@solongate/proxy 0.82.54 → 0.82.56

package/hooks/audit.mjs

@@ -11,7 +11,7 @@ import { homedir } from 'node:os';
 // Bump on every audit hook change. The cloud serves the newest version; the guard
 // hook installs it on its next run (no re-login needed). See guard.mjs
 // fetchAndInstallHook / maybeSelfUpdate.
-const HOOK_VERSION = 16;
+const HOOK_VERSION = 17;
 
 function loadEnvKey(dir) {
   try {
@@ -131,6 +131,15 @@ function ghostMatch(targetPath, patterns) {
       continue;
     }
     if (re.test(norm)) return true;
+    // A path ghost must also hide the file when a tool lists it by BARE name —
+    // `ls dir/` prints just "secret-plan.txt" (no slash), which a slash-pattern
+    // like `*/secret-plan.txt` would otherwise miss. Match the pattern's last
+    // segment against the target's basename.
+    const patBase = pat.slice(pat.lastIndexOf('/') + 1);
+    if (patBase && patBase !== pat) {
+      const reBase = ghostGlobToRegExp(patBase);
+      if (reBase && reBase.test(base)) return true;
+    }
   }
   return false;
 }
@@ -151,6 +160,10 @@ function ghostStripLines(text, pats) {
     const trimmed = line.trim();
     if (!trimmed) { kept.push(line); continue; }
     if (ghostMatch(trimmed, pats)) continue; // full-path listing line
+    // grep -n / ripgrep output is `path:line:content` (or `path:content`) — the
+    // path is the first colon field. Drop the whole match line if it's a ghost.
+    const firstField = trimmed.split(':')[0];
+    if (firstField && firstField !== trimmed && ghostMatch(firstField, pats)) continue;
     const toks = trimmed.split(/\s+/);
     const anyHit = toks.some((t) => ghostMatch(ghostCleanToken(t), pats));
     if (!anyHit) { kept.push(line); continue; }

package/hooks/guard.bundled.mjs

@@ -6536,7 +6536,7 @@ import { resolve, join, dirname, isAbsolute } from "node:path";
 import { homedir } from "node:os";
 import { gunzipSync } from "node:zlib";
 import { createHash } from "node:crypto";
-var HOOK_VERSION = 46;
+var HOOK_VERSION = 47;
 function localLogsOnly(security) {
   if (security && typeof security === "object") {
     const l = security.localLogs;
@@ -7064,9 +7064,17 @@ var TAMPER_BASENAMES = [
   "guard.mjs",
   "audit.mjs",
   "stop.mjs",
+  "shield.mjs",
   "policy.json",
-  ".policy-cache.json",
-  ".pi-config-cache.json",
+  // Prefixes (substring match) so per-agent runtime state can't be deleted or
+  // rewritten via a shell command either — `.policy-cache-<agent>.json`,
+  // `.ratelimit-<agent>.json`, `.opa-wasm-<agent>.json`. Editing these could
+  // otherwise flip enforcement off until the next cloud refresh; deleting just
+  // forces a refetch, but neither should be reachable from an agent tool call.
+  ".policy-cache",
+  ".ratelimit-",
+  ".opa-wasm-",
+  ".pi-config-cache",
   "cloud-guard.json",
   // Customer install: DB and wizard exe
   "solongate.db",

package/hooks/guard.mjs

@@ -32,7 +32,7 @@ import { createHash } from 'node:crypto';
 // the installed hook self-updates when the cloud version is higher (see
 // maybeSelfUpdate). This is what makes guard fixes propagate without a manual
 // reinstall — the same trust model as the OPA WASM this hook already runs.
-const HOOK_VERSION = 46;
+const HOOK_VERSION = 47;
 
 // True when local log storage is ON. In that mode logs are kept LOCAL ONLY and
 // nothing is sent to the cloud audit log.
@@ -799,9 +799,15 @@ const TAMPER_PROTECTED_GLOBS = [
   '**' + TAMPER_INSTALL + '/setup.sh',
 ];
 const TAMPER_BASENAMES = [
-  'guard.mjs', 'audit.mjs', 'stop.mjs',
-  'policy.json', '.policy-cache.json',
-  '.pi-config-cache.json', 'cloud-guard.json',
+  'guard.mjs', 'audit.mjs', 'stop.mjs', 'shield.mjs',
+  'policy.json',
+  // Prefixes (substring match) so per-agent runtime state can't be deleted or
+  // rewritten via a shell command either — `.policy-cache-<agent>.json`,
+  // `.ratelimit-<agent>.json`, `.opa-wasm-<agent>.json`. Editing these could
+  // otherwise flip enforcement off until the next cloud refresh; deleting just
+  // forces a refetch, but neither should be reachable from an agent tool call.
+  '.policy-cache', '.ratelimit-', '.opa-wasm-', '.pi-config-cache',
+  'cloud-guard.json',
   // Customer install: DB and wizard exe
   'solongate.db', 'solongate.exe',
 ];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.82.54",
+  "version": "0.82.56",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {