@solongate/proxy 0.82.55 → 0.82.56

package/hooks/audit.mjs

@@ -11,7 +11,7 @@ import { homedir } from 'node:os';
 // Bump on every audit hook change. The cloud serves the newest version; the guard
 // hook installs it on its next run (no re-login needed). See guard.mjs
 // fetchAndInstallHook / maybeSelfUpdate.
-const HOOK_VERSION = 16;
+const HOOK_VERSION = 17;
 
 function loadEnvKey(dir) {
   try {
@@ -131,6 +131,15 @@ function ghostMatch(targetPath, patterns) {
       continue;
     }
     if (re.test(norm)) return true;
+    // A path ghost must also hide the file when a tool lists it by BARE name —
+    // `ls dir/` prints just "secret-plan.txt" (no slash), which a slash-pattern
+    // like `*/secret-plan.txt` would otherwise miss. Match the pattern's last
+    // segment against the target's basename.
+    const patBase = pat.slice(pat.lastIndexOf('/') + 1);
+    if (patBase && patBase !== pat) {
+      const reBase = ghostGlobToRegExp(patBase);
+      if (reBase && reBase.test(base)) return true;
+    }
   }
   return false;
 }
@@ -151,6 +160,10 @@ function ghostStripLines(text, pats) {
     const trimmed = line.trim();
     if (!trimmed) { kept.push(line); continue; }
     if (ghostMatch(trimmed, pats)) continue; // full-path listing line
+    // grep -n / ripgrep output is `path:line:content` (or `path:content`) — the
+    // path is the first colon field. Drop the whole match line if it's a ghost.
+    const firstField = trimmed.split(':')[0];
+    if (firstField && firstField !== trimmed && ghostMatch(firstField, pats)) continue;
     const toks = trimmed.split(/\s+/);
     const anyHit = toks.some((t) => ghostMatch(ghostCleanToken(t), pats));
     if (!anyHit) { kept.push(line); continue; }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.82.55",
+  "version": "0.82.56",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {