@solongate/proxy 0.51.0 → 0.52.0

package/dist/global-install.d.ts

@@ -10,6 +10,8 @@ export declare function globalPaths(): {
     configPath: string;
 };
 export declare function runGlobalRestore(): void;
+export declare function installClaudeShim(shieldPath: string): void;
+export declare function removeClaudeShim(): void;
 export declare function runGlobalInstall(opts?: {
     apiKey?: string;
     apiUrl?: string;

package/dist/global-install.js

@@ -69,6 +69,7 @@ function protectedTargets() {
     join(p.hooksDir, "guard.mjs"),
     join(p.hooksDir, "audit.mjs"),
     join(p.hooksDir, "stop.mjs"),
+    join(p.hooksDir, "shield.mjs"),
     p.configPath,
     p.settingsPath
   ];
@@ -111,6 +112,7 @@ function ask(question) {
 function runGlobalRestore() {
   const p = globalPaths();
   unlockProtected();
+  removeClaudeShim();
   if (existsSync(p.backupPath)) {
     writeFileSync(p.settingsPath, readFileSync(p.backupPath, "utf-8"));
     console.log(`  Restored ${p.settingsPath} from backup.`);
@@ -127,6 +129,79 @@ function runGlobalRestore() {
   }
   console.log("  Global SolonGate enforcement uninstalled. Restart Claude Code.");
 }
+var SHIM_BEGIN = "# >>> SolonGate shield (auto secret redaction) >>>";
+var SHIM_END = "# <<< SolonGate shield <<<";
+function escapeRe(s) {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function resolveRealClaude() {
+  try {
+    const finder = process.platform === "win32" ? "where" : "which";
+    const out = execFileSync(finder, ["claude"], { encoding: "utf-8" }).split(/\r?\n/).map((s) => s.trim()).filter(Boolean);
+    return out[0] || null;
+  } catch {
+    return null;
+  }
+}
+function shimTargets() {
+  if (process.platform === "win32") {
+    try {
+      const prof = execFileSync("powershell", ["-NoProfile", "-Command", "$PROFILE.CurrentUserAllHosts"], { encoding: "utf-8" }).trim();
+      return prof ? [prof] : [];
+    } catch {
+      return [];
+    }
+  }
+  return [".bashrc", ".zshrc", ".profile"].map((f) => join(homedir(), f)).filter((f) => existsSync(f));
+}
+function writeShimBlock(file, block) {
+  const re = new RegExp(escapeRe(SHIM_BEGIN) + "[\\s\\S]*?" + escapeRe(SHIM_END) + "\\r?\\n?", "g");
+  let content = existsSync(file) ? readFileSync(file, "utf-8") : "";
+  content = content.replace(re, "");
+  if (block) {
+    if (content.length && !content.endsWith("\n")) content += "\n";
+    content += block + "\n";
+  }
+  mkdirSync(dirname(file), { recursive: true });
+  writeFileSync(file, content);
+}
+function installClaudeShim(shieldPath) {
+  const real = resolveRealClaude();
+  if (!real) {
+    console.log("  (Claude Code not found on PATH \u2014 skipped auto-shield. Install it, then re-run `login`.)");
+    return;
+  }
+  const node = process.execPath.replace(/\\/g, "/");
+  const shield = shieldPath.replace(/\\/g, "/");
+  const win = process.platform === "win32";
+  const block = win ? `${SHIM_BEGIN}
+function claude { & "${node}" "${shield}" -- "${real}" @args }
+${SHIM_END}` : `${SHIM_BEGIN}
+claude() { "${node}" "${shield}" -- "${real}" "$@"; }
+${SHIM_END}`;
+  const targets = shimTargets();
+  if (targets.length === 0) {
+    console.log("  (No shell profile found for auto-shield; run `claude` via `solongate shield -- claude` manually.)");
+    return;
+  }
+  for (const file of targets) {
+    try {
+      writeShimBlock(file, block);
+      console.log(`  Auto-shield on: \`claude\` now masks secrets (${file})`);
+    } catch (e) {
+      console.log(`  (Could not enable auto-shield in ${file}: ${e.message})`);
+    }
+  }
+  console.log("  Open a NEW terminal for it to take effect.");
+}
+function removeClaudeShim() {
+  for (const file of shimTargets()) {
+    try {
+      writeShimBlock(file, null);
+    } catch {
+    }
+  }
+}
 async function runGlobalInstall(opts = {}) {
   const p = globalPaths();
   let apiKey = opts.apiKey || process.env["SOLONGATE_API_KEY"] || "";
@@ -151,7 +226,9 @@ async function runGlobalInstall(opts = {}) {
   writeFileSync(join(p.hooksDir, "guard.mjs"), readGuard());
   writeFileSync(join(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
   writeFileSync(join(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
+  writeFileSync(join(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
   console.log(`  Installed hooks \u2192 ${p.hooksDir}`);
+  installClaudeShim(join(p.hooksDir, "shield.mjs"));
   writeFileSync(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
   console.log(`  Wrote ${p.configPath}`);
   let existing = {};
@@ -191,8 +268,10 @@ async function installGlobalWithKey(apiKey, apiUrl) {
 }
 export {
   globalPaths,
+  installClaudeShim,
   installGlobalWithKey,
   lockProtected,
+  removeClaudeShim,
   runGlobalInstall,
   runGlobalRestore,
   unlockProtected