@solongate/proxy 0.45.0 → 0.47.0

package/hooks/guard.bundled.mjs

@@ -6763,7 +6763,7 @@ function extractPaths(args) {
     if (/^https?:\/\//i.test(s))
       continue;
     if (s.includes("/") || s.includes("\\") || s.startsWith("."))
-      paths.push(s);
+      paths.push(s.replace(/\\/g, "/"));
   }
   return paths;
 }
@@ -6967,7 +6967,7 @@ async function getOpaWasmBytes(policy) {
   try {
     const res = await fetch(
       API_URL + "/api/v1/policies/" + encodeURIComponent(policy.id) + "/wasm",
-      { headers: AUTH_HEADERS, signal: AbortSignal.timeout(2e3) }
+      { headers: AUTH_HEADERS, signal: AbortSignal.timeout(8e3) }
     );
     if (!res.ok)
       return stale;
@@ -7159,7 +7159,7 @@ process.stdin.on("end", async () => {
       }
       if (!dashboardPolicy) {
         try {
-          const res = await fetch(API_URL + "/api/v1/policies/active?agent_id=" + encodeURIComponent(AGENT_ID || ""), { headers: AUTH_HEADERS, signal: AbortSignal.timeout(2e3) });
+          const res = await fetch(API_URL + "/api/v1/policies/active?agent_id=" + encodeURIComponent(AGENT_ID || ""), { headers: AUTH_HEADERS, signal: AbortSignal.timeout(8e3) });
           if (res.ok) {
             const body = await res.json();
             if (body && body.policy) {

package/hooks/guard.mjs

@@ -414,7 +414,10 @@ function extractPaths(args) {
   const paths = [];
   for (const s of scanStrings(args)) {
     if (/^https?:\/\//i.test(s)) continue;
-    if (s.includes('/') || s.includes('\\') || s.startsWith('.')) paths.push(s);
+    // Normalize Windows backslashes to forward slashes so paths match the
+    // compiled Rego patterns (which are also normalized to "/"). OPA glob.match
+    // does no separator translation, so raw "C:\..." never matched "/" patterns.
+    if (s.includes('/') || s.includes('\\') || s.startsWith('.')) paths.push(s.replace(/\\/g, '/'));
   }
   return paths;
 }
@@ -731,7 +734,7 @@ async function getOpaWasmBytes(policy) {
   try {
     const res = await fetch(
       API_URL + '/api/v1/policies/' + encodeURIComponent(policy.id) + '/wasm',
-      { headers: AUTH_HEADERS, signal: AbortSignal.timeout(2000) },
+      { headers: AUTH_HEADERS, signal: AbortSignal.timeout(8000) },
     );
     if (!res.ok) return stale; // API has no compiled WASM right now → last known good
     const bundle = Buffer.from(await res.arrayBuffer());
@@ -1000,7 +1003,7 @@ process.stdin.on('end', async () => {
       // Refresh from API if cache expired
       if (!dashboardPolicy) {
         try {
-          const res = await fetch(API_URL + '/api/v1/policies/active?agent_id=' + encodeURIComponent(AGENT_ID || ''), { headers: AUTH_HEADERS, signal: AbortSignal.timeout(2000) });
+          const res = await fetch(API_URL + '/api/v1/policies/active?agent_id=' + encodeURIComponent(AGENT_ID || ''), { headers: AUTH_HEADERS, signal: AbortSignal.timeout(8000) });
           if (res.ok) {
             const body = await res.json();
             if (body && body.policy) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.45.0",
+  "version": "0.47.0",
   "description": "AI tool security proxy — protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {