@solongate/proxy 0.43.0 → 0.45.0

package/dist/global-install.js

@@ -0,0 +1,198 @@
+// src/global-install.ts
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
+import { resolve, join, dirname } from "path";
+import { homedir } from "os";
+import { fileURLToPath } from "url";
+import { createInterface } from "readline";
+import { execFileSync } from "child_process";
+var __dirname = dirname(fileURLToPath(import.meta.url));
+var HOOKS_DIR = resolve(__dirname, "..", "hooks");
+function lockFile(file) {
+  if (!existsSync(file)) return;
+  try {
+    if (process.platform === "win32") {
+      try {
+        execFileSync("icacls", [file, "/deny", "*S-1-1-0:(WD,AD,DC,DE)"], { stdio: "ignore" });
+      } catch {
+      }
+      try {
+        execFileSync("attrib", ["+R", file], { stdio: "ignore" });
+      } catch {
+      }
+    } else if (process.platform === "darwin") {
+      try {
+        execFileSync("chflags", ["uchg", file], { stdio: "ignore" });
+      } catch {
+      }
+    } else {
+      try {
+        execFileSync("chattr", ["+i", file], { stdio: "ignore" });
+      } catch {
+      }
+    }
+  } catch {
+  }
+}
+function unlockFile(file) {
+  if (!existsSync(file)) return;
+  try {
+    if (process.platform === "win32") {
+      try {
+        execFileSync("icacls", [file, "/remove:d", "*S-1-1-0"], { stdio: "ignore" });
+      } catch {
+      }
+      try {
+        execFileSync("icacls", [file, "/reset"], { stdio: "ignore" });
+      } catch {
+      }
+      try {
+        execFileSync("attrib", ["-R", file], { stdio: "ignore" });
+      } catch {
+      }
+    } else if (process.platform === "darwin") {
+      try {
+        execFileSync("chflags", ["nouchg", file], { stdio: "ignore" });
+      } catch {
+      }
+    } else {
+      try {
+        execFileSync("chattr", ["-i", file], { stdio: "ignore" });
+      } catch {
+      }
+    }
+  } catch {
+  }
+}
+function protectedTargets() {
+  const p = globalPaths();
+  return [
+    join(p.hooksDir, "guard.mjs"),
+    join(p.hooksDir, "audit.mjs"),
+    join(p.hooksDir, "stop.mjs"),
+    p.configPath,
+    p.settingsPath
+  ];
+}
+function lockProtected() {
+  for (const f of protectedTargets()) lockFile(f);
+}
+function unlockProtected() {
+  for (const f of protectedTargets()) unlockFile(f);
+}
+function globalPaths() {
+  const home = homedir();
+  const sgDir = join(home, ".solongate");
+  const hooksDir = join(sgDir, "hooks");
+  const claudeDir = join(home, ".claude");
+  return {
+    home,
+    sgDir,
+    hooksDir,
+    claudeDir,
+    settingsPath: join(claudeDir, "settings.json"),
+    backupPath: join(claudeDir, "settings.solongate.bak"),
+    configPath: join(sgDir, "cloud-guard.json")
+  };
+}
+function readHook(filename) {
+  return readFileSync(join(HOOKS_DIR, filename), "utf-8");
+}
+function readGuard() {
+  const bundled = join(HOOKS_DIR, "guard.bundled.mjs");
+  return existsSync(bundled) ? readFileSync(bundled, "utf-8") : readHook("guard.mjs");
+}
+function ask(question) {
+  const rl = createInterface({ input: process.stdin, output: process.stderr });
+  return new Promise((res) => rl.question(question, (a) => {
+    rl.close();
+    res(a.trim());
+  }));
+}
+function runGlobalRestore() {
+  const p = globalPaths();
+  unlockProtected();
+  if (existsSync(p.backupPath)) {
+    writeFileSync(p.settingsPath, readFileSync(p.backupPath, "utf-8"));
+    console.log(`  Restored ${p.settingsPath} from backup.`);
+  } else if (existsSync(p.settingsPath)) {
+    try {
+      const s = JSON.parse(readFileSync(p.settingsPath, "utf-8"));
+      delete s.hooks;
+      writeFileSync(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
+      console.log(`  Removed SolonGate hooks from ${p.settingsPath}.`);
+    } catch {
+    }
+  } else {
+    console.log("  Nothing to restore \u2014 no global Claude Code settings found.");
+  }
+  console.log("  Global SolonGate enforcement uninstalled. Restart Claude Code.");
+}
+async function runGlobalInstall(opts = {}) {
+  const p = globalPaths();
+  let apiKey = opts.apiKey || process.env["SOLONGATE_API_KEY"] || "";
+  if (!apiKey || apiKey === "sg_live_your_key_here") {
+    try {
+      const cfg = JSON.parse(readFileSync(p.configPath, "utf-8"));
+      if (cfg && typeof cfg.apiKey === "string") apiKey = cfg.apiKey;
+    } catch {
+    }
+  }
+  if (!apiKey || apiKey === "sg_live_your_key_here") {
+    apiKey = await ask("  Enter your SolonGate API key (sg_live_\u2026 from https://dashboard.solongate.com): ");
+  }
+  if (!apiKey.startsWith("sg_live_") && !apiKey.startsWith("sg_test_")) {
+    console.log("  Invalid API key. Must start with sg_live_ or sg_test_");
+    process.exit(1);
+  }
+  const apiUrl = opts.apiUrl || process.env["SOLONGATE_API_URL"] || "https://api.solongate.com";
+  mkdirSync(p.hooksDir, { recursive: true });
+  mkdirSync(p.claudeDir, { recursive: true });
+  unlockProtected();
+  writeFileSync(join(p.hooksDir, "guard.mjs"), readGuard());
+  writeFileSync(join(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
+  writeFileSync(join(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
+  console.log(`  Installed hooks \u2192 ${p.hooksDir}`);
+  writeFileSync(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
+  console.log(`  Wrote ${p.configPath}`);
+  let existing = {};
+  if (existsSync(p.settingsPath)) {
+    const raw = readFileSync(p.settingsPath, "utf-8");
+    if (!existsSync(p.backupPath)) {
+      writeFileSync(p.backupPath, raw);
+      console.log(`  Backed up existing settings \u2192 ${p.backupPath}`);
+    }
+    try {
+      existing = JSON.parse(raw);
+    } catch {
+      existing = {};
+    }
+  }
+  const guardAbs = join(p.hooksDir, "guard.mjs").replace(/\\/g, "/");
+  const auditAbs = join(p.hooksDir, "audit.mjs").replace(/\\/g, "/");
+  const stopAbs = join(p.hooksDir, "stop.mjs").replace(/\\/g, "/");
+  const merged = {
+    ...existing,
+    hooks: {
+      PreToolUse: [{ matcher: "", hooks: [{ type: "command", command: `node "${guardAbs}" claude-code "Claude Code"` }] }],
+      PostToolUse: [{ matcher: "", hooks: [{ type: "command", command: `node "${auditAbs}" claude-code "Claude Code"` }] }],
+      Stop: [{ matcher: "", hooks: [{ type: "command", command: `node "${stopAbs}" claude-code "Claude Code"` }] }]
+    }
+  };
+  writeFileSync(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
+  console.log(`  Registered global hooks \u2192 ${p.settingsPath}`);
+  if (process.env["SOLONGATE_OS_LOCK"] === "1") {
+    lockProtected();
+    console.log("  Locked protection files (OS-level read-only/immutable).");
+  }
+}
+async function installGlobalWithKey(apiKey, apiUrl) {
+  await runGlobalInstall({ apiKey, apiUrl });
+}
+export {
+  globalPaths,
+  installGlobalWithKey,
+  lockProtected,
+  runGlobalInstall,
+  runGlobalRestore,
+  unlockProtected
+};