@solongate/proxy 0.15.4 → 0.15.5

package/hooks/guard.mjs

@@ -310,13 +310,24 @@ process.stdin.on('end', async () => {
       const candidates = [s, ...segments];
       for (const candidate of candidates) {
         if (!candidate.includes('*') && !candidate.includes('?')) continue;
-        for (const p of protectedPaths) {
-          // Build regex from glob: * → .*, ? → .
-          const escaped = candidate.replace(/[.+^${}()|[\]\\]/g, '\\$&').replace(/\\\*/g, '.*').replace(/\\\?/g, '.');
-          try {
-            if (new RegExp('^' + escaped + '$', 'i').test(p)) return p;
-          } catch { /* invalid regex, skip */ }
+        // Simple prefix match: ".antig*" → prefix ".antig", check if any protected path starts with it
+        const starIdx = candidate.indexOf('*');
+        const qIdx = candidate.indexOf('?');
+        const firstWild = starIdx === -1 ? qIdx : qIdx === -1 ? starIdx : Math.min(starIdx, qIdx);
+        const prefix = candidate.slice(0, firstWild).toLowerCase();
+        if (prefix.length > 0) {
+          for (const p of protectedPaths) {
+            if (p.startsWith(prefix)) return p;
+          }
         }
+        // Also try regex for complex patterns like ".cl?ude"
+        try {
+          const escaped = candidate.replace(/[.+^${}()|[\]\\]/g, '\\$&').replace(/\\\*/g, '.*').replace(/\\\?/g, '.');
+          const re = new RegExp('^' + escaped + '$', 'i');
+          for (const p of protectedPaths) {
+            if (re.test(p)) return p;
+          }
+        } catch { /* invalid regex, skip */ }
       }
       return null;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.15.4",
+  "version": "0.15.5",
   "description": "MCP security proxy — protect any MCP server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {