@solongate/proxy 0.41.0 → 0.42.1

package/dist/create.js

@@ -213,10 +213,8 @@ console.log('MCP servers communicate over stdin/stdout \u2014 not HTTP.');
 console.log('You need an MCP client to connect:');
 console.log('');
 console.log('  Claude Code    Open this folder, .mcp.json is auto-detected');
-console.log('  Claude Desktop Add to Settings > MCP Servers');
-console.log('  Windsurf       Open this folder, .mcp.json is auto-detected');
-console.log('  Cline          VS Code extension, add server in settings');
-console.log('  Zed            Add to settings.json under mcp_servers');
+console.log('  Gemini CLI     Open this folder, .mcp.json is auto-detected');
+console.log('  OpenClaw       Uses openclaw.plugin.json config');
 console.log('');
 console.log('Press Ctrl+C to stop.');
 `

package/dist/index.js

@@ -1618,10 +1618,8 @@ console.log('MCP servers communicate over stdin/stdout \u2014 not HTTP.');
 console.log('You need an MCP client to connect:');
 console.log('');
 console.log('  Claude Code    Open this folder, .mcp.json is auto-detected');
-console.log('  Claude Desktop Add to Settings > MCP Servers');
-console.log('  Windsurf       Open this folder, .mcp.json is auto-detected');
-console.log('  Cline          VS Code extension, add server in settings');
-console.log('  Zed            Add to settings.json under mcp_servers');
+console.log('  Gemini CLI     Open this folder, .mcp.json is auto-detected');
+console.log('  OpenClaw       Uses openclaw.plugin.json config');
 console.log('');
 console.log('Press Ctrl+C to stop.');
 `
@@ -2689,9 +2687,23 @@ var TrustLevel = {
 var Permission = {
   READ: "READ",
   WRITE: "WRITE",
-  EXECUTE: "EXECUTE"
+  EXECUTE: "EXECUTE",
+  NETWORK: "NETWORK"
 };
-var PermissionSchema = z.enum(["READ", "WRITE", "EXECUTE"]);
+var PermissionSchema = z.enum(["READ", "WRITE", "EXECUTE", "NETWORK"]);
+function guessPermission(toolName) {
+  const name = toolName.toLowerCase();
+  if (name.includes("exec") || name.includes("shell") || name.includes("run") || name.includes("eval")) {
+    return Permission.EXECUTE;
+  }
+  if (name.includes("fetch") || name.includes("http") || name.includes("request") || name.includes("curl") || name.includes("network") || name.includes("download") || name.includes("upload")) {
+    return Permission.NETWORK;
+  }
+  if (name.includes("write") || name.includes("create") || name.includes("delete") || name.includes("update") || name.includes("set") || name.includes("edit") || name.includes("remove") || name.includes("insert")) {
+    return Permission.WRITE;
+  }
+  return Permission.READ;
+}
 var NO_PERMISSIONS = Object.freeze(
   /* @__PURE__ */ new Set()
 );
@@ -4573,7 +4585,7 @@ async function interceptToolCall(params, upstreamCall, options) {
     toolName: params.name,
     serverName: "default",
     arguments: params.arguments ?? {},
-    requiredPermission: Permission.EXECUTE,
+    requiredPermission: guessPermission(params.name),
     timestamp
   };
   if (options.rateLimiter) {
@@ -6227,6 +6239,7 @@ var SolonGateProxy = class {
               arguments: args ?? {},
               decision: "DENY",
               reason: `Prompt injection detected: ${threats}`,
+              permission: guessPermission(name),
               evaluationTimeMs: 0,
               promptInjection: piResult,
               agent_id: this.agentId ?? void 0,
@@ -6322,6 +6335,7 @@ var SolonGateProxy = class {
             arguments: args ?? {},
             decision,
             reason,
+            permission: guessPermission(name),
             matchedRule,
             evaluationTimeMs,
             promptInjection: piResult,
@@ -6483,14 +6497,7 @@ ${msg.content.text}`;
    * Guess tool permissions from tool name.
    */
   guessPermissions(toolName) {
-    const name = toolName.toLowerCase();
-    if (name.includes("exec") || name.includes("shell") || name.includes("run") || name.includes("eval")) {
-      return ["EXECUTE"];
-    }
-    if (name.includes("write") || name.includes("create") || name.includes("delete") || name.includes("update") || name.includes("set")) {
-      return ["WRITE"];
-    }
-    return ["READ"];
+    return [guessPermission(toolName)];
   }
   /**
    * Register the upstream MCP server to the SolonGate Cloud API.

package/dist/lib.js

@@ -634,9 +634,23 @@ var TrustLevel = {
 var Permission = {
   READ: "READ",
   WRITE: "WRITE",
-  EXECUTE: "EXECUTE"
+  EXECUTE: "EXECUTE",
+  NETWORK: "NETWORK"
 };
-var PermissionSchema = z.enum(["READ", "WRITE", "EXECUTE"]);
+var PermissionSchema = z.enum(["READ", "WRITE", "EXECUTE", "NETWORK"]);
+function guessPermission(toolName) {
+  const name = toolName.toLowerCase();
+  if (name.includes("exec") || name.includes("shell") || name.includes("run") || name.includes("eval")) {
+    return Permission.EXECUTE;
+  }
+  if (name.includes("fetch") || name.includes("http") || name.includes("request") || name.includes("curl") || name.includes("network") || name.includes("download") || name.includes("upload")) {
+    return Permission.NETWORK;
+  }
+  if (name.includes("write") || name.includes("create") || name.includes("delete") || name.includes("update") || name.includes("set") || name.includes("edit") || name.includes("remove") || name.includes("insert")) {
+    return Permission.WRITE;
+  }
+  return Permission.READ;
+}
 var NO_PERMISSIONS = Object.freeze(
   /* @__PURE__ */ new Set()
 );
@@ -2694,7 +2708,7 @@ async function interceptToolCall(params, upstreamCall, options) {
     toolName: params.name,
     serverName: "default",
     arguments: params.arguments ?? {},
-    requiredPermission: Permission.EXECUTE,
+    requiredPermission: guessPermission(params.name),
     timestamp
   };
   if (options.rateLimiter) {
@@ -4551,6 +4565,7 @@ var SolonGateProxy = class {
               arguments: args ?? {},
               decision: "DENY",
               reason: `Prompt injection detected: ${threats}`,
+              permission: guessPermission(name),
               evaluationTimeMs: 0,
               promptInjection: piResult,
               agent_id: this.agentId ?? void 0,
@@ -4646,6 +4661,7 @@ var SolonGateProxy = class {
             arguments: args ?? {},
             decision,
             reason,
+            permission: guessPermission(name),
             matchedRule,
             evaluationTimeMs,
             promptInjection: piResult,
@@ -4807,14 +4823,7 @@ ${msg.content.text}`;
    * Guess tool permissions from tool name.
    */
   guessPermissions(toolName) {
-    const name = toolName.toLowerCase();
-    if (name.includes("exec") || name.includes("shell") || name.includes("run") || name.includes("eval")) {
-      return ["EXECUTE"];
-    }
-    if (name.includes("write") || name.includes("create") || name.includes("delete") || name.includes("update") || name.includes("set")) {
-      return ["WRITE"];
-    }
-    return ["READ"];
+    return [guessPermission(toolName)];
   }
   /**
    * Register the upstream MCP server to the SolonGate Cloud API.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.41.0",
+  "version": "0.42.1",
   "description": "AI tool security proxy — protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {