@solongate/proxy 0.42.0 → 0.42.2

package/dist/index.js

@@ -6239,6 +6239,7 @@ var SolonGateProxy = class {
               arguments: args ?? {},
               decision: "DENY",
               reason: `Prompt injection detected: ${threats}`,
+              permission: guessPermission(name),
               evaluationTimeMs: 0,
               promptInjection: piResult,
               agent_id: this.agentId ?? void 0,
@@ -6334,6 +6335,7 @@ var SolonGateProxy = class {
             arguments: args ?? {},
             decision,
             reason,
+            permission: guessPermission(name),
             matchedRule,
             evaluationTimeMs,
             promptInjection: piResult,

package/dist/lib.js

@@ -4565,6 +4565,7 @@ var SolonGateProxy = class {
               arguments: args ?? {},
               decision: "DENY",
               reason: `Prompt injection detected: ${threats}`,
+              permission: guessPermission(name),
               evaluationTimeMs: 0,
               promptInjection: piResult,
               agent_id: this.agentId ?? void 0,
@@ -4660,6 +4661,7 @@ var SolonGateProxy = class {
             arguments: args ?? {},
             decision,
             reason,
+            permission: guessPermission(name),
             matchedRule,
             evaluationTimeMs,
             promptInjection: piResult,

package/hooks/audit.mjs

@@ -21,6 +21,14 @@ function loadEnvKey(dir) {
   } catch { return {}; }
 }
 
+function guessPermission(toolName) {
+  const name = (toolName || '').toLowerCase();
+  if (name.includes('exec') || name.includes('shell') || name.includes('run') || name.includes('eval') || name === 'bash') return 'EXECUTE';
+  if (name.includes('fetch') || name.includes('http') || name.includes('request') || name.includes('curl') || name.includes('network') || name.includes('download') || name.includes('upload') || name === 'websearch') return 'NETWORK';
+  if (name.includes('write') || name.includes('create') || name.includes('delete') || name.includes('update') || name.includes('set') || name.includes('edit') || name.includes('remove') || name.includes('insert')) return 'WRITE';
+  return 'READ';
+}
+
 const dotenv = loadEnvKey(process.cwd());
 const API_KEY = process.env.SOLONGATE_API_KEY || dotenv.SOLONGATE_API_KEY || '';
 const API_URL = process.env.SOLONGATE_API_URL || dotenv.SOLONGATE_API_URL || 'https://api.solongate.com';
@@ -102,6 +110,7 @@ process.stdin.on('end', async () => {
         arguments: argsSummary,
         decision: hasError ? 'DENY' : 'ALLOW',
         reason: guardDenied ? 'blocked by policy guard' : hasError ? 'tool returned error' : 'allowed',
+        permission: guessPermission(toolName),
         source: `${AGENT_ID}-hook`,
         evaluationTimeMs: 0,
         agent_id: AGENT_ID,

package/hooks/guard.mjs

@@ -35,6 +35,14 @@ function loadEnvKey(dir) {
   } catch { return {}; }
 }
 
+function guessPermission(toolName) {
+  const name = (toolName || '').toLowerCase();
+  if (name.includes('exec') || name.includes('shell') || name.includes('run') || name.includes('eval') || name === 'bash') return 'EXECUTE';
+  if (name.includes('fetch') || name.includes('http') || name.includes('request') || name.includes('curl') || name.includes('network') || name.includes('download') || name.includes('upload') || name === 'websearch') return 'NETWORK';
+  if (name.includes('write') || name.includes('create') || name.includes('delete') || name.includes('update') || name.includes('set') || name.includes('edit') || name.includes('remove') || name.includes('insert')) return 'WRITE';
+  return 'READ';
+}
+
 const hookCwdEarly = process.cwd();
 const dotenv = loadEnvKey(hookCwdEarly);
 const API_KEY = process.env.SOLONGATE_API_KEY || dotenv.SOLONGATE_API_KEY || '';
@@ -407,6 +415,7 @@ process.stdin.on('end', async () => {
             body: JSON.stringify({
               tool: data.tool_name || '', arguments: args,
               decision: 'DENY', reason,
+              permission: guessPermission(data.tool_name || ''),
               source: `${AGENT_ID}-guard`,
               agent_id: AGENT_ID, agent_name: AGENT_NAME,
             }),
@@ -1054,6 +1063,7 @@ process.stdin.on('end', async () => {
               arguments: args,
               decision: isLogOnly ? 'ALLOW' : 'DENY',
               reason: msg,
+              permission: guessPermission(toolName),
               source: `${AGENT_ID}-guard`,
               agent_id: AGENT_ID, agent_name: AGENT_NAME,
               pi_detected: true,
@@ -1115,6 +1125,7 @@ process.stdin.on('end', async () => {
               arguments: args,
               decision: 'ALLOW',
               reason: 'Prompt injection detected but below threshold (trust: ' + (piResult.trustScore * 100).toFixed(0) + '%)',
+              permission: guessPermission(toolName),
               source: `${AGENT_ID}-guard`,
               agent_id: AGENT_ID, agent_name: AGENT_NAME,
               pi_detected: true,
@@ -1302,6 +1313,7 @@ Respond with ONLY valid JSON: {"decision": "ALLOW" or "DENY", "reason": "brief e
           const logEntry = {
             tool: toolName, arguments: args,
             decision: 'DENY', reason,
+            permission: guessPermission(toolName),
             source: `${AGENT_ID}-guard`,
             agent_id: AGENT_ID, agent_name: AGENT_NAME,
           };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.42.0",
+  "version": "0.42.2",
   "description": "AI tool security proxy — protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {