@solongate/proxy 0.28.2 → 0.28.4

package/hooks/guard.mjs

@@ -1179,34 +1179,32 @@ Respond with ONLY valid JSON: {"decision": "ALLOW" or "DENY", "reason": "brief e
       }
     }
 
-    const decision = reason ? 'DENY' : 'ALLOW';
-
-    // ── Log ALL decisions to SolonGate Cloud ──
-    if (API_KEY && API_KEY.startsWith('sg_live_')) {
-      try {
-        const logEntry = {
-          tool: toolName, arguments: args,
-          decision, reason: reason || 'allowed by policy',
-          source: 'claude-code-guard',
-        };
-        // Attach PI metadata if detected
-        if (piResult) {
-          logEntry.pi_detected = true;
-          logEntry.pi_trust_score = piResult.trustScore;
-          logEntry.pi_blocked = false;
-          logEntry.pi_categories = JSON.stringify(piResult.categories);
-          logEntry.pi_stage_scores = JSON.stringify({ rules: piResult.score, embedding: 0, classifier: 0 });
-        }
-        await fetch(API_URL + '/api/v1/audit-logs', {
-          method: 'POST',
-          headers: { 'Authorization': 'Bearer ' + API_KEY, 'Content-Type': 'application/json' },
-          body: JSON.stringify(logEntry),
-          signal: AbortSignal.timeout(3000),
-        });
-      } catch {}
-    }
-
+    // Only log DENY decisions from guard hook.
+    // ALLOW decisions are logged by the audit hook (PostToolUse) to avoid double-counting.
     if (reason) {
+      if (API_KEY && API_KEY.startsWith('sg_live_')) {
+        try {
+          const logEntry = {
+            tool: toolName, arguments: args,
+            decision: 'DENY', reason,
+            source: 'claude-code-guard',
+            agent_id: 'claude-code', agent_name: 'Claude Code',
+          };
+          if (piResult) {
+            logEntry.pi_detected = true;
+            logEntry.pi_trust_score = piResult.trustScore;
+            logEntry.pi_blocked = false;
+            logEntry.pi_categories = JSON.stringify(piResult.categories);
+            logEntry.pi_stage_scores = JSON.stringify({ rules: piResult.score, embedding: 0, classifier: 0 });
+          }
+          await fetch(API_URL + '/api/v1/audit-logs', {
+            method: 'POST',
+            headers: { 'Authorization': 'Bearer ' + API_KEY, 'Content-Type': 'application/json' },
+            body: JSON.stringify(logEntry),
+            signal: AbortSignal.timeout(3000),
+          });
+        } catch {}
+      }
       process.stderr.write(reason);
       process.exit(2);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.28.2",
+  "version": "0.28.4",
   "description": "MCP security proxy — protect any MCP server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {