@solongate/proxy 0.81.5 → 0.81.6

package/hooks/audit.mjs

@@ -497,6 +497,10 @@ try { input += readFileSync(0, 'utf-8'); } catch {}
           if (tr && typeof tr === 'object' && typeof tr.stdout === 'string') updated = { ...tr, stdout: out };
           else if (tr && typeof tr === 'object' && typeof tr.content === 'string') updated = { ...tr, content: out };
           else if (tr && typeof tr === 'object' && Array.isArray(tr.content)) updated = { ...tr, content: [{ type: 'text', text: out }] };
+          // Read / NotebookRead nest the file body at file.content. It's a STRUCTURED
+          // result, so a bare-string replacement is rejected ("PostToolUse:Read hook
+          // warning") and the raw secret leaks through — preserve the shape instead.
+          else if (tr && typeof tr === 'object' && tr.file && typeof tr.file.content === 'string') updated = { ...tr, file: { ...tr.file, content: out } };
           else updated = out;
           EMITTED_PAYLOAD = JSON.stringify({
             hookSpecificOutput: { hookEventName: 'PostToolUse', updatedToolOutput: updated },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.5",
+  "version": "0.81.6",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {