@solongate/proxy 0.81.75 → 0.81.76

package/dist/index.js

@@ -12667,6 +12667,7 @@ function redactDeep(value, cfg) {
   if (typeof value === "string") {
     let out2 = redactString(value, cfg);
     if (ghost && ghost.length) out2 = ghostStripLines(out2, ghost);
+    if (out2 === "" && value !== "") out2 = "\n";
     return out2;
   }
   if (Array.isArray(value)) {

package/dist/shield.js

@@ -182,6 +182,7 @@ function redactDeep(value, cfg) {
   if (typeof value === "string") {
     let out = redactString(value, cfg);
     if (ghost && ghost.length) out = ghostStripLines(out, ghost);
+    if (out === "" && value !== "") out = "\n";
     return out;
   }
   if (Array.isArray(value)) {

package/hooks/audit.mjs

@@ -565,6 +565,13 @@ try { input += readFileSync(0, 'utf-8'); } catch {}
           }
         }
         if (typeof out === 'string') {
+          // Never emit EMPTY content. When ghost/DLP stripping removes every line
+          // (e.g. a grep/cat that hit only hidden or secret lines) and the tool
+          // ALSO errored, the resulting tool_result is is_error:true with empty
+          // content — which the API rejects ("content cannot be empty if is_error
+          // is true") and hard-crashes the whole agent conversation. Fall back to
+          // a bare newline: still looks like empty output, but is non-empty.
+          if (out === '') out = '\n';
           // Preserve the tool's result SHAPE. Bash and other tools deliver a
           // STRUCTURED result ({ stdout, stderr, ... } or { content }); Claude
           // Code rejects a bare-string replacement for those (hook warning) and

package/hooks/guard.bundled.mjs

@@ -6808,7 +6808,10 @@ function blockTool(reason) {
       hookSpecificOutput: {
         hookEventName: "PreToolUse",
         permissionDecision: "deny",
-        permissionDecisionReason: reason
+        // Never empty: a deny with an empty reason becomes an is_error tool_result
+        // with empty content, which the API rejects and crashes the agent. Always
+        // carry a SolonGate-worded reason so the block says WHAT stopped it.
+        permissionDecisionReason: reason || "[SolonGate] Blocked by policy"
       }
     }));
     sgFinish(0);

package/hooks/guard.mjs

@@ -395,7 +395,10 @@ function blockTool(reason) {
       hookSpecificOutput: {
         hookEventName: 'PreToolUse',
         permissionDecision: 'deny',
-        permissionDecisionReason: reason,
+        // Never empty: a deny with an empty reason becomes an is_error tool_result
+        // with empty content, which the API rejects and crashes the agent. Always
+        // carry a SolonGate-worded reason so the block says WHAT stopped it.
+        permissionDecisionReason: reason || '[SolonGate] Blocked by policy',
       },
     }));
     sgFinish(0);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.75",
+  "version": "0.81.76",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {