@solongate/proxy 0.2.3 → 0.2.5

package/dist/index.js

@@ -472,20 +472,27 @@ const DANGEROUS_COMMANDS = [
   /\\bgit\\s+reset\\s+--hard\\b/i,
 ];
 
-function checkValue(val) {
+function checkPath(val) {
   if (typeof val !== 'string' || val.length < 2) return null;
   for (const p of PATH_TRAVERSAL) if (p.test(val)) return 'Path traversal detected';
   for (const p of SENSITIVE_PATHS) if (p.test(val)) return 'Sensitive file access blocked';
+  return null;
+}
+
+function checkValue(val) {
+  if (typeof val !== 'string' || val.length < 2) return null;
   for (const p of SSRF) if (p.test(val)) return 'SSRF attempt blocked';
   for (const p of SQL_INJECTION) if (p.test(val)) return 'SQL injection detected';
   if (val.length > 10000) return 'Input too long (max 10000 chars)';
   return null;
 }
 
+// Arguments that contain file paths
+const PATH_ARGS = ['file_path', 'path', 'pattern', 'directory', 'url', 'uri', 'notebook_path'];
+
 function checkBashCommand(cmd) {
   if (typeof cmd !== 'string') return null;
   for (const p of DANGEROUS_COMMANDS) if (p.test(cmd)) return 'Dangerous command blocked: ' + cmd.slice(0, 80);
-  for (const p of SHELL_INJECTION) if (p.test(cmd)) return null; // shell injection is normal for Bash
   return null;
 }
 
@@ -505,20 +512,17 @@ process.stdin.on('end', async () => {
       threat = checkBashCommand(args.command);
     }
 
-    // Check all string arguments for injection patterns
+    // Check arguments based on type
     if (!threat) {
       for (const [key, val] of Object.entries(args)) {
-        if (tool === 'Bash' && key === 'command') continue; // already checked
-        threat = checkValue(val);
-        if (threat) { threat = threat + ' (in ' + key + ')'; break; }
-        // Check nested strings
-        if (typeof val === 'object' && val) {
-          for (const v of Object.values(val)) {
-            threat = checkValue(v);
-            if (threat) { threat = threat + ' (in ' + key + ')'; break; }
-          }
-          if (threat) break;
+        if (tool === 'Bash' && key === 'command') continue;
+        if (key === 'content' || key === 'new_source' || key === 'new_string' || key === 'old_string' || key === 'description') continue;
+        if (PATH_ARGS.includes(key)) {
+          threat = checkPath(val);
+        } else {
+          threat = checkValue(val);
         }
+        if (threat) { threat = threat + ' (in ' + key + ')'; break; }
       }
     }
 
@@ -539,8 +543,10 @@ process.stdin.on('end', async () => {
           signal: AbortSignal.timeout(5000),
         }).catch(() => {});
       }
-      // Exit 2 = BLOCK. Message printed to stdout is shown to user.
-      process.stdout.write('SolonGate BLOCKED: ' + threat);
+      // Exit 2 = BLOCK. Write to both stdout and stderr for visibility.
+      const msg = 'SOLONGATE BLOCKED: ' + threat;
+      process.stdout.write(msg);
+      process.stderr.write(msg);
       process.exit(2);
     }
   } catch {

package/dist/init.js

@@ -191,20 +191,27 @@ const DANGEROUS_COMMANDS = [
   /\\bgit\\s+reset\\s+--hard\\b/i,
 ];
 
-function checkValue(val) {
+function checkPath(val) {
   if (typeof val !== 'string' || val.length < 2) return null;
   for (const p of PATH_TRAVERSAL) if (p.test(val)) return 'Path traversal detected';
   for (const p of SENSITIVE_PATHS) if (p.test(val)) return 'Sensitive file access blocked';
+  return null;
+}
+
+function checkValue(val) {
+  if (typeof val !== 'string' || val.length < 2) return null;
   for (const p of SSRF) if (p.test(val)) return 'SSRF attempt blocked';
   for (const p of SQL_INJECTION) if (p.test(val)) return 'SQL injection detected';
   if (val.length > 10000) return 'Input too long (max 10000 chars)';
   return null;
 }
 
+// Arguments that contain file paths
+const PATH_ARGS = ['file_path', 'path', 'pattern', 'directory', 'url', 'uri', 'notebook_path'];
+
 function checkBashCommand(cmd) {
   if (typeof cmd !== 'string') return null;
   for (const p of DANGEROUS_COMMANDS) if (p.test(cmd)) return 'Dangerous command blocked: ' + cmd.slice(0, 80);
-  for (const p of SHELL_INJECTION) if (p.test(cmd)) return null; // shell injection is normal for Bash
   return null;
 }
 
@@ -224,20 +231,17 @@ process.stdin.on('end', async () => {
       threat = checkBashCommand(args.command);
     }
 
-    // Check all string arguments for injection patterns
+    // Check arguments based on type
     if (!threat) {
       for (const [key, val] of Object.entries(args)) {
-        if (tool === 'Bash' && key === 'command') continue; // already checked
-        threat = checkValue(val);
-        if (threat) { threat = threat + ' (in ' + key + ')'; break; }
-        // Check nested strings
-        if (typeof val === 'object' && val) {
-          for (const v of Object.values(val)) {
-            threat = checkValue(v);
-            if (threat) { threat = threat + ' (in ' + key + ')'; break; }
-          }
-          if (threat) break;
+        if (tool === 'Bash' && key === 'command') continue;
+        if (key === 'content' || key === 'new_source' || key === 'new_string' || key === 'old_string' || key === 'description') continue;
+        if (PATH_ARGS.includes(key)) {
+          threat = checkPath(val);
+        } else {
+          threat = checkValue(val);
         }
+        if (threat) { threat = threat + ' (in ' + key + ')'; break; }
       }
     }
 
@@ -258,8 +262,10 @@ process.stdin.on('end', async () => {
           signal: AbortSignal.timeout(5000),
         }).catch(() => {});
       }
-      // Exit 2 = BLOCK. Message printed to stdout is shown to user.
-      process.stdout.write('SolonGate BLOCKED: ' + threat);
+      // Exit 2 = BLOCK. Write to both stdout and stderr for visibility.
+      const msg = 'SOLONGATE BLOCKED: ' + threat;
+      process.stdout.write(msg);
+      process.stderr.write(msg);
       process.exit(2);
     }
   } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "description": "MCP security proxy \u00e2\u20ac\u201d protect any MCP server with policies, input validation, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {