@solongate/proxy 0.54.0 → 0.55.0

package/hooks/audit.mjs

@@ -127,13 +127,11 @@ function loadGhostPatterns() {
 function buildGhostOutput(toolName, toolInput, toolResponse, toolOutput, pats) {
   if (!Array.isArray(pats) || pats.length === 0) return null;
   const name = toolName || '';
-  const getText = () => {
-    if (typeof toolResponse === 'string') return toolResponse;
-    if (toolResponse && typeof toolResponse.stdout === 'string') return toolResponse.stdout;
-    if (toolResponse && typeof toolResponse.content === 'string') return toolResponse.content;
-    if (typeof toolOutput === 'string' && toolOutput) return toolOutput;
-    return null;
-  };
+  // Use the SAME broad extraction as DLP redaction (Read file.content, array
+  // content, stdout, …). Previously this was narrower, so ghost-strip silently
+  // skipped tool shapes DLP still scanned — a ghosted file then survived in a
+  // listing (e.g. the LS tool) even though names elsewhere got redacted.
+  const getText = () => extractOutputText(toolResponse, toolOutput);
   try {
     // Direct read of a hidden file → looks like it doesn't exist.
     if (name === 'Read' || name === 'NotebookRead') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.54.0",
+  "version": "0.55.0",
   "description": "AI tool security proxy — protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {