@solongate/proxy 0.82.46 → 0.82.48

package/dist/global-install.js

@@ -1,5 +1,5 @@
 // src/global-install.ts
-import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync } from "fs";
+import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync, chmodSync } from "fs";
 import { resolve, join, dirname } from "path";
 import { homedir } from "os";
 import { fileURLToPath } from "url";
@@ -12,7 +12,11 @@ function lockFile(file) {
   try {
     if (process.platform === "win32") {
       try {
-        execFileSync("icacls", [file, "/deny", "*S-1-1-0:(WD,AD,DC,DE)"], { stdio: "ignore" });
+        execFileSync("icacls", [file, "/deny", "*S-1-1-0:(WD,AD,DC,DE,WDAC,WO)"], { stdio: "ignore" });
+      } catch {
+      }
+      try {
+        execFileSync("icacls", [file, "/grant", "*S-1-3-4:(RX)"], { stdio: "ignore" });
       } catch {
       }
       try {
@@ -29,6 +33,10 @@ function lockFile(file) {
         execFileSync("chattr", ["+i", file], { stdio: "ignore" });
       } catch {
       }
+      try {
+        chmodSync(file, 292);
+      } catch {
+      }
     }
   } catch {
   }
@@ -37,6 +45,10 @@ function unlockFile(file) {
   if (!existsSync(file)) return;
   try {
     if (process.platform === "win32") {
+      try {
+        execFileSync("icacls", [file, "/remove:g", "*S-1-3-4"], { stdio: "ignore" });
+      } catch {
+      }
       try {
         execFileSync("icacls", [file, "/remove:d", "*S-1-1-0"], { stdio: "ignore" });
       } catch {
@@ -59,6 +71,10 @@ function unlockFile(file) {
         execFileSync("chattr", ["-i", file], { stdio: "ignore" });
       } catch {
       }
+      try {
+        chmodSync(file, 420);
+      } catch {
+      }
     }
   } catch {
   }
@@ -274,7 +290,7 @@ function installGlobalQuiet() {
       installAntigravityGuard(p, join(p.hooksDir, "guard.mjs").replace(/\\/g, "/"));
     } catch {
     }
-    if (process.env["SOLONGATE_OS_LOCK"] !== "0") lockProtected();
+    if (process.env["SOLONGATE_NO_OS_LOCK"] !== "1") lockProtected();
     return { ok: true, message: "guard installed (open a new session)" };
   } catch (e) {
     return { ok: false, message: e instanceof Error ? e.message : String(e) };
@@ -464,7 +480,7 @@ async function runGlobalInstall(opts = {}) {
     console.log(`  Registered Antigravity CLI guard \u2192 ${p.antigravityHooksPath}`);
   } catch {
   }
-  if (process.env["SOLONGATE_OS_LOCK"] !== "0") {
+  if (process.env["SOLONGATE_NO_OS_LOCK"] !== "1") {
     lockProtected();
     console.log("  Locked protection files (OS-level read-only/immutable).");
   }

package/dist/index.js

@@ -6206,7 +6206,7 @@ __export(global_install_exports, {
   uninstallGlobalQuiet: () => uninstallGlobalQuiet,
   unlockProtected: () => unlockProtected
 });
-import { readFileSync as readFileSync4, writeFileSync as writeFileSync3, existsSync as existsSync3, mkdirSync as mkdirSync3, rmSync as rmSync2 } from "fs";
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync3, existsSync as existsSync3, mkdirSync as mkdirSync3, rmSync as rmSync2, chmodSync } from "fs";
 import { resolve as resolve3, join as join4, dirname } from "path";
 import { homedir as homedir2 } from "os";
 import { fileURLToPath } from "url";
@@ -6217,7 +6217,11 @@ function lockFile(file) {
   try {
     if (process.platform === "win32") {
       try {
-        execFileSync2("icacls", [file, "/deny", "*S-1-1-0:(WD,AD,DC,DE)"], { stdio: "ignore" });
+        execFileSync2("icacls", [file, "/deny", "*S-1-1-0:(WD,AD,DC,DE,WDAC,WO)"], { stdio: "ignore" });
+      } catch {
+      }
+      try {
+        execFileSync2("icacls", [file, "/grant", "*S-1-3-4:(RX)"], { stdio: "ignore" });
       } catch {
       }
       try {
@@ -6234,6 +6238,10 @@ function lockFile(file) {
         execFileSync2("chattr", ["+i", file], { stdio: "ignore" });
       } catch {
       }
+      try {
+        chmodSync(file, 292);
+      } catch {
+      }
     }
   } catch {
   }
@@ -6242,6 +6250,10 @@ function unlockFile(file) {
   if (!existsSync3(file)) return;
   try {
     if (process.platform === "win32") {
+      try {
+        execFileSync2("icacls", [file, "/remove:g", "*S-1-3-4"], { stdio: "ignore" });
+      } catch {
+      }
       try {
         execFileSync2("icacls", [file, "/remove:d", "*S-1-1-0"], { stdio: "ignore" });
       } catch {
@@ -6264,6 +6276,10 @@ function unlockFile(file) {
         execFileSync2("chattr", ["-i", file], { stdio: "ignore" });
       } catch {
       }
+      try {
+        chmodSync(file, 420);
+      } catch {
+      }
     }
   } catch {
   }
@@ -6478,7 +6494,7 @@ function installGlobalQuiet() {
       installAntigravityGuard(p, join4(p.hooksDir, "guard.mjs").replace(/\\/g, "/"));
     } catch {
     }
-    if (process.env["SOLONGATE_OS_LOCK"] !== "0") lockProtected();
+    if (process.env["SOLONGATE_NO_OS_LOCK"] !== "1") lockProtected();
     return { ok: true, message: "guard installed (open a new session)" };
   } catch (e) {
     return { ok: false, message: e instanceof Error ? e.message : String(e) };
@@ -6666,7 +6682,7 @@ async function runGlobalInstall(opts = {}) {
     console.log(`  Registered Antigravity CLI guard \u2192 ${p.antigravityHooksPath}`);
   } catch {
   }
-  if (process.env["SOLONGATE_OS_LOCK"] !== "0") {
+  if (process.env["SOLONGATE_NO_OS_LOCK"] !== "1") {
     lockProtected();
     console.log("  Locked protection files (OS-level read-only/immutable).");
   }
@@ -9500,7 +9516,6 @@ var init_Policies = __esm({
       { label: "Effect", kind: "effect", get: (r) => r.effect },
       { label: "Enabled", kind: "enabled", get: (r) => r.enabled ? "yes" : "no" },
       { label: "Priority", kind: "priority", get: (r) => String(r.priority) },
-      { label: "Tool pattern", kind: "text", get: (r) => r.toolPattern, set: (r, v) => ({ ...r, toolPattern: v || "*" }) },
       { label: "Description", kind: "text", get: (r) => r.description ?? "", set: (r, v) => ({ ...r, description: v }) },
       { label: "Cmd allow", kind: "text", get: (r) => constr(r, "commandConstraints", "allowed"), set: (r, v) => setConstr(r, "commandConstraints", "allowed", v) },
       { label: "Cmd deny", kind: "text", get: (r) => constr(r, "commandConstraints", "denied"), set: (r, v) => setConstr(r, "commandConstraints", "denied", v) },
@@ -13460,13 +13475,20 @@ function analyzeSecurityWarnings(policySet) {
   const allowRules = policySet.rules.filter(
     (r) => r.effect === "ALLOW" && r.enabled
   );
-  const wildcardAllows = allowRules.filter((r) => r.toolPattern === "*");
+  const hasNoConstraint = (r) => {
+    const groups = ["commandConstraints", "pathConstraints", "filenameConstraints", "urlConstraints"];
+    return !groups.some((g) => {
+      const c2 = r[g];
+      return c2 ? (c2.allowed?.length ?? 0) + (c2.denied?.length ?? 0) > 0 : false;
+    });
+  };
+  const wildcardAllows = allowRules.filter(hasNoConstraint);
   if (wildcardAllows.length > 0) {
     warnings.push({
       level: "CRITICAL",
       code: "WILDCARD_ALLOW",
       message: UNSAFE_CONFIGURATION_WARNINGS.WILDCARD_ALLOW,
-      recommendation: "Replace wildcard ALLOW rules with specific tool patterns."
+      recommendation: "Add command or path constraints so an ALLOW rule does not permit everything."
     });
   }
   return warnings;

package/dist/lib.js

@@ -7019,13 +7019,20 @@ function analyzeSecurityWarnings(policySet) {
   const allowRules = policySet.rules.filter(
     (r) => r.effect === "ALLOW" && r.enabled
   );
-  const wildcardAllows = allowRules.filter((r) => r.toolPattern === "*");
+  const hasNoConstraint = (r) => {
+    const groups = ["commandConstraints", "pathConstraints", "filenameConstraints", "urlConstraints"];
+    return !groups.some((g) => {
+      const c = r[g];
+      return c ? (c.allowed?.length ?? 0) + (c.denied?.length ?? 0) > 0 : false;
+    });
+  };
+  const wildcardAllows = allowRules.filter(hasNoConstraint);
   if (wildcardAllows.length > 0) {
     warnings.push({
       level: "CRITICAL",
       code: "WILDCARD_ALLOW",
       message: UNSAFE_CONFIGURATION_WARNINGS.WILDCARD_ALLOW,
-      recommendation: "Replace wildcard ALLOW rules with specific tool patterns."
+      recommendation: "Add command or path constraints so an ALLOW rule does not permit everything."
     });
   }
   return warnings;

package/dist/policy-engine/defaults.d.ts

@@ -11,8 +11,9 @@ export declare function createDefaultDenyPolicySet(): PolicySet;
  */
 export declare function createPermissivePolicySet(): PolicySet;
 /**
- * Creates a read-only policy set for a specific tool pattern.
- * Allows reads for VERIFIED requests only.
+ * Internal helper. Builds a read-only policy set scoped by an internal tool
+ * selector — fixed to "*" in the shipped product; no UI or CLI exposes it, so
+ * users can neither see nor change it. Allows reads for VERIFIED requests only.
  */
 export declare function createReadOnlyPolicySet(toolPattern: string): PolicySet;
 /**

package/dist/tui/index.js

@@ -9,7 +9,7 @@ var __export = (target, all) => {
 };
 
 // src/global-install.ts
-import { readFileSync as readFileSync4, writeFileSync as writeFileSync5, existsSync as existsSync2, mkdirSync as mkdirSync4, rmSync } from "fs";
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync5, existsSync as existsSync2, mkdirSync as mkdirSync4, rmSync, chmodSync } from "fs";
 import { resolve as resolve2, join as join6, dirname } from "path";
 import { homedir as homedir6 } from "os";
 import { fileURLToPath } from "url";
@@ -20,7 +20,11 @@ function lockFile(file) {
   try {
     if (process.platform === "win32") {
       try {
-        execFileSync("icacls", [file, "/deny", "*S-1-1-0:(WD,AD,DC,DE)"], { stdio: "ignore" });
+        execFileSync("icacls", [file, "/deny", "*S-1-1-0:(WD,AD,DC,DE,WDAC,WO)"], { stdio: "ignore" });
+      } catch {
+      }
+      try {
+        execFileSync("icacls", [file, "/grant", "*S-1-3-4:(RX)"], { stdio: "ignore" });
       } catch {
       }
       try {
@@ -37,6 +41,10 @@ function lockFile(file) {
         execFileSync("chattr", ["+i", file], { stdio: "ignore" });
       } catch {
       }
+      try {
+        chmodSync(file, 292);
+      } catch {
+      }
     }
   } catch {
   }
@@ -45,6 +53,10 @@ function unlockFile(file) {
   if (!existsSync2(file)) return;
   try {
     if (process.platform === "win32") {
+      try {
+        execFileSync("icacls", [file, "/remove:g", "*S-1-3-4"], { stdio: "ignore" });
+      } catch {
+      }
       try {
         execFileSync("icacls", [file, "/remove:d", "*S-1-1-0"], { stdio: "ignore" });
       } catch {
@@ -67,6 +79,10 @@ function unlockFile(file) {
         execFileSync("chattr", ["-i", file], { stdio: "ignore" });
       } catch {
       }
+      try {
+        chmodSync(file, 420);
+      } catch {
+      }
     }
   } catch {
   }
@@ -217,7 +233,7 @@ function installGlobalQuiet() {
       installAntigravityGuard(p, join6(p.hooksDir, "guard.mjs").replace(/\\/g, "/"));
     } catch {
     }
-    if (process.env["SOLONGATE_OS_LOCK"] !== "0") lockProtected();
+    if (process.env["SOLONGATE_NO_OS_LOCK"] !== "1") lockProtected();
     return { ok: true, message: "guard installed (open a new session)" };
   } catch (e) {
     return { ok: false, message: e instanceof Error ? e.message : String(e) };
@@ -2414,7 +2430,6 @@ var FIELDS = [
   { label: "Effect", kind: "effect", get: (r) => r.effect },
   { label: "Enabled", kind: "enabled", get: (r) => r.enabled ? "yes" : "no" },
   { label: "Priority", kind: "priority", get: (r) => String(r.priority) },
-  { label: "Tool pattern", kind: "text", get: (r) => r.toolPattern, set: (r, v) => ({ ...r, toolPattern: v || "*" }) },
   { label: "Description", kind: "text", get: (r) => r.description ?? "", set: (r, v) => ({ ...r, description: v }) },
   { label: "Cmd allow", kind: "text", get: (r) => constr(r, "commandConstraints", "allowed"), set: (r, v) => setConstr(r, "commandConstraints", "allowed", v) },
   { label: "Cmd deny", kind: "text", get: (r) => constr(r, "commandConstraints", "denied"), set: (r, v) => setConstr(r, "commandConstraints", "denied", v) },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.82.46",
+  "version": "0.82.48",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {