@solongate/proxy 0.49.0 → 0.50.0

package/hooks/guard.mjs

@@ -31,7 +31,7 @@ import { createHash } from 'node:crypto';
 // the installed hook self-updates when the cloud version is higher (see
 // maybeSelfUpdate). This is what makes guard fixes propagate without a manual
 // reinstall — the same trust model as the OPA WASM this hook already runs.
-const HOOK_VERSION = 17;
+const HOOK_VERSION = 18;
 
 // Safe file read with size limit (1MB max) to prevent DoS via large files
 const MAX_FILE_READ = 1024 * 1024; // 1MB
@@ -1419,6 +1419,7 @@ process.stdin.on('end', async () => {
               reason: 'ghost path (hidden from agent)',
               permission: guessPermission(toolName),
               source: `${AGENT_TYPE}-guard`, agent_id: AGENT_TYPE, agent_name: AGENT_NAME,
+              session_id: data.session_id || '',
               evaluation_time_ms: Date.now() - _evalStart,
             }),
             signal: AbortSignal.timeout(3000),
@@ -1497,6 +1498,7 @@ process.stdin.on('end', async () => {
             permission: guessPermission(toolName),
             source: `${AGENT_TYPE}-guard`,
             agent_id: AGENT_TYPE, agent_name: AGENT_NAME,
+            session_id: data.session_id || '',
             evaluation_time_ms: Date.now() - _evalStart,
           };
           // PI hook layer removed — piResult fields no longer attached.

package/hooks/stop.mjs

@@ -1,75 +1,75 @@
-#!/usr/bin/env node
-/**
- * SolonGate Stop Hook (Stop event)
- * Logs a single ALLOW when Claude responds WITHOUT any tool calls.
- * If tool calls were made, audit.mjs already logged them — this hook skips.
- * Auto-installed by: npx @solongate/proxy init
- */
-import { readFileSync, existsSync, unlinkSync, writeFileSync } from 'node:fs';
-import { resolve, join } from 'node:path';
-
-function loadEnvKey(dir) {
-  try {
-    const envPath = resolve(dir, '.env');
-    if (!existsSync(envPath)) return {};
-    const lines = readFileSync(envPath, 'utf-8').split('\n');
-    const env = {};
-    for (const line of lines) {
-      const m = line.match(/^([A-Z_]+)=(.*)$/);
-      if (m) env[m[1]] = m[2].replace(/^["']|["']$/g, '').trim();
-    }
-    return env;
-  } catch { return {}; }
-}
-
-const dotenv = loadEnvKey(process.cwd());
-const API_KEY = process.env.SOLONGATE_API_KEY || dotenv.SOLONGATE_API_KEY || '';
-const API_URL = process.env.SOLONGATE_API_URL || dotenv.SOLONGATE_API_URL || 'https://api.solongate.com';
-
-// Agent identity from CLI args: node stop.mjs <agent_id> <agent_name>
-const AGENT_ID = process.argv[2] || 'claude-code';
-const AGENT_NAME = process.argv[3] || 'Claude Code';
-
-if (!API_KEY || !API_KEY.startsWith('sg_live_')) process.exit(0);
-
-// Flag file: audit.mjs writes this when a tool call was logged in this turn.
-// If the flag exists, tool calls were made → skip (already logged).
-// If the flag doesn't exist, no tool calls → log 1 ALLOW for the text response.
-const flagDir = resolve('.solongate');
-const flagFile = join(flagDir, '.last-tool-call');
-
-let input = '';
-process.stdin.on('data', c => input += c);
-process.stdin.on('end', async () => {
-  try {
-    // Check if tool calls were made in this turn
-    if (existsSync(flagFile)) {
-      // Tool calls happened → audit.mjs already logged them. Clean up flag.
-      try { unlinkSync(flagFile); } catch {}
-      process.exit(0);
-    }
-
-    // No tool calls → log 1 ALLOW for the text-only response (fire-and-forget)
-    fetch(`${API_URL}/api/v1/audit-logs`, {
-      method: 'POST',
-      headers: {
-        'Authorization': `Bearer ${API_KEY}`,
-        'Content-Type': 'application/json',
-      },
-      body: JSON.stringify({
-        tool: '_response',
-        arguments: {},
-        decision: 'ALLOW',
-        reason: 'text response (no tool calls)',
-        source: `${AGENT_ID}-hook`,
-        evaluationTimeMs: 0,
-        agent_id: AGENT_ID,
-        agent_name: AGENT_NAME,
-      }),
-      signal: AbortSignal.timeout(5000),
-    }).catch(() => {}).finally(() => process.exit(0));
-    setTimeout(() => process.exit(0), 3000);
-  } catch {
-    process.exit(0);
-  }
-});
+#!/usr/bin/env node
+/**
+ * SolonGate Stop Hook (Stop event)
+ * Logs a single ALLOW when Claude responds WITHOUT any tool calls.
+ * If tool calls were made, audit.mjs already logged them — this hook skips.
+ * Auto-installed by: npx @solongate/proxy login
+ */
+import { readFileSync, existsSync, unlinkSync, writeFileSync } from 'node:fs';
+import { resolve, join } from 'node:path';
+
+function loadEnvKey(dir) {
+  try {
+    const envPath = resolve(dir, '.env');
+    if (!existsSync(envPath)) return {};
+    const lines = readFileSync(envPath, 'utf-8').split('\n');
+    const env = {};
+    for (const line of lines) {
+      const m = line.match(/^([A-Z_]+)=(.*)$/);
+      if (m) env[m[1]] = m[2].replace(/^["']|["']$/g, '').trim();
+    }
+    return env;
+  } catch { return {}; }
+}
+
+const dotenv = loadEnvKey(process.cwd());
+const API_KEY = process.env.SOLONGATE_API_KEY || dotenv.SOLONGATE_API_KEY || '';
+const API_URL = process.env.SOLONGATE_API_URL || dotenv.SOLONGATE_API_URL || 'https://api.solongate.com';
+
+// Agent identity from CLI args: node stop.mjs <agent_id> <agent_name>
+const AGENT_ID = process.argv[2] || 'claude-code';
+const AGENT_NAME = process.argv[3] || 'Claude Code';
+
+if (!API_KEY || !API_KEY.startsWith('sg_live_')) process.exit(0);
+
+// Flag file: audit.mjs writes this when a tool call was logged in this turn.
+// If the flag exists, tool calls were made → skip (already logged).
+// If the flag doesn't exist, no tool calls → log 1 ALLOW for the text response.
+const flagDir = resolve('.solongate');
+const flagFile = join(flagDir, '.last-tool-call');
+
+let input = '';
+process.stdin.on('data', c => input += c);
+process.stdin.on('end', async () => {
+  try {
+    // Check if tool calls were made in this turn
+    if (existsSync(flagFile)) {
+      // Tool calls happened → audit.mjs already logged them. Clean up flag.
+      try { unlinkSync(flagFile); } catch {}
+      process.exit(0);
+    }
+
+    // No tool calls → log 1 ALLOW for the text-only response (fire-and-forget)
+    fetch(`${API_URL}/api/v1/audit-logs`, {
+      method: 'POST',
+      headers: {
+        'Authorization': `Bearer ${API_KEY}`,
+        'Content-Type': 'application/json',
+      },
+      body: JSON.stringify({
+        tool: '_response',
+        arguments: {},
+        decision: 'ALLOW',
+        reason: 'text response (no tool calls)',
+        source: `${AGENT_ID}-hook`,
+        evaluationTimeMs: 0,
+        agent_id: AGENT_ID,
+        agent_name: AGENT_NAME,
+      }),
+      signal: AbortSignal.timeout(5000),
+    }).catch(() => {}).finally(() => process.exit(0));
+    setTimeout(() => process.exit(0), 3000);
+  } catch {
+    process.exit(0);
+  }
+});

package/package.json

@@ -1,80 +1,76 @@
-{
-  "name": "@solongate/proxy",
-  "version": "0.49.0",
-  "description": "AI tool security proxy — protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
-  "type": "module",
-  "bin": {
-    "solongate": "./dist/index.js",
-    "solongate-proxy": "./dist/index.js",
-    "solongate-init": "./dist/init.js",
-    "solongate-audit": "./dist/audit/index.js",
-    "proxy": "./dist/index.js"
-  },
-  "main": "./dist/lib.js",
-  "types": "./dist/lib.d.ts",
-  "exports": {
-    ".": {
-      "types": "./dist/lib.d.ts",
-      "import": "./dist/lib.js"
-    },
-    "./cli": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
-    }
-  },
-  "files": [
-    "dist",
-    "hooks",
-    "README.md"
-  ],
-  "keywords": [
-    "ai-tool-security",
-    "ai-tool-proxy",
-    "security",
-    "proxy",
-    "gateway",
-    "firewall",
-    "ai-security",
-    "tool-security",
-    "claude",
-    "openclaw",
-    "solongate",
-    "prompt-injection",
-    "path-traversal",
-    "rate-limiting"
-  ],
-  "author": "SolonGate <hello@solongate.com>",
-  "license": "MIT",
-  "homepage": "https://solongate.com",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/solongate/solongate"
-  },
-  "engines": {
-    "node": ">=18.0.0"
-  },
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.26.0",
-    "zod": "^3.25.0"
-  },
-  "optionalDependencies": {
-    "@huggingface/transformers": ">=3.0.0"
-  },
-  "devDependencies": {
-    "@open-policy-agent/opa-wasm": "^1.10.0",
-    "chalk": "^5.3.0",
-    "esbuild": "^0.19.12",
-    "tsup": "^8.3.0",
-    "tsx": "^4.19.0",
-    "typescript": "^5.7.0",
-    "@solongate/tsconfig": "0.0.0"
-  },
-  "scripts": {
-    "build": "tsup && pnpm build:types && pnpm build:hooks",
-    "build:types": "node scripts/build-types.mjs",
-    "build:hooks": "node scripts/bundle-hooks.mjs",
-    "dev": "tsx src/index.ts",
-    "typecheck": "tsc --noEmit",
-    "clean": "rm -rf dist .turbo"
-  }
-}
+{
+  "name": "@solongate/proxy",
+  "version": "0.50.0",
+  "description": "AI tool security proxy — protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
+  "type": "module",
+  "bin": {
+    "solongate": "./dist/index.js",
+    "solongate-proxy": "./dist/index.js",
+    "solongate-audit": "./dist/audit/index.js",
+    "proxy": "./dist/index.js"
+  },
+  "main": "./dist/lib.js",
+  "types": "./dist/lib.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/lib.d.ts",
+      "import": "./dist/lib.js"
+    },
+    "./cli": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "hooks",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsup && pnpm build:types && pnpm build:hooks",
+    "build:types": "node scripts/build-types.mjs",
+    "build:hooks": "node scripts/bundle-hooks.mjs",
+    "dev": "tsx src/index.ts",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist .turbo"
+  },
+  "keywords": [
+    "ai-tool-security",
+    "ai-tool-proxy",
+    "security",
+    "proxy",
+    "gateway",
+    "firewall",
+    "ai-security",
+    "tool-security",
+    "claude",
+    "openclaw",
+    "solongate",
+    "prompt-injection",
+    "path-traversal",
+    "rate-limiting"
+  ],
+  "author": "SolonGate <hello@solongate.com>",
+  "license": "MIT",
+  "homepage": "https://solongate.com",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/solongate/solongate"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.26.0",
+    "zod": "^3.25.0"
+  },
+  "devDependencies": {
+    "@open-policy-agent/opa-wasm": "^1.10.0",
+    "chalk": "^5.3.0",
+    "@solongate/tsconfig": "workspace:*",
+    "esbuild": "^0.19.12",
+    "tsup": "^8.3.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0"
+  }
+}

package/dist/init.d.ts

@@ -1,18 +0,0 @@
-#!/usr/bin/env node
-/**
- * solongate init — Automatically wrap MCP servers with SolonGate protection.
- *
- * Reads your existing MCP configuration, wraps each server with the
- * SolonGate proxy, and writes the protected configuration back.
- *
- * Usage:
- *   solongate-init [options]
- *
- * Options:
- *   --config <path>     Path to MCP config file (default: auto-detect)
- *   --policy <file>     Custom policy JSON file (auto-detects policy.json)
- *   --all               Protect all servers without prompting
- *   --dry-run           Show what would change without writing
- *   --restore           Restore original config from backup
- */
-export {};