@solongate/proxy 0.83.43 → 0.83.44

package/hooks/guard.bundled.mjs

@@ -6579,7 +6579,7 @@ function sweepLegacyFlagDir() {
   } catch {
   }
 }
-var HOOK_VERSION = 82;
+var HOOK_VERSION = 83;
 var SG_REFRESH_ARG = process.argv.includes("--sg-refresh-policy");
 var SG_STDIN = SG_REFRESH_ARG ? "" : (() => {
   try {
@@ -6798,7 +6798,7 @@ function guessPermission(toolName) {
     return "EXECUTE";
   if (name.includes("fetch") || name.includes("http") || name.includes("request") || name.includes("curl") || name.includes("network") || name.includes("download") || name.includes("upload") || name === "websearch")
     return "NETWORK";
-  if (name.includes("write") || name.includes("create") || name.includes("delete") || name.includes("update") || name.includes("set") || name.includes("edit") || name.includes("remove") || name.includes("insert"))
+  if (name.includes("write") || name.includes("create") || name.includes("delete") || name.includes("update") || name.includes("set") || name.includes("edit") || name.includes("remove") || name.includes("insert") || name.includes("replace") || name.includes("patch") || name.includes("modify") || name.includes("append") || name.includes("overwrite") || name.includes("rename") || name.includes("move") || name.includes("mkdir") || name.includes("touch"))
     return "WRITE";
   return "READ";
 }

package/hooks/guard.mjs

@@ -82,7 +82,7 @@ import { createHash } from 'node:crypto';
 // the installed hook self-updates when the cloud version is higher (see
 // maybeSelfUpdate). This is what makes guard fixes propagate without a manual
 // reinstall — the same trust model as the OPA WASM this hook already runs.
-const HOOK_VERSION = 82;
+const HOOK_VERSION = 83;
 
 // ── The Go guard, when there is one and it is the right one ──────────────────
 //
@@ -443,7 +443,15 @@ function guessPermission(toolName) {
   if (name === 'apply_patch' || name === 'applypatch') return 'WRITE';
   if (name.includes('exec') || name.includes('shell') || name.includes('run') || name.includes('eval') || name === 'bash') return 'EXECUTE';
   if (name.includes('fetch') || name.includes('http') || name.includes('request') || name.includes('curl') || name.includes('network') || name.includes('download') || name.includes('upload') || name === 'websearch') return 'NETWORK';
-  if (name.includes('write') || name.includes('create') || name.includes('delete') || name.includes('update') || name.includes('set') || name.includes('edit') || name.includes('remove') || name.includes('insert')) return 'WRITE';
+  // `replace`, `patch` and `modify` are here because Antigravity's edit tool is
+  // `replace_file_content`, which matched none of the words above and fell
+  // through to READ. A WRITE-scoped rule therefore missed the tool the agent
+  // actually edits with: "deny writes under config/" left it free to rewrite
+  // config/ all day. The list is words a tool NAME uses for changing something,
+  // not an enumeration of known tools, and it errs wide because the name that
+  // classifies wrong is silently unguarded rather than loudly broken.
+  if (name.includes('write') || name.includes('create') || name.includes('delete') || name.includes('update') || name.includes('set') || name.includes('edit') || name.includes('remove') || name.includes('insert') ||
+      name.includes('replace') || name.includes('patch') || name.includes('modify') || name.includes('append') || name.includes('overwrite') || name.includes('rename') || name.includes('move') || name.includes('mkdir') || name.includes('touch')) return 'WRITE';
   return 'READ';
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.83.43",
+  "version": "0.83.44",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {
@@ -61,12 +61,12 @@
     "node": ">=20.0.0"
   },
   "optionalDependencies": {
-    "@solongate/guard-linux-x64": "0.83.43",
-    "@solongate/guard-linux-arm64": "0.83.43",
-    "@solongate/guard-darwin-x64": "0.83.43",
-    "@solongate/guard-darwin-arm64": "0.83.43",
-    "@solongate/guard-win32-x64": "0.83.43",
-    "@solongate/guard-win32-arm64": "0.83.43"
+    "@solongate/guard-linux-x64": "0.83.44",
+    "@solongate/guard-linux-arm64": "0.83.44",
+    "@solongate/guard-darwin-x64": "0.83.44",
+    "@solongate/guard-darwin-arm64": "0.83.44",
+    "@solongate/guard-win32-x64": "0.83.44",
+    "@solongate/guard-win32-arm64": "0.83.44"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.26.0",