@solongate/proxy 0.81.12 → 0.81.14

package/dist/index.js

@@ -10923,15 +10923,18 @@ function dlpGlobToRe(glob, flags) {
 function redactString(s, cfg) {
   if (!cfg || typeof s !== "string" || !s) return s;
   const allow = new Set(cfg.patterns);
+  const NUL = String.fromCharCode(0);
+  const labels = [];
+  const stash = (label) => NUL + (labels.push(label) - 1) + NUL;
   let out2 = s;
-  for (const p of DLP_PATTERNS) if (allow.has(p.name)) out2 = out2.replace(p.re, `[REDACTED: ${p.name}]`);
+  for (const p of DLP_PATTERNS) if (allow.has(p.name)) out2 = out2.replace(p.re, () => stash(`[REDACTED: ${p.name}]`));
   for (const c2 of cfg.custom) {
     try {
-      out2 = out2.replace(dlpGlobToRe(c2.re, "gi"), `[REDACTED: ${c2.name || "custom"}]`);
+      out2 = out2.replace(dlpGlobToRe(c2.re, "gi"), () => stash(`[REDACTED: ${c2.name || "custom"}]`));
     } catch {
     }
   }
-  return out2;
+  return out2.replace(new RegExp(NUL + "(\\d+)" + NUL, "g"), (_, i) => labels[+i] || "");
 }
 function redactDeep(value, cfg) {
   const ghost = cfg && Array.isArray(cfg.ghost) ? cfg.ghost : null;
@@ -15241,7 +15244,7 @@ ${msg.content.text}`;
 
 // src/index.ts
 init_cli_utils();
-var CLI_SUBCOMMANDS = /* @__PURE__ */ new Set(["login", "logout", "shield", "create", "inject", "pull", "push", "list", "ls", "logs-server", "local-logs", "policy", "ratelimit", "dlp", "stats", "audit", "agents", "agent", "doctor", "watch", "keys", "mcp", "alerts", "webhooks", "ui", "dashboard", "tui"]);
+var CLI_SUBCOMMANDS = /* @__PURE__ */ new Set(["login", "logout", "shield", "create", "inject", "pull", "push", "list", "ls", "logs-server", "local-logs", "policy", "ratelimit", "dlp", "stats", "audit", "agents", "agent", "doctor", "watch", "keys", "mcp", "alerts", "webhooks", "dataroom", "ui", "dashboard", "tui"]);
 var IS_HUMAN_CLI = process.argv.length <= 2 || CLI_SUBCOMMANDS.has(process.argv[2] ?? "");
 if (!IS_HUMAN_CLI) {
   console.log = (...args) => {
@@ -15285,7 +15288,7 @@ async function main5() {
     printWelcome();
     return;
   }
-  if (subcommand === "ui" || subcommand === "dashboard" || subcommand === "tui") {
+  if (subcommand === "dataroom" || subcommand === "ui" || subcommand === "dashboard" || subcommand === "tui") {
     const { launchTui: launchTui2 } = await Promise.resolve().then(() => (init_tui(), tui_exports));
     await launchTui2();
     return;

package/dist/shield.js

@@ -164,15 +164,18 @@ function dlpGlobToRe(glob, flags) {
 function redactString(s, cfg) {
   if (!cfg || typeof s !== "string" || !s) return s;
   const allow = new Set(cfg.patterns);
+  const NUL = String.fromCharCode(0);
+  const labels = [];
+  const stash = (label) => NUL + (labels.push(label) - 1) + NUL;
   let out = s;
-  for (const p of DLP_PATTERNS) if (allow.has(p.name)) out = out.replace(p.re, `[REDACTED: ${p.name}]`);
+  for (const p of DLP_PATTERNS) if (allow.has(p.name)) out = out.replace(p.re, () => stash(`[REDACTED: ${p.name}]`));
   for (const c of cfg.custom) {
     try {
-      out = out.replace(dlpGlobToRe(c.re, "gi"), `[REDACTED: ${c.name || "custom"}]`);
+      out = out.replace(dlpGlobToRe(c.re, "gi"), () => stash(`[REDACTED: ${c.name || "custom"}]`));
     } catch {
     }
   }
-  return out;
+  return out.replace(new RegExp(NUL + "(\\d+)" + NUL, "g"), (_, i) => labels[+i] || "");
 }
 function redactDeep(value, cfg) {
   const ghost = cfg && Array.isArray(cfg.ghost) ? cfg.ghost : null;

package/hooks/audit.mjs

@@ -330,16 +330,19 @@ function dlpGlobToRe(glob, flags) {
   return new RegExp(re, flags);
 }
 function dlpRedactText(text, cfg) {
-  if (!cfg || typeof text !== 'string' || !text) return text;
+  if (!cfg || typeof text !== "string" || !text) return text;
   const allow = new Set(Array.isArray(cfg.patterns) ? cfg.patterns : []);
+  const NUL = String.fromCharCode(0);
+  const labels = [];
+  const stash = (label) => NUL + (labels.push(label) - 1) + NUL;
   let out = text;
   for (const p of DLP_PATTERNS) {
-    if (allow.has(p.name)) out = out.replace(p.re, '[REDACTED:' + p.name + ']');
+    if (allow.has(p.name)) out = out.replace(p.re, () => stash("[REDACTED:" + p.name + "]"));
   }
   for (const c of Array.isArray(cfg.custom) ? cfg.custom : []) {
-    try { out = out.replace(dlpGlobToRe(c.re, 'gi'), '[REDACTED:' + (c.name || 'custom') + ']'); } catch { /* skip invalid */ }
+    try { out = out.replace(dlpGlobToRe(c.re, "gi"), () => stash("[REDACTED:" + (c.name || "custom") + "]")); } catch {}
   }
-  return out;
+  return out.replace(new RegExp(NUL + "(\\d+)" + NUL, "g"), (_, i) => labels[+i] || "");
 }
 
 // Best-effort extraction of the model-visible text from a tool_response. Shapes

package/hooks/shield.mjs

@@ -171,14 +171,17 @@ function dlpGlobToRe(glob, flags) {
   return new RegExp(re, flags);
 }
 function redactString(s, cfg) {
-  if (!cfg || typeof s !== 'string' || !s) return s;
+  if (!cfg || typeof s !== "string" || !s) return s;
   const allow = new Set(cfg.patterns);
+  const NUL = String.fromCharCode(0);
+  const labels = [];
+  const stash = (label) => NUL + (labels.push(label) - 1) + NUL;
   let out = s;
-  for (const p of DLP_PATTERNS) if (allow.has(p.name)) out = out.replace(p.re, `[REDACTED: ${p.name}]`);
+  for (const p of DLP_PATTERNS) if (allow.has(p.name)) out = out.replace(p.re, () => stash(`[REDACTED: ${p.name}]`));
   for (const c of cfg.custom) {
-    try { out = out.replace(dlpGlobToRe(c.re, 'gi'), `[REDACTED: ${c.name || 'custom'}]`); } catch { /* skip */ }
+    try { out = out.replace(dlpGlobToRe(c.re, "gi"), () => stash(`[REDACTED: ${c.name || "custom"}]`)); } catch {}
   }
-  return out;
+  return out.replace(new RegExp(NUL + "(\\d+)" + NUL, "g"), (_, i) => labels[+i] || "");
 }
 
 function redactDeep(value, cfg) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.12",
+  "version": "0.81.14",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {