@solongate/proxy 0.29.0 → 0.29.1

package/hooks/audit.mjs

@@ -61,7 +61,8 @@ process.stdin.on('end', async () => {
       writeFileSync(join(flagDir, '.last-tool-call'), Date.now().toString());
     } catch {}
 
-    await fetch(`${API_URL}/api/v1/audit-logs`, {
+    // Fire-and-forget: don't block tool execution waiting for API response
+    fetch(`${API_URL}/api/v1/audit-logs`, {
       method: 'POST',
       headers: {
         'Authorization': `Bearer ${API_KEY}`,
@@ -78,9 +79,10 @@ process.stdin.on('end', async () => {
         agent_name: AGENT_NAME,
       }),
       signal: AbortSignal.timeout(5000),
-    });
+    }).catch(() => {}).finally(() => process.exit(0));
+    // Exit after short delay if fetch hangs on DNS/connect
+    setTimeout(() => process.exit(0), 3000);
   } catch {
-    // Silent
+    process.exit(0);
   }
-  process.exit(0);
 });

package/hooks/guard.mjs

@@ -909,19 +909,34 @@ process.stdin.on('end', async () => {
       }
     }
 
-    // ── Fetch PI config from Cloud ──
+    // ── Fetch PI config from Cloud (cached for 60s to avoid per-call latency) ──
     let piCfg = { piEnabled: true, piThreshold: 0.5, piMode: 'block', piWhitelist: [], piToolConfig: {}, piCustomPatterns: [], piWebhookUrl: null };
     if (API_KEY && API_KEY.startsWith('sg_live_')) {
+      const cacheFile = join(resolve('.solongate'), '.pi-config-cache.json');
+      let usedCache = false;
       try {
-        const cfgRes = await fetch(API_URL + '/api/v1/project-config', {
-          headers: { 'Authorization': 'Bearer ' + API_KEY },
-          signal: AbortSignal.timeout(3000),
-        });
-        if (cfgRes.ok) {
-          const cfg = await cfgRes.json();
-          piCfg = { ...piCfg, ...cfg };
+        if (existsSync(cacheFile)) {
+          const cached = JSON.parse(readFileSync(cacheFile, 'utf-8'));
+          if (cached._ts && Date.now() - cached._ts < 60000) {
+            const { _ts, ...rest } = cached;
+            piCfg = { ...piCfg, ...rest };
+            usedCache = true;
+          }
         }
-      } catch {} // Fallback: defaults (safe)
+      } catch {}
+      if (!usedCache) {
+        try {
+          const cfgRes = await fetch(API_URL + '/api/v1/project-config', {
+            headers: { 'Authorization': 'Bearer ' + API_KEY },
+            signal: AbortSignal.timeout(3000),
+          });
+          if (cfgRes.ok) {
+            const cfg = await cfgRes.json();
+            piCfg = { ...piCfg, ...cfg };
+            try { writeFileSync(cacheFile, JSON.stringify({ ...cfg, _ts: Date.now() })); } catch {}
+          }
+        } catch {} // Fallback: defaults (safe)
+      }
     }
 
     // ── Per-tool config: check if PI scanning is disabled for this tool ──
@@ -1078,8 +1093,23 @@ process.stdin.on('end', async () => {
       let aiJudgeEndpoint = 'https://api.groq.com/openai';
       let aiJudgeTimeout = 5000;
 
-      // Check cloud config for AI Judge settings
+      // Check cloud config for AI Judge settings (cached for 60s)
       if (API_KEY && API_KEY.startsWith('sg_live_')) {
+        const ajCacheFile = join(resolve('.solongate'), '.aj-config-cache.json');
+        let ajCached = false;
+        try {
+          if (existsSync(ajCacheFile)) {
+            const cached = JSON.parse(readFileSync(ajCacheFile, 'utf-8'));
+            if (cached._ts && Date.now() - cached._ts < 60000) {
+              aiJudgeEnabled = Boolean(cached.enabled);
+              if (cached.model) aiJudgeModel = cached.model;
+              if (cached.endpoint) aiJudgeEndpoint = cached.endpoint;
+              if (cached.timeoutMs) aiJudgeTimeout = cached.timeoutMs;
+              ajCached = true;
+            }
+          }
+        } catch {}
+        if (!ajCached) {
         try {
           const cfgRes = await fetch(API_URL + '/api/v1/project-config/ai-judge', {
             headers: { 'Authorization': 'Bearer ' + API_KEY },
@@ -1091,8 +1121,10 @@ process.stdin.on('end', async () => {
             if (cfg.model) aiJudgeModel = cfg.model;
             if (cfg.endpoint) aiJudgeEndpoint = cfg.endpoint;
             if (cfg.timeoutMs) aiJudgeTimeout = cfg.timeoutMs;
+            try { writeFileSync(ajCacheFile, JSON.stringify({ ...cfg, _ts: Date.now() })); } catch {}
           }
         } catch {}
+        }
       }
 
       if (aiJudgeEnabled && GROQ_KEY) {

package/hooks/stop.mjs

@@ -49,8 +49,8 @@ process.stdin.on('end', async () => {
       process.exit(0);
     }
 
-    // No tool calls → log 1 ALLOW for the text-only response
-    await fetch(`${API_URL}/api/v1/audit-logs`, {
+    // No tool calls → log 1 ALLOW for the text-only response (fire-and-forget)
+    fetch(`${API_URL}/api/v1/audit-logs`, {
       method: 'POST',
       headers: {
         'Authorization': `Bearer ${API_KEY}`,
@@ -67,9 +67,9 @@ process.stdin.on('end', async () => {
         agent_name: AGENT_NAME,
       }),
       signal: AbortSignal.timeout(5000),
-    });
+    }).catch(() => {}).finally(() => process.exit(0));
+    setTimeout(() => process.exit(0), 3000);
   } catch {
-    // Silent
+    process.exit(0);
   }
-  process.exit(0);
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.29.0",
+  "version": "0.29.1",
   "description": "MCP security proxy — protect any MCP server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {