@solongate/proxy 0.8.0 → 0.8.1

package/dist/index.js

@@ -63,14 +63,44 @@ async function sendAuditLog(apiKey, apiUrl, entry) {
 `);
   }
 }
+function ensureCatchAllAllow(policy) {
+  const hasCatchAllAllow = policy.rules.some(
+    (r) => r.effect === "ALLOW" && r.toolPattern === "*" && r.enabled !== false
+  );
+  if (hasCatchAllAllow) return policy;
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  return {
+    ...policy,
+    rules: [
+      ...policy.rules,
+      {
+        id: "_solongate-catch-all-allow",
+        description: "Auto-added: allow everything not explicitly denied",
+        effect: "ALLOW",
+        priority: 9999,
+        toolPattern: "*",
+        minimumTrustLevel: "UNTRUSTED",
+        enabled: true,
+        createdAt: now,
+        updatedAt: now
+      }
+    ]
+  };
+}
 function loadPolicy(source) {
-  if (typeof source === "object") return source;
-  const filePath = resolve(source);
-  if (existsSync(filePath)) {
-    const content = readFileSync(filePath, "utf-8");
-    return JSON.parse(content);
+  let policy;
+  if (typeof source === "object") {
+    policy = source;
+  } else {
+    const filePath = resolve(source);
+    if (existsSync(filePath)) {
+      const content = readFileSync(filePath, "utf-8");
+      policy = JSON.parse(content);
+    } else {
+      return DEFAULT_POLICY;
+    }
   }
-  return DEFAULT_POLICY;
+  return ensureCatchAllAllow(policy);
 }
 function parseArgs(argv) {
   const args = argv.slice(2);
@@ -3944,7 +3974,7 @@ var PolicyRuleSchema2 = z2.object({
   effect: z2.enum(["ALLOW", "DENY"]),
   priority: z2.number().int().min(0).max(1e4).default(1e3),
   toolPattern: z2.string().min(1).max(512),
-  permission: z2.enum(["READ", "WRITE", "EXECUTE"]),
+  permission: z2.enum(["READ", "WRITE", "EXECUTE"]).optional(),
   minimumTrustLevel: z2.enum(["UNTRUSTED", "VERIFIED", "TRUSTED"]),
   argumentConstraints: z2.record(z2.unknown()).optional(),
   pathConstraints: z2.object({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "MCP security proxy — protect any MCP server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {