@solongate/proxy 0.83.39 → 0.83.40

package/hooks/guard.bundled.mjs

@@ -8337,9 +8337,9 @@ async function getOpaWasmBytes(policy) {
   try {
     if (existsSync(cacheFile)) {
       const c = JSON.parse(readFileSync(cacheFile, "utf-8"));
-      if (c && c.wasm) {
+      if (c && c.wasm && c.fp === fp) {
         stale = new Uint8Array(Buffer.from(c.wasm, "base64"));
-        if (c.fp === fp && c._ts && Date.now() - c._ts < OPA_WASM_TTL_MS) {
+        if (c._ts && Date.now() - c._ts < OPA_WASM_TTL_MS) {
           return stale;
         }
       }

package/hooks/guard.mjs

@@ -2312,13 +2312,25 @@ async function getOpaWasmBytes(policy) {
   // Read any cached bundle. A "fresh" hit (same policy fingerprint, within TTL)
   // is returned immediately; otherwise we keep it as `stale` to fall back on if
   // the API is momentarily unreachable — so transient downtime never drops OPA.
+  //
+  // ONLY when the fingerprint still matches. A bundle compiled from a DIFFERENT
+  // policy is not "last known good", it is the wrong policy: it enforces rules
+  // the user has deleted and misses the ones they just wrote. That is what a
+  // stale hit did until now, and it is invisible from the outside — the denial
+  // cites a rule id that is no longer in `policy active`, and the user's only
+  // clue is that their own policy does not contain the rule that just fired.
+  //
+  // Dropping it here does not disarm anything. With no bundle the guard falls
+  // through to its deterministic evaluator, which reads the policy it actually
+  // has, so a fingerprint mismatch costs the OPA-only behaviours and keeps the
+  // rules correct. Enforcing a deleted rule is the worse of the two.
   let stale = null;
   try {
     if (existsSync(cacheFile)) {
       const c = JSON.parse(readFileSync(cacheFile, 'utf-8'));
-      if (c && c.wasm) {
+      if (c && c.wasm && c.fp === fp) {
         stale = new Uint8Array(Buffer.from(c.wasm, 'base64'));
-        if (c.fp === fp && c._ts && Date.now() - c._ts < OPA_WASM_TTL_MS) {
+        if (c._ts && Date.now() - c._ts < OPA_WASM_TTL_MS) {
           return stale;
         }
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.83.39",
+  "version": "0.83.40",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {
@@ -61,12 +61,12 @@
     "node": ">=20.0.0"
   },
   "optionalDependencies": {
-    "@solongate/guard-linux-x64": "0.83.39",
-    "@solongate/guard-linux-arm64": "0.83.39",
-    "@solongate/guard-darwin-x64": "0.83.39",
-    "@solongate/guard-darwin-arm64": "0.83.39",
-    "@solongate/guard-win32-x64": "0.83.39",
-    "@solongate/guard-win32-arm64": "0.83.39"
+    "@solongate/guard-linux-x64": "0.83.40",
+    "@solongate/guard-linux-arm64": "0.83.40",
+    "@solongate/guard-darwin-x64": "0.83.40",
+    "@solongate/guard-darwin-arm64": "0.83.40",
+    "@solongate/guard-win32-x64": "0.83.40",
+    "@solongate/guard-win32-arm64": "0.83.40"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.26.0",