@solongate/proxy 0.58.0 → 0.59.1

package/hooks/guard.bundled.mjs

@@ -6531,7 +6531,7 @@ var init_src = __esm({
 
 // hooks/guard.mjs
 import { readFileSync, existsSync, statSync, writeFileSync, mkdirSync, chmodSync, renameSync, appendFileSync } from "node:fs";
-import { resolve, join, dirname } from "node:path";
+import { resolve, join, dirname, isAbsolute } from "node:path";
 import { homedir } from "node:os";
 import { gunzipSync } from "node:zlib";
 import { createHash } from "node:crypto";
@@ -6540,12 +6540,31 @@ function localLogsOnly(security) {
   const l = security && security.localLogs;
   return !!(l && l.enabled && typeof l.path === "string" && l.path.trim());
 }
+function resolveLocalLogDir(rawPath) {
+  const dir = String(rawPath || "").trim().replace(/[\\/]+$/, "");
+  if (!dir)
+    return null;
+  if (isAbsolute(dir))
+    return dir;
+  const fallback = resolve(homedir(), ".solongate", "local-logs");
+  try {
+    mkdirSync(resolve(homedir(), ".solongate"), { recursive: true });
+    writeFileSync(
+      resolve(homedir(), ".solongate", ".local-logs-invalid-path"),
+      JSON.stringify({ configured: dir, fallback, ts: Date.now() })
+    );
+  } catch {
+  }
+  return fallback;
+}
 function writeLocalLog(security, entry) {
   try {
     const l = security && security.localLogs;
     if (!l || !l.enabled || typeof l.path !== "string" || !l.path.trim())
       return;
-    const dir = l.path.trim().replace(/[\\/]+$/, "");
+    const dir = resolveLocalLogDir(l.path);
+    if (!dir)
+      return;
     try {
       mkdirSync(dir, { recursive: true });
     } catch {
@@ -7424,7 +7443,7 @@ function extractWasmFromBundle(buf) {
   }
   throw new Error("Unknown OPA bundle format");
 }
-var OPA_WASM_TTL_MS = 3e4;
+var OPA_WASM_TTL_MS = 24 * 60 * 60 * 1e3;
 async function getOpaWasmBytes(policy) {
   if (!policy || !policy.id)
     return null;
@@ -7447,7 +7466,7 @@ async function getOpaWasmBytes(policy) {
   try {
     const res = await fetch(
       API_URL + "/api/v1/policies/" + encodeURIComponent(policy.id) + "/wasm",
-      { headers: AUTH_HEADERS, signal: AbortSignal.timeout(8e3) }
+      { headers: AUTH_HEADERS, signal: AbortSignal.timeout(2500) }
     );
     if (!res.ok)
       return stale;
@@ -7627,12 +7646,15 @@ process.stdin.on("end", async () => {
     let securityCfg = null;
     const agentKey = (AGENT_ID || "default").replace(/[^a-zA-Z0-9_-]/g, "_");
     const policyCacheFile = join(resolve(homedir(), ".solongate"), ".policy-cache-" + agentKey + ".json");
-    const POLICY_TTL_MS = 3e3;
+    const POLICY_TTL_MS = 6e4;
     try {
       let dashboardPolicy = null;
+      let staleCache = null;
       try {
         if (existsSync(policyCacheFile)) {
           const cached = JSON.parse(readFileSync(policyCacheFile, "utf-8"));
+          if (cached && cached.policy)
+            staleCache = cached;
           if (cached && cached._ts && Date.now() - cached._ts < POLICY_TTL_MS) {
             if (cached.policy)
               dashboardPolicy = cached.policy;
@@ -7648,7 +7670,7 @@ process.stdin.on("end", async () => {
       }
       if (!dashboardPolicy) {
         try {
-          const res = await fetch(API_URL + "/api/v1/policies/active?agent_id=" + encodeURIComponent(AGENT_ID || "") + "&hv=" + HOOK_VERSION, { headers: AUTH_HEADERS, signal: AbortSignal.timeout(8e3) });
+          const res = await fetch(API_URL + "/api/v1/policies/active?agent_id=" + encodeURIComponent(AGENT_ID || "") + "&hv=" + HOOK_VERSION, { headers: AUTH_HEADERS, signal: AbortSignal.timeout(2e3) });
           if (res.ok) {
             const body = await res.json();
             if (typeof body?.self_protection_enabled === "boolean")
@@ -7666,6 +7688,15 @@ process.stdin.on("end", async () => {
           }
         } catch {
         }
+        if (!dashboardPolicy && staleCache) {
+          dashboardPolicy = staleCache.policy;
+          if (typeof staleCache.selfProtect === "boolean")
+            selfProtectEnabled = staleCache.selfProtect;
+          if (staleCache.security !== void 0)
+            securityCfg = staleCache.security;
+          if (staleCache.hookVersions)
+            CLOUD_HOOK_VERSIONS = staleCache.hookVersions;
+        }
       }
       if (process.env.SOLONGATE_DEBUG) {
       }