@solongate/proxy 0.59.1 → 0.59.3

package/hooks/guard.bundled.mjs

@@ -34,9 +34,9 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
-// ../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/json.js
+// node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/json.js
 var require_json = __commonJS({
-  "../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/json.js"(exports, module) {
+  "node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/json.js"(exports, module) {
     function isValidJSON(str) {
       if (typeof str !== "string") {
         return;
@@ -57,9 +57,9 @@ var require_json = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/sprintf-js@1.1.3/node_modules/sprintf-js/src/sprintf.js
+// node_modules/.pnpm/sprintf-js@1.1.3/node_modules/sprintf-js/src/sprintf.js
 var require_sprintf = __commonJS({
-  "../../node_modules/.pnpm/sprintf-js@1.1.3/node_modules/sprintf-js/src/sprintf.js"(exports) {
+  "node_modules/.pnpm/sprintf-js@1.1.3/node_modules/sprintf-js/src/sprintf.js"(exports) {
     !function() {
       "use strict";
       var re = {
@@ -260,26 +260,26 @@ var require_sprintf = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/strings.js
+// node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/strings.js
 var require_strings = __commonJS({
-  "../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/strings.js"(exports, module) {
+  "node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/strings.js"(exports, module) {
     var vsprintf = require_sprintf().vsprintf;
     var sprintf = (s, values) => vsprintf(s, values);
     module.exports = { sprintf };
   }
 });
 
-// ../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/regex.js
+// node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/regex.js
 var require_regex = __commonJS({
-  "../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/regex.js"(exports, module) {
+  "node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/regex.js"(exports, module) {
     var regexSplit = (pattern, s) => s.split(RegExp(pattern));
     module.exports = { "regex.split": regexSplit };
   }
 });
 
-// ../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/PlainValue-516d5bc2.js
+// node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/PlainValue-516d5bc2.js
 var require_PlainValue_516d5bc2 = __commonJS({
-  "../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/PlainValue-516d5bc2.js"(exports) {
+  "node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/PlainValue-516d5bc2.js"(exports) {
     "use strict";
     var Char = {
       ANCHOR: "&",
@@ -1042,9 +1042,9 @@ ${ctx}
   }
 });
 
-// ../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/parse-cst.js
+// node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/parse-cst.js
 var require_parse_cst = __commonJS({
-  "../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/parse-cst.js"(exports) {
+  "node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/parse-cst.js"(exports) {
     "use strict";
     var PlainValue = require_PlainValue_516d5bc2();
     var BlankLine = class extends PlainValue.Node {
@@ -2535,9 +2535,9 @@ var require_parse_cst = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/resolveSeq-95613e94.js
+// node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/resolveSeq-95613e94.js
 var require_resolveSeq_95613e94 = __commonJS({
-  "../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/resolveSeq-95613e94.js"(exports) {
+  "node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/resolveSeq-95613e94.js"(exports) {
     "use strict";
     var PlainValue = require_PlainValue_516d5bc2();
     function addCommentBefore(str, indent, comment) {
@@ -4512,9 +4512,9 @@ ${ca}` : ca;
   }
 });
 
-// ../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/warnings-793925ce.js
+// node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/warnings-793925ce.js
 var require_warnings_793925ce = __commonJS({
-  "../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/warnings-793925ce.js"(exports) {
+  "node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/warnings-793925ce.js"(exports) {
     "use strict";
     var PlainValue = require_PlainValue_516d5bc2();
     var resolveSeq = require_resolveSeq_95613e94();
@@ -4879,9 +4879,9 @@ ${pair.comment}` : item.comment;
   }
 });
 
-// ../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/Schema-bcc6c2d7.js
+// node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/Schema-bcc6c2d7.js
 var require_Schema_bcc6c2d7 = __commonJS({
-  "../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/Schema-bcc6c2d7.js"(exports) {
+  "node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/Schema-bcc6c2d7.js"(exports) {
     "use strict";
     var PlainValue = require_PlainValue_516d5bc2();
     var resolveSeq = require_resolveSeq_95613e94();
@@ -5345,9 +5345,9 @@ var require_Schema_bcc6c2d7 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/Document-a8d0fbf9.js
+// node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/Document-a8d0fbf9.js
 var require_Document_a8d0fbf9 = __commonJS({
-  "../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/Document-a8d0fbf9.js"(exports) {
+  "node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/Document-a8d0fbf9.js"(exports) {
     "use strict";
     var PlainValue = require_PlainValue_516d5bc2();
     var resolveSeq = require_resolveSeq_95613e94();
@@ -6028,9 +6028,9 @@ ${cbNode.commentBefore}` : cb;
   }
 });
 
-// ../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/index.js
+// node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/index.js
 var require_dist = __commonJS({
-  "../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/index.js"(exports) {
+  "node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/index.js"(exports) {
     "use strict";
     var parseCst = require_parse_cst();
     var Document$1 = require_Document_a8d0fbf9();
@@ -6099,16 +6099,16 @@ var require_dist = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/index.js
+// node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/index.js
 var require_yaml = __commonJS({
-  "../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/index.js"(exports, module) {
+  "node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/index.js"(exports, module) {
     module.exports = require_dist().YAML;
   }
 });
 
-// ../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/yaml.js
+// node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/yaml.js
 var require_yaml2 = __commonJS({
-  "../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/yaml.js"(exports, module) {
+  "node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/yaml.js"(exports, module) {
     var yaml = require_yaml();
     var errors = /* @__PURE__ */ new Set([
       "YAMLReferenceError",
@@ -6143,9 +6143,9 @@ var require_yaml2 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/index.js
+// node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/index.js
 var require_builtins = __commonJS({
-  "../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/index.js"(exports, module) {
+  "node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/index.js"(exports, module) {
     var json = require_json();
     var strings = require_strings();
     var regex = require_regex();
@@ -6159,9 +6159,9 @@ var require_builtins = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/opa.js
+// node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/opa.js
 var require_opa = __commonJS({
-  "../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/opa.js"(exports, module) {
+  "node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/opa.js"(exports, module) {
     var builtIns = require_builtins();
     function stringDecoder(mem) {
       return function(addr) {
@@ -6514,7 +6514,7 @@ var require_opa = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/index.mjs
+// node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/index.mjs
 var src_exports = {};
 __export(src_exports, {
   default: () => src_default,
@@ -6522,20 +6522,20 @@ __export(src_exports, {
 });
 var import_opa, loadPolicy, src_default;
 var init_src = __esm({
-  "../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/index.mjs"() {
+  "node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/index.mjs"() {
     import_opa = __toESM(require_opa(), 1);
     loadPolicy = import_opa.default.loadPolicy;
     src_default = import_opa.default;
   }
 });
 
-// hooks/guard.mjs
+// packages/proxy/hooks/guard.mjs
 import { readFileSync, existsSync, statSync, writeFileSync, mkdirSync, chmodSync, renameSync, appendFileSync } from "node:fs";
 import { resolve, join, dirname, isAbsolute } from "node:path";
 import { homedir } from "node:os";
 import { gunzipSync } from "node:zlib";
 import { createHash } from "node:crypto";
-var HOOK_VERSION = 30;
+var HOOK_VERSION = 32;
 function localLogsOnly(security) {
   const l = security && security.localLogs;
   return !!(l && l.enabled && typeof l.path === "string" && l.path.trim());
@@ -7646,16 +7646,18 @@ process.stdin.on("end", async () => {
     let securityCfg = null;
     const agentKey = (AGENT_ID || "default").replace(/[^a-zA-Z0-9_-]/g, "_");
     const policyCacheFile = join(resolve(homedir(), ".solongate"), ".policy-cache-" + agentKey + ".json");
-    const POLICY_TTL_MS = 6e4;
+    const POLICY_TTL_MS = 1e4;
     try {
       let dashboardPolicy = null;
       let staleCache = null;
+      let refreshDue = true;
       try {
         if (existsSync(policyCacheFile)) {
           const cached = JSON.parse(readFileSync(policyCacheFile, "utf-8"));
           if (cached && cached.policy)
             staleCache = cached;
           if (cached && cached._ts && Date.now() - cached._ts < POLICY_TTL_MS) {
+            refreshDue = false;
             if (cached.policy)
               dashboardPolicy = cached.policy;
             if (typeof cached.selfProtect === "boolean")
@@ -7668,7 +7670,7 @@ process.stdin.on("end", async () => {
         }
       } catch {
       }
-      if (!dashboardPolicy) {
+      if (refreshDue) {
         try {
           const res = await fetch(API_URL + "/api/v1/policies/active?agent_id=" + encodeURIComponent(AGENT_ID || "") + "&hv=" + HOOK_VERSION, { headers: AUTH_HEADERS, signal: AbortSignal.timeout(2e3) });
           if (res.ok) {
@@ -7681,10 +7683,6 @@ process.stdin.on("end", async () => {
               CLOUD_HOOK_VERSIONS = body.hook_versions;
             if (body && body.policy)
               dashboardPolicy = body.policy;
-            try {
-              writeFileSync(policyCacheFile, JSON.stringify({ _ts: Date.now(), policy: dashboardPolicy || null, selfProtect: selfProtectEnabled, security: securityCfg, hookVersions: CLOUD_HOOK_VERSIONS }));
-            } catch {
-            }
           }
         } catch {
         }
@@ -7697,6 +7695,11 @@ process.stdin.on("end", async () => {
           if (staleCache.hookVersions)
             CLOUD_HOOK_VERSIONS = staleCache.hookVersions;
         }
+        const keepPolicy = dashboardPolicy || staleCache && staleCache.policy || null;
+        try {
+          writeFileSync(policyCacheFile, JSON.stringify({ _ts: Date.now(), policy: keepPolicy, selfProtect: selfProtectEnabled, security: securityCfg, hookVersions: CLOUD_HOOK_VERSIONS }));
+        } catch {
+        }
       }
       if (process.env.SOLONGATE_DEBUG) {
       }

package/hooks/guard.mjs

@@ -31,7 +31,7 @@ import { createHash } from 'node:crypto';
 // the installed hook self-updates when the cloud version is higher (see
 // maybeSelfUpdate). This is what makes guard fixes propagate without a manual
 // reinstall — the same trust model as the OPA WASM this hook already runs.
-const HOOK_VERSION = 30;
+const HOOK_VERSION = 32;
 
 // True when local log storage is ON. In that mode logs are kept LOCAL ONLY and
 // nothing is sent to the cloud audit log.
@@ -1432,23 +1432,33 @@ process.stdin.on('end', async () => {
     const agentKey = (AGENT_ID || 'default').replace(/[^a-zA-Z0-9_-]/g, '_');
     const policyCacheFile = join(resolve(homedir(), '.solongate'), '.policy-cache-' + agentKey + '.json');
     // Serve the cached policy without any network for TTL seconds. This is a HOT
-    // PATH — it runs before every single tool call — so a short TTL means we
-    // block on a cloud round-trip on nearly every action. A dashboard-managed
-    // policy changes rarely, so 60s freshness is plenty; the previous 3s made the
-    // cache useless and put an 8s-timeout fetch in front of most tool calls.
-    const POLICY_TTL_MS = 60_000;
+    // PATH — it runs before every tool call. The original 3s TTL was slow not
+    // because of the number but because it paired an 8s-timeout blocking fetch
+    // with an every-3s cadence (and stacked behind the WASM fetch + a shared
+    // rate limit). With those fixed — 2s timeout, WASM decoupled (24h/fp),
+    // last-known-good stale fallback — a short TTL is cheap again: one small
+    // ~200ms GET on a single call per window, others read the cache with no
+    // network. So keep freshness tight (10s propagation) at negligible cost.
+    const POLICY_TTL_MS = 10_000;
     try {
       let dashboardPolicy = null;
       // Last-known-good cache, kept even past the TTL so we can fall back on it
-      // when the API is slow/unreachable instead of blocking or dropping the
-      // policy. `fresh` gates whether we skip the network entirely.
+      // when the API is slow/unreachable instead of blocking or dropping the policy.
       let staleCache = null;
-      // Try cache first
+      // Whether the TTL has elapsed since our last refresh ATTEMPT. Gating the
+      // fetch on the attempt timestamp (not on "do we already have a policy") is
+      // what makes the back-off actually work when the endpoint is slow: a failed
+      // or timed-out attempt still advances _ts, so we don't re-hit it — and eat
+      // the full 2s timeout — on every single call. Before this, _ts only moved on
+      // a SUCCESSFUL fetch, so a slow /policies/active meant ~2s on EVERY call and
+      // the 10s TTL never engaged (the cache never looked "fresh").
+      let refreshDue = true;
       try {
         if (existsSync(policyCacheFile)) {
           const cached = JSON.parse(readFileSync(policyCacheFile, 'utf-8'));
           if (cached && cached.policy) staleCache = cached;
           if (cached && cached._ts && Date.now() - cached._ts < POLICY_TTL_MS) {
+            refreshDue = false;
             if (cached.policy) dashboardPolicy = cached.policy;
             if (typeof cached.selfProtect === 'boolean') selfProtectEnabled = cached.selfProtect;
             if (cached.security !== undefined) securityCfg = cached.security;
@@ -1456,32 +1466,32 @@ process.stdin.on('end', async () => {
           }
         }
       } catch {}
-      // Refresh from API if cache expired
-      if (!dashboardPolicy) {
+      // Refresh from the API at most once per TTL window.
+      if (refreshDue) {
         try {
-          // Report our installed version (hv) so the dashboard can show whether
-          // this guard is on the latest build. Short timeout: a stale cached
-          // policy (below) is a safe fallback, so there's no reason to block the
-          // tool for 8s waiting on a slow cloud — fail fast to last-known-good.
           const res = await fetch(API_URL + '/api/v1/policies/active?agent_id=' + encodeURIComponent(AGENT_ID || '') + '&hv=' + HOOK_VERSION, { headers: AUTH_HEADERS, signal: AbortSignal.timeout(2000) });
           if (res.ok) {
             const body = await res.json();
-            // Capture the self-protection flag even when no cloud policy is set.
             if (typeof body?.self_protection_enabled === 'boolean') selfProtectEnabled = body.self_protection_enabled;
             if (body?.security !== undefined) securityCfg = body.security;
             if (body?.hook_versions && typeof body.hook_versions === 'object') CLOUD_HOOK_VERSIONS = body.hook_versions;
             if (body && body.policy) dashboardPolicy = body.policy;
-            try { writeFileSync(policyCacheFile, JSON.stringify({ _ts: Date.now(), policy: dashboardPolicy || null, selfProtect: selfProtectEnabled, security: securityCfg, hookVersions: CLOUD_HOOK_VERSIONS })); } catch {}
           }
         } catch {}
-        // API slow/unreachable → keep enforcing the last-known-good policy rather
-        // than blocking or silently falling through to the local default.
+        // API slow/unreachable → keep enforcing the last-known-good policy.
         if (!dashboardPolicy && staleCache) {
           dashboardPolicy = staleCache.policy;
           if (typeof staleCache.selfProtect === 'boolean') selfProtectEnabled = staleCache.selfProtect;
           if (staleCache.security !== undefined) securityCfg = staleCache.security;
           if (staleCache.hookVersions) CLOUD_HOOK_VERSIONS = staleCache.hookVersions;
         }
+        // ALWAYS advance _ts after an attempt — success, stale fallback, or even a
+        // cold miss with no policy — so a slow/down endpoint is retried at most
+        // once per TTL (≈2s per 10s worst case, not 2s per call). Keep the
+        // last-known-good policy in the cache so a failed attempt never erases it;
+        // when nothing is available, enforcement falls back to ~/.solongate/policy.json below.
+        const keepPolicy = dashboardPolicy || (staleCache && staleCache.policy) || null;
+        try { writeFileSync(policyCacheFile, JSON.stringify({ _ts: Date.now(), policy: keepPolicy, selfProtect: selfProtectEnabled, security: securityCfg, hookVersions: CLOUD_HOOK_VERSIONS })); } catch {}
       }
 
       if (process.env.SOLONGATE_DEBUG) {

package/hooks/shield.mjs

@@ -23,7 +23,7 @@ import { homedir } from 'node:os';
 
 // Bump on every shield.mjs change. The cloud serves the newest version; the
 // guard hook installs it on its next run (no re-login needed).
-const HOOK_VERSION = 5;
+const HOOK_VERSION = 7;
 
 const log = (...a) => process.stderr.write(`[SolonGate shield] ${a.map(String).join(' ')}\n`);
 
@@ -220,7 +220,23 @@ function startProxy(upstream) {
       try {
         if (body.length && String(req.headers['content-type'] || '').includes('json')) {
           const parsed = JSON.parse(body.toString('utf-8'));
-          body = Buffer.from(JSON.stringify(redactDeep(parsed, cfg)), 'utf-8');
+          // Only the NEW turn needs scanning. The model re-sends the WHOLE
+          // conversation on every request, but every prior message was already
+          // redacted when it was itself the latest turn — so re-scanning all of
+          // history each call is pure waste that grows with the session (this was
+          // the source of the intermittent stalls). Redact ONLY the last message:
+          // the fresh user input + tool results (e.g. an `ls` result → ghost-strip
+          // hidden paths, DLP-redact secret patterns). We deliberately do NOT scan
+          // the model's own generated prose — only inputs and tool results matter.
+          const msgs = parsed && Array.isArray(parsed.messages) ? parsed.messages : null;
+          if (msgs && msgs.length > 0) {
+            const i = msgs.length - 1;
+            msgs[i] = redactDeep(msgs[i], cfg);
+            body = Buffer.from(JSON.stringify(parsed), 'utf-8');
+          } else {
+            // Non-messages payload (rare) → redact it once.
+            body = Buffer.from(JSON.stringify(redactDeep(parsed, cfg)), 'utf-8');
+          }
         }
       } catch { /* fail open */ }
       const headers = { ...req.headers };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.59.1",
+  "version": "0.59.3",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {