@solongate/proxy 0.48.1 → 0.49.0

package/dist/audit/reporter.d.ts

@@ -0,0 +1,22 @@
+import type { CheckResult, AuditData } from './types.js';
+export declare function printHeader(): void;
+export declare function printLogSummary(data: AuditData): void;
+export declare function calcScore(results: CheckResult[]): {
+    intScore: number;
+    fixCount: number;
+};
+export declare function printCompactReport(results: CheckResult[]): void;
+export declare function printScore(results: CheckResult[]): void;
+export declare function printDetailedReport(results: CheckResult[]): void;
+export declare function printFooter(results: CheckResult[]): void;
+export declare function printToolCall(tc: {
+    id: string;
+    toolName: string;
+    arguments: Record<string, unknown>;
+    result?: string;
+    isError?: boolean;
+    timestamp: string;
+    source: string;
+    sessionId: string;
+}, detailed?: boolean, model?: string): void;
+export declare function printLogs(data: AuditData, limit?: number, detailed?: boolean): void;

package/dist/audit/spinner.d.ts

@@ -0,0 +1,10 @@
+export declare class Spinner {
+    private interval;
+    private frame;
+    private message;
+    constructor(message: string);
+    start(): this;
+    update(message: string): void;
+    stop(finalMessage?: string): void;
+}
+export declare function withSpinner<T>(message: string, fn: () => T): T;

package/dist/audit/types.d.ts

@@ -0,0 +1,105 @@
+export type CheckStatus = 'PROTECTED' | 'PARTIAL' | 'NOT_PROTECTED';
+export interface Evidence {
+    icon: 'found' | 'missing' | 'warn' | 'info';
+    text: string;
+}
+export interface CheckResult {
+    code: string;
+    title: string;
+    status: CheckStatus;
+    summary: string;
+    details: string;
+    evidence: Evidence[];
+    recommendation?: string;
+}
+export interface ToolCall {
+    id: string;
+    toolName: string;
+    arguments: Record<string, unknown>;
+    result?: string;
+    isError?: boolean;
+    timestamp: string;
+    source: 'claude' | 'gemini' | 'openclaw';
+    sessionId: string;
+}
+export interface UserMessage {
+    timestamp: string;
+    text: string;
+    nextToolCallIndex?: number;
+}
+export interface SessionInfo {
+    id: string;
+    source: 'claude' | 'gemini' | 'openclaw';
+    startTime: string;
+    endTime?: string;
+    model?: string;
+    toolCalls: ToolCall[];
+    userMessages?: UserMessage[];
+    filePath: string;
+}
+export interface AuditData {
+    sessions: SessionInfo[];
+    totalToolCalls: number;
+    sources: string[];
+    timeRange: {
+        from: string;
+        to: string;
+    } | null;
+}
+export interface ChainMatch {
+    chainName: string;
+    sessionId: string;
+    steps: {
+        index: number;
+        toolName: string;
+        summary: string;
+    }[];
+    severity: 'high' | 'medium' | 'low';
+    description: string;
+}
+export interface DataFlowLeak {
+    sessionId: string;
+    sourceIndex: number;
+    sinkIndex: number;
+    sourceToolName: string;
+    sinkToolName: string;
+    dataType: string;
+    pattern: string;
+}
+export interface PermissionDrift {
+    sessionId: string;
+    earlyPrivilegeLevel: number;
+    latePrivilegeLevel: number;
+    driftRatio: number;
+    newToolTypes: string[];
+}
+export interface SessionBaseline {
+    source: 'claude' | 'gemini' | 'openclaw' | 'all';
+    avgToolCalls: number;
+    stddevToolCalls: number;
+    toolTypeDistribution: Record<string, number>;
+    avgDurationMs: number;
+    stddevDurationMs: number;
+}
+export interface SessionAnomaly {
+    sessionId: string;
+    source: string;
+    deviations: string[];
+    severity: 'high' | 'medium' | 'low';
+}
+export interface UnsolicitedAction {
+    sessionId: string;
+    toolCallIndex: number;
+    toolName: string;
+    action: string;
+    lastUserMessageBefore?: string;
+    timeSinceLastUserMessage?: number;
+}
+export interface DeepAnalysis {
+    chains: ChainMatch[];
+    dataFlowLeaks: DataFlowLeak[];
+    permissionDrifts: PermissionDrift[];
+    baselines: SessionBaseline[];
+    anomalies: SessionAnomaly[];
+    unsolicitedActions: UnsolicitedAction[];
+}

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.48.1",
+  "version": "0.49.0",
   "description": "AI tool security proxy — protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {
     "solongate": "./dist/index.js",
     "solongate-proxy": "./dist/index.js",
     "solongate-init": "./dist/init.js",
+    "solongate-audit": "./dist/audit/index.js",
     "proxy": "./dist/index.js"
   },
   "main": "./dist/lib.js",
@@ -61,6 +62,7 @@
   },
   "devDependencies": {
     "@open-policy-agent/opa-wasm": "^1.10.0",
+    "chalk": "^5.3.0",
     "esbuild": "^0.19.12",
     "tsup": "^8.3.0",
     "tsx": "^4.19.0",