@solongate/proxy 0.81.1 → 0.81.2

package/hooks/audit.mjs

@@ -392,8 +392,13 @@ const AGENT_NAME = process.argv[3] || 'Claude Code';
 if (!API_KEY || !(API_KEY.startsWith('sg_live_') || API_KEY.startsWith('sg_test_'))) process.exit(0);
 
 let input = '';
-process.stdin.on('data', c => input += c);
-process.stdin.on('end', async () => {
+// Read stdin SYNCHRONOUSLY (fd 0). Calling process.exit() from inside the
+// process.stdin stream 'end' callback aborts on Windows + Node 24 with
+// `Assertion failed: !(handle->flags & UV_HANDLE_CLOSING), file src\win\async.c`
+// (libuv double-closes the stdin pipe handle during teardown). Reading fd 0 to
+// EOF avoids creating that handle, so the exits below tear down cleanly.
+try { input += readFileSync(0, 'utf-8'); } catch {}
+;(async () => {
   try {
     const data = JSON.parse(input);
     let EMITTED_PAYLOAD = null;
@@ -581,4 +586,4 @@ process.stdin.on('end', async () => {
   } catch {
     process.exit(0);
   }
-});
+})();

package/hooks/guard.bundled.mjs

@@ -7654,8 +7654,13 @@ function readReferencedFiles(args, cwd) {
   }
   return out;
 }
-process.stdin.on("data", (c) => input += c);
-process.stdin.on("end", async () => {
+if (!REFRESH_MODE) {
+  try {
+    input += readFileSync(0, "utf-8");
+  } catch {
+  }
+}
+(async () => {
   if (REFRESH_MODE)
     return;
   if (process.env.SOLONGATE_DEBUG) {
@@ -7898,4 +7903,4 @@ process.stdin.on("end", async () => {
   }
   await maybeSelfUpdate();
   allowTool();
-});
+})();

package/hooks/guard.mjs

@@ -1402,8 +1402,16 @@ function readReferencedFiles(args, cwd) {
   return out;
 }
 
-process.stdin.on('data', c => input += c);
-process.stdin.on('end', async () => {
+// Read stdin SYNCHRONOUSLY (fd 0) instead of via the process.stdin stream. On
+// Windows + Node 24, calling process.exit() from inside the stdin stream's 'end'
+// callback aborts with `Assertion failed: !(handle->flags & UV_HANDLE_CLOSING),
+// file src\win\async.c` — libuv double-closes the stdin pipe handle mid-teardown,
+// the hook crashes before its exit code lands, and Claude Code treats the DENY as
+// a non-blocking hook failure (so the block never applies). Reading fd 0 to EOF
+// synchronously never creates that pipe handle, and the exit below no longer runs
+// inside a stream callback, so the loop tears down cleanly.
+if (!REFRESH_MODE) { try { input += readFileSync(0, 'utf-8'); } catch {} }
+;(async () => {
   // Background-refresh invocation has no tool call to evaluate — it already ran
   // refreshPolicyCache() at startup; do nothing on the (empty) stdin.
   if (REFRESH_MODE) return;
@@ -1709,4 +1717,4 @@ process.stdin.on('end', async () => {
   } catch {}
   await maybeSelfUpdate();
   allowTool();
-});
+})();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.1",
+  "version": "0.81.2",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {