@solongate/proxy 0.81.9 → 0.81.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. package/dist/index.js +3 -2
  2. package/dist/shield.js +3 -2
  3. package/hooks/audit.mjs +1 -1
  4. package/hooks/guard.bundled.mjs +1 -1
  5. package/hooks/guard.mjs +1 -1
  6. package/hooks/shield.mjs +1 -1
  7. package/package.json +1 -1
package/dist/index.js CHANGED
@@ -10974,7 +10974,8 @@ function startProxy(upstream) {
10974
10974
  if (parsed["system"] !== void 0) parsed["system"] = redactDeep(parsed["system"], cfg);
10975
10975
  const msgs = parsed["messages"];
10976
10976
  for (let i = 0; i < msgs.length; i++) {
10977
- if (msgs[i] && msgs[i]["role"] !== "assistant") msgs[i] = redactDeep(msgs[i], cfg);
10977
+ const m = msgs[i];
10978
+ if (m && m["role"] !== "assistant") msgs[i] = redactDeep(m, cfg);
10978
10979
  }
10979
10980
  body = Buffer.from(JSON.stringify(parsed), "utf-8");
10980
10981
  } else {
@@ -11071,7 +11072,7 @@ var init_shield = __esm({
11071
11072
  `);
11072
11073
  DLP_PATTERNS = [
11073
11074
  { name: "AWS access key", re: /AKIA[0-9A-Z]{16}/g },
11074
- { name: "private key block", re: /-----BEGIN [A-Z ]*PRIVATE KEY-----/g },
11075
+ { name: "Private key block", re: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----|-----BEGIN [A-Z ]*PRIVATE KEY-----/g },
11075
11076
  { name: "Anthropic key", re: /sk-ant-[A-Za-z0-9_-]{20,}/g },
11076
11077
  { name: "OpenAI key", re: /sk-(proj-)?[A-Za-z0-9_-]{20,}/g },
11077
11078
  { name: "GitHub token", re: /gh[pousr]_[A-Za-z0-9]{20,}/g },
package/dist/shield.js CHANGED
@@ -10,7 +10,7 @@ var log = (...a) => process.stderr.write(`[SolonGate shield] ${a.map(String).joi
10
10
  `);
11
11
  var DLP_PATTERNS = [
12
12
  { name: "AWS access key", re: /AKIA[0-9A-Z]{16}/g },
13
- { name: "private key block", re: /-----BEGIN [A-Z ]*PRIVATE KEY-----/g },
13
+ { name: "Private key block", re: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----|-----BEGIN [A-Z ]*PRIVATE KEY-----/g },
14
14
  { name: "Anthropic key", re: /sk-ant-[A-Za-z0-9_-]{20,}/g },
15
15
  { name: "OpenAI key", re: /sk-(proj-)?[A-Za-z0-9_-]{20,}/g },
16
16
  { name: "GitHub token", re: /gh[pousr]_[A-Za-z0-9]{20,}/g },
@@ -215,7 +215,8 @@ function startProxy(upstream) {
215
215
  if (parsed["system"] !== void 0) parsed["system"] = redactDeep(parsed["system"], cfg);
216
216
  const msgs = parsed["messages"];
217
217
  for (let i = 0; i < msgs.length; i++) {
218
- if (msgs[i] && msgs[i]["role"] !== "assistant") msgs[i] = redactDeep(msgs[i], cfg);
218
+ const m = msgs[i];
219
+ if (m && m["role"] !== "assistant") msgs[i] = redactDeep(m, cfg);
219
220
  }
220
221
  body = Buffer.from(JSON.stringify(parsed), "utf-8");
221
222
  } else {
package/hooks/audit.mjs CHANGED
@@ -241,7 +241,7 @@ function buildGhostOutput(toolName, toolInput, toolResponse, toolOutput, pats) {
241
241
  // the quote handling is exact — no escaping artifacts.
242
242
  const DLP_PATTERNS = [
243
243
  { name: 'AWS access key', re: /AKIA[0-9A-Z]{16}/g },
244
- { name: 'private key block', re: /-----BEGIN [A-Z ]*PRIVATE KEY-----/g },
244
+ { name: 'Private key block', re: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----|-----BEGIN [A-Z ]*PRIVATE KEY-----/g },
245
245
  { name: 'Anthropic key', re: /sk-ant-[A-Za-z0-9_-]{20,}/g },
246
246
  { name: 'OpenAI key', re: /sk-(proj-)?[A-Za-z0-9_-]{20,}/g },
247
247
  { name: 'GitHub token', re: /gh[pousr]_[A-Za-z0-9]{20,}/g },
package/hooks/guard.bundled.mjs CHANGED
@@ -7135,7 +7135,7 @@ function tamperCheck(toolName, args) {
7135
7135
  }
7136
7136
  var DLP_PATTERNS = [
7137
7137
  { name: "AWS access key", re: /AKIA[0-9A-Z]{16}/ },
7138
- { name: "private key block", re: /-----BEGIN [A-Z ]*PRIVATE KEY-----/ },
7138
+ { name: "Private key block", re: /-----BEGIN [A-Z ]*PRIVATE KEY-----/ },
7139
7139
  { name: "Anthropic key", re: /sk-ant-[A-Za-z0-9_-]{20,}/ },
7140
7140
  { name: "OpenAI key", re: /sk-(proj-)?[A-Za-z0-9_-]{20,}/ },
7141
7141
  { name: "GitHub token", re: /gh[pousr]_[A-Za-z0-9]{20,}/ },
package/hooks/guard.mjs CHANGED
@@ -810,7 +810,7 @@ function tamperCheck(toolName, args) {
810
810
  // rules plus generic Bearer / secret-assignment catch-alls for the long tail.
811
811
  const DLP_PATTERNS = [
812
812
  { name: 'AWS access key', re: /AKIA[0-9A-Z]{16}/ },
813
- { name: 'private key block', re: /-----BEGIN [A-Z ]*PRIVATE KEY-----/ },
813
+ { name: 'Private key block', re: /-----BEGIN [A-Z ]*PRIVATE KEY-----/ },
814
814
  { name: 'Anthropic key', re: /sk-ant-[A-Za-z0-9_-]{20,}/ },
815
815
  { name: 'OpenAI key', re: /sk-(proj-)?[A-Za-z0-9_-]{20,}/ },
816
816
  { name: 'GitHub token', re: /gh[pousr]_[A-Za-z0-9]{20,}/ },
package/hooks/shield.mjs CHANGED
@@ -29,7 +29,7 @@ const log = (...a) => process.stderr.write(`[SolonGate shield] ${a.map(String).j
29
29
 
30
30
  const DLP_PATTERNS = [
31
31
  { name: 'AWS access key', re: /AKIA[0-9A-Z]{16}/g },
32
- { name: 'private key block', re: /-----BEGIN [A-Z ]*PRIVATE KEY-----/g },
32
+ { name: 'Private key block', re: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----|-----BEGIN [A-Z ]*PRIVATE KEY-----/g },
33
33
  { name: 'Anthropic key', re: /sk-ant-[A-Za-z0-9_-]{20,}/g },
34
34
  { name: 'OpenAI key', re: /sk-(proj-)?[A-Za-z0-9_-]{20,}/g },
35
35
  { name: 'GitHub token', re: /gh[pousr]_[A-Za-z0-9]{20,}/g },
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@solongate/proxy",
3
- "version": "0.81.9",
3
+ "version": "0.81.11",
4
4
  "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
5
5
  "type": "module",
6
6
  "bin": {