class {
             decision,
             reason,
             matchedRule,
-            evaluationTimeMs
+            evaluationTimeMs,
+            promptInjection: piResult
           });
         } else {
           log2(`Skipping audit log (apiKey: ${this.config.apiKey ? "test key" : "not set"})`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "description": "MCP security proxy — protect any MCP server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {