@solongate/proxy 0.22.0 → 0.23.1

package/dist/index.js

@@ -566,79 +566,10 @@ function installHooks(selectedTools = []) {
     console.log(`  Created ${settingsPath}`);
     activatedNames.push(client.name);
   }
-  const protectedDirs = [".solongate", ...clients.map((c3) => c3.dir)];
-  try {
-    if (process.platform === "win32") {
-      for (const dir of protectedDirs) {
-        const fullDir = resolve2(dir);
-        if (existsSync3(fullDir)) {
-          try {
-            try {
-              execSync(`powershell.exe -Command "icacls '${fullDir}' /remove:d '*S-1-1-0' /T /Q"`, { stdio: "ignore" });
-            } catch {
-            }
-            try {
-              execSync(`powershell.exe -Command "icacls '${fullDir}' /deny '*S-1-1-0:(OI)(CI)(DE,DC,WD,AD,WA)' /T /Q"`, { stdio: "ignore" });
-            } catch {
-            }
-            execSync(`attrib +R /S /D "${fullDir}"`, { stdio: "ignore" });
-          } catch {
-          }
-        }
-      }
-    } else {
-      for (const dir of protectedDirs) {
-        const fullDir = resolve2(dir);
-        if (existsSync3(fullDir)) {
-          try {
-            execSync(`chmod -R a-w "${fullDir}"`, { stdio: "ignore" });
-          } catch {
-          }
-          try {
-            execSync(`chattr +i -R "${fullDir}"`, { stdio: "ignore" });
-          } catch {
-          }
-        }
-      }
-    }
-    const protectedFiles = [".env", ".gitignore", ".mcp.json", "policy.json"];
-    for (const file of protectedFiles) {
-      const fullPath = resolve2(file);
-      if (existsSync3(fullPath)) {
-        if (process.platform === "win32") {
-          try {
-            execSync(`powershell.exe -Command "icacls '${fullPath}' /remove:d '*S-1-1-0' /Q"`, { stdio: "ignore" });
-          } catch {
-          }
-          try {
-            execSync(`powershell.exe -Command "icacls '${fullPath}' /deny '*S-1-1-0:(DE,WD,AD,WA)' /Q"`, { stdio: "ignore" });
-          } catch {
-          }
-          try {
-            execSync(`attrib +R "${fullPath}"`, { stdio: "ignore" });
-          } catch {
-          }
-        } else {
-          try {
-            execSync(`chmod a-w "${fullPath}"`, { stdio: "ignore" });
-          } catch {
-          }
-          try {
-            execSync(`chattr +i "${fullPath}"`, { stdio: "ignore" });
-          } catch {
-          }
-        }
-      }
-    }
-    console.log("  OS-level DENY protection applied (icacls/chmod)");
-    console.log("  Protected files: .env, .gitignore, .mcp.json, policy.json");
-  } catch {
-  }
   console.log("");
   console.log("  Hooks installed:");
   console.log("  guard.mjs  \u2192 blocks policy-violating calls (pre-execution)");
   console.log("  audit.mjs  \u2192 logs all calls to dashboard (post-execution)");
-  console.log("  File system \u2192 read-only (OS-level protection)");
   console.log(`  Activated for: ${activatedNames.join(", ")}`);
 }
 function ensureEnvFile() {
@@ -4798,7 +4729,7 @@ var init_stage1_rules2 = __esm3({
         patterns: [
           /\bignore\s+(all\s+)?(previous|prior|above|earlier)\s+(instructions?|prompts?|rules?|directives?)\b/i,
           /\bdisregard\s+(all\s+)?(previous|prior|above|earlier|your)\s+(instructions?|prompts?|rules?|guidelines?)\b/i,
-          /\bforget\s+(all\s+)?(your|the|previous|prior)\s+(instructions?|rules?|constraints?|guidelines?)\b/i,
+          /\bforget\s+(all\s+|everything\s+)?(your|the|previous|prior|above|earlier)\b/i,
           /\boverride\s+(the\s+)?(system|previous|current)\s+(prompt|instructions?|rules?|settings?)\b/i,
           /\bdo\s+not\s+follow\s+(your|the|any)\s+(instructions?|rules?|guidelines?)\b/i,
           /\bcancel\s+(all\s+)?(prior|previous)\s+(directives?|instructions?)\b/i,
@@ -4857,13 +4788,13 @@ var init_stage1_rules2 = __esm3({
         name: "multi_language",
         weight: 0.7,
         patterns: [
-          /\bignor(iere|a|e[zs]?)\s+(alle|todas?|toutes?|tüm|все)\b/i,
-          /\bигнорируйте\b/i,
-          /\byoksay\b/i,
-          /\bvorherigen?\s+Anweisungen\b/i,
-          /\binstrucciones\s+anteriores\b/i,
-          /\binstructions?\s+pr[eé]c[eé]dentes?\b/i,
-          /\bönceki\s+talimatlar\b/i
+          /ignor(iere|a|e[zs]?)\s+(alle|todas?|toutes?|tüm|все)/iu,
+          /игнорируйте/iu,
+          /yoksay/iu,
+          /vorherigen?\s+Anweisungen/iu,
+          /instrucciones\s+anteriores/iu,
+          /instructions?\s+pr[eé]c[eé]dentes?/iu,
+          /önceki\s+talimatlar/iu
         ]
       }
     ];
@@ -5401,8 +5332,26 @@ var SHELL_INJECTION_PATTERNS = [
   // URL-encoded tab
   /\r\n/,
   // CRLF injection
-  /\n/
+  /\n/,
   // Newline (command separator on Unix)
+  /\bbash\s+-c\b/i,
+  // Subshell wrapper: bash -c
+  /\bsh\s+-c\b/i,
+  // Subshell wrapper: sh -c
+  /\bzsh\s+-c\b/i,
+  // Subshell wrapper: zsh -c
+  /\bsource\s+/i,
+  // Source command
+  /\bprintenv\b/i,
+  // Environment variable leak
+  /\$'\\x[0-9a-f]/i,
+  // Hex escape in bash: $'\x72\x6d'
+  /\bxargs\b/i,
+  // xargs chaining
+  /\bbase64\s+-d\b/i,
+  // Base64 decode pipe
+  /\bxxd\s+-r\b/i
+  // Hex decode pipe
 ];
 function detectShellInjection(value) {
   for (const pattern of SHELL_INJECTION_PATTERNS) {

package/dist/init.js

@@ -273,79 +273,10 @@ function installHooks(selectedTools = []) {
     console.log(`  Created ${settingsPath}`);
     activatedNames.push(client.name);
   }
-  const protectedDirs = [".solongate", ...clients.map((c) => c.dir)];
-  try {
-    if (process.platform === "win32") {
-      for (const dir of protectedDirs) {
-        const fullDir = resolve(dir);
-        if (existsSync(fullDir)) {
-          try {
-            try {
-              execSync(`powershell.exe -Command "icacls '${fullDir}' /remove:d '*S-1-1-0' /T /Q"`, { stdio: "ignore" });
-            } catch {
-            }
-            try {
-              execSync(`powershell.exe -Command "icacls '${fullDir}' /deny '*S-1-1-0:(OI)(CI)(DE,DC,WD,AD,WA)' /T /Q"`, { stdio: "ignore" });
-            } catch {
-            }
-            execSync(`attrib +R /S /D "${fullDir}"`, { stdio: "ignore" });
-          } catch {
-          }
-        }
-      }
-    } else {
-      for (const dir of protectedDirs) {
-        const fullDir = resolve(dir);
-        if (existsSync(fullDir)) {
-          try {
-            execSync(`chmod -R a-w "${fullDir}"`, { stdio: "ignore" });
-          } catch {
-          }
-          try {
-            execSync(`chattr +i -R "${fullDir}"`, { stdio: "ignore" });
-          } catch {
-          }
-        }
-      }
-    }
-    const protectedFiles = [".env", ".gitignore", ".mcp.json", "policy.json"];
-    for (const file of protectedFiles) {
-      const fullPath = resolve(file);
-      if (existsSync(fullPath)) {
-        if (process.platform === "win32") {
-          try {
-            execSync(`powershell.exe -Command "icacls '${fullPath}' /remove:d '*S-1-1-0' /Q"`, { stdio: "ignore" });
-          } catch {
-          }
-          try {
-            execSync(`powershell.exe -Command "icacls '${fullPath}' /deny '*S-1-1-0:(DE,WD,AD,WA)' /Q"`, { stdio: "ignore" });
-          } catch {
-          }
-          try {
-            execSync(`attrib +R "${fullPath}"`, { stdio: "ignore" });
-          } catch {
-          }
-        } else {
-          try {
-            execSync(`chmod a-w "${fullPath}"`, { stdio: "ignore" });
-          } catch {
-          }
-          try {
-            execSync(`chattr +i "${fullPath}"`, { stdio: "ignore" });
-          } catch {
-          }
-        }
-      }
-    }
-    console.log("  OS-level DENY protection applied (icacls/chmod)");
-    console.log("  Protected files: .env, .gitignore, .mcp.json, policy.json");
-  } catch {
-  }
   console.log("");
   console.log("  Hooks installed:");
   console.log("  guard.mjs  \u2192 blocks policy-violating calls (pre-execution)");
   console.log("  audit.mjs  \u2192 logs all calls to dashboard (post-execution)");
-  console.log("  File system \u2192 read-only (OS-level protection)");
   console.log(`  Activated for: ${activatedNames.join(", ")}`);
 }
 function ensureEnvFile() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.22.0",
+  "version": "0.23.1",
   "description": "MCP security proxy — protect any MCP server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {