@solongate/proxy 0.10.0 → 0.11.0

package/dist/index.js

@@ -132,6 +132,7 @@ function parseArgs(argv) {
   let upstreamTransport;
   let port;
   let policyId;
+  let advancedDetection = true;
   let separatorIndex = args.indexOf("--");
   const flags = separatorIndex >= 0 ? args.slice(0, separatorIndex) : args;
   const upstreamArgs = separatorIndex >= 0 ? args.slice(separatorIndex + 1) : [];
@@ -174,6 +175,9 @@ function parseArgs(argv) {
       case "--id":
         policyId = flags[++i];
         break;
+      case "--no-advanced-detection":
+        advancedDetection = false;
+        break;
     }
   }
   if (apiKey && /^\$\{.+\}$/.test(apiKey)) {
@@ -222,7 +226,8 @@ function parseArgs(argv) {
       apiUrl: apiUrl ?? fileConfig.apiUrl,
       port: port ?? fileConfig.port,
       policyPath: resolvePolicyPath(cfgPolicySource) ?? void 0,
-      policyId: policyId ?? fileConfig.policyId
+      policyId: policyId ?? fileConfig.policyId,
+      advancedDetection: advancedDetection ? { enabled: true } : void 0
     };
   }
   if (upstreamUrl) {
@@ -243,7 +248,8 @@ function parseArgs(argv) {
       apiUrl,
       port,
       policyPath: resolvedPolicyPath ?? void 0,
-      policyId
+      policyId,
+      advancedDetection: advancedDetection ? { enabled: true } : void 0
     };
   }
   if (upstreamArgs.length === 0) {
@@ -268,7 +274,8 @@ function parseArgs(argv) {
     apiUrl,
     port,
     policyPath: resolvedPolicyPath ?? void 0,
-    policyId
+    policyId,
+    advancedDetection: advancedDetection ? { enabled: true } : void 0
   };
 }
 function resolvePolicyPath(source) {
@@ -6171,6 +6178,61 @@ var SolonGateProxy = class {
         };
       }
       log2(`Tool call: ${name}`);
+      let piResult;
+      if (args && typeof args === "object") {
+        const guardConfig = this.config.advancedDetection ? { ...DEFAULT_INPUT_GUARD_CONFIG2, advancedDetection: this.config.advancedDetection } : DEFAULT_INPUT_GUARD_CONFIG2;
+        const argsCheck = this.config.advancedDetection ? await sanitizeInputAsync("tool.arguments", args, guardConfig) : sanitizeInput("tool.arguments", args);
+        const hasPromptInjection = argsCheck.threats.some((t) => t.type === "PROMPT_INJECTION");
+        if (hasPromptInjection) {
+          const trustResult = "trustScore" in argsCheck ? argsCheck.trustScore : void 0;
+          const matchedCategories = trustResult?.stages?.[0]?.details?.filter((d) => d.startsWith("matched:"))?.map((d) => d.replace("matched:", "")) ?? [];
+          piResult = {
+            detected: true,
+            trustScore: trustResult?.trustScore ?? 0,
+            blocked: true,
+            matchedCategories,
+            stageScores: {
+              rules: trustResult?.stages?.[0]?.score ?? 0,
+              embedding: trustResult?.stages?.[1]?.score ?? 0,
+              classifier: trustResult?.stages?.[2]?.score ?? 0
+            }
+          };
+          const threats = argsCheck.threats.map((t) => `${t.type}: ${t.description}`).join("; ");
+          log2(`DENY tool call: ${name} \u2014 ${threats}`);
+          if (this.config.apiKey && !this.config.apiKey.startsWith("sg_test_")) {
+            const apiUrl = this.config.apiUrl ?? "https://api.solongate.com";
+            sendAuditLog(this.config.apiKey, apiUrl, {
+              tool: name,
+              arguments: args ?? {},
+              decision: "DENY",
+              reason: `Prompt injection detected: ${threats}`,
+              evaluationTimeMs: 0,
+              promptInjection: piResult
+            });
+          }
+          return {
+            content: [{ type: "text", text: `Tool call blocked by input guard: ${threats}` }],
+            isError: true
+          };
+        }
+        if (this.config.advancedDetection && "trustScore" in argsCheck) {
+          const trustResult = argsCheck.trustScore;
+          if (trustResult) {
+            const matchedCategories = trustResult.stages?.[0]?.details?.filter((d) => d.startsWith("matched:"))?.map((d) => d.replace("matched:", "")) ?? [];
+            piResult = {
+              detected: trustResult.rawScore > 0,
+              trustScore: trustResult.trustScore,
+              blocked: false,
+              matchedCategories,
+              stageScores: {
+                rules: trustResult.stages?.[0]?.score ?? 0,
+                embedding: trustResult.stages?.[1]?.score ?? 0,
+                classifier: trustResult.stages?.[2]?.score ?? 0
+              }
+            };
+          }
+        }
+      }
       const mutex = this.toolMutexes.get(name);
       try {
         await mutex.acquire(MUTEX_TIMEOUT_MS);
@@ -6219,7 +6281,8 @@ var SolonGateProxy = class {
             decision,
             reason,
             matchedRule,
-            evaluationTimeMs
+            evaluationTimeMs,
+            promptInjection: piResult
           });
         } else {
           log2(`Skipping audit log (apiKey: ${this.config.apiKey ? "test key" : "not set"})`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "MCP security proxy — protect any MCP server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {