@solongate/proxy 0.25.6 → 0.25.7

package/dist/index.js

@@ -6149,7 +6149,7 @@ DENY if the tool call could, directly or indirectly:
   - Shell glob patterns (e.g., "cred*" could match "credentials.json")
   - Command substitution ($(...), backticks)
   - Process substitution (<(cat file), <(command file)) \u2014 ALWAYS check inside <(...) for protected files
-  - Variable interpolation or string concatenation (e.g., f=".en"; cat ${f}v builds ".env")
+  - Variable interpolation or string concatenation (e.g., f=".en"; cat \${f}v builds ".env")
   - Partial variable construction \u2014 if shell variables are concatenated to form a filename, analyze the RESULT
   - Input redirection (< file)
   - Script files that might read protected files
@@ -6165,7 +6165,7 @@ DENY if the tool call could, directly or indirectly:
 CRITICAL patterns to watch for:
 - <(cat .env) or <(cat ANYPROTECTEDFILE) \u2014 process substitution ALWAYS reads the file
 - Compound commands with && or ; where ANY part touches a protected file \u2014 DENY the whole thing
-- Variable tricks like f=".en"; cat ${f}v \u2014 mentally evaluate the variable to see if it resolves to a protected filename
+- Variable tricks like f=".en"; cat \${f}v \u2014 mentally evaluate the variable to see if it resolves to a protected filename
 - tar/zip/cp that archives a protected file, even if the second command reads the archive \u2014 DENY both
 
 ALLOW if:
@@ -6930,7 +6930,7 @@ ${msg.content.text}`;
       if (rule.effect === "DENY" && rule.enabled !== false) {
         const denied = rule.filenameConstraints?.denied;
         if (denied) {
-          for (const f2 of denied) files.add(f2);
+          for (const f of denied) files.add(f);
         }
       }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.25.6",
+  "version": "0.25.7",
   "description": "MCP security proxy — protect any MCP server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {