@solongate/proxy 0.59.2 → 0.59.4

package/hooks/guard.bundled.mjs

@@ -34,9 +34,9 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
-// ../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/json.js
+// node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/json.js
 var require_json = __commonJS({
-  "../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/json.js"(exports, module) {
+  "node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/json.js"(exports, module) {
     function isValidJSON(str) {
       if (typeof str !== "string") {
         return;
@@ -57,9 +57,9 @@ var require_json = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/sprintf-js@1.1.3/node_modules/sprintf-js/src/sprintf.js
+// node_modules/.pnpm/sprintf-js@1.1.3/node_modules/sprintf-js/src/sprintf.js
 var require_sprintf = __commonJS({
-  "../../node_modules/.pnpm/sprintf-js@1.1.3/node_modules/sprintf-js/src/sprintf.js"(exports) {
+  "node_modules/.pnpm/sprintf-js@1.1.3/node_modules/sprintf-js/src/sprintf.js"(exports) {
     !function() {
       "use strict";
       var re = {
@@ -260,26 +260,26 @@ var require_sprintf = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/strings.js
+// node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/strings.js
 var require_strings = __commonJS({
-  "../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/strings.js"(exports, module) {
+  "node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/strings.js"(exports, module) {
     var vsprintf = require_sprintf().vsprintf;
     var sprintf = (s, values) => vsprintf(s, values);
     module.exports = { sprintf };
   }
 });
 
-// ../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/regex.js
+// node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/regex.js
 var require_regex = __commonJS({
-  "../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/regex.js"(exports, module) {
+  "node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/regex.js"(exports, module) {
     var regexSplit = (pattern, s) => s.split(RegExp(pattern));
     module.exports = { "regex.split": regexSplit };
   }
 });
 
-// ../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/PlainValue-516d5bc2.js
+// node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/PlainValue-516d5bc2.js
 var require_PlainValue_516d5bc2 = __commonJS({
-  "../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/PlainValue-516d5bc2.js"(exports) {
+  "node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/PlainValue-516d5bc2.js"(exports) {
     "use strict";
     var Char = {
       ANCHOR: "&",
@@ -1042,9 +1042,9 @@ ${ctx}
   }
 });
 
-// ../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/parse-cst.js
+// node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/parse-cst.js
 var require_parse_cst = __commonJS({
-  "../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/parse-cst.js"(exports) {
+  "node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/parse-cst.js"(exports) {
     "use strict";
     var PlainValue = require_PlainValue_516d5bc2();
     var BlankLine = class extends PlainValue.Node {
@@ -2535,9 +2535,9 @@ var require_parse_cst = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/resolveSeq-95613e94.js
+// node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/resolveSeq-95613e94.js
 var require_resolveSeq_95613e94 = __commonJS({
-  "../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/resolveSeq-95613e94.js"(exports) {
+  "node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/resolveSeq-95613e94.js"(exports) {
     "use strict";
     var PlainValue = require_PlainValue_516d5bc2();
     function addCommentBefore(str, indent, comment) {
@@ -4512,9 +4512,9 @@ ${ca}` : ca;
   }
 });
 
-// ../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/warnings-793925ce.js
+// node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/warnings-793925ce.js
 var require_warnings_793925ce = __commonJS({
-  "../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/warnings-793925ce.js"(exports) {
+  "node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/warnings-793925ce.js"(exports) {
     "use strict";
     var PlainValue = require_PlainValue_516d5bc2();
     var resolveSeq = require_resolveSeq_95613e94();
@@ -4879,9 +4879,9 @@ ${pair.comment}` : item.comment;
   }
 });
 
-// ../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/Schema-bcc6c2d7.js
+// node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/Schema-bcc6c2d7.js
 var require_Schema_bcc6c2d7 = __commonJS({
-  "../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/Schema-bcc6c2d7.js"(exports) {
+  "node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/Schema-bcc6c2d7.js"(exports) {
     "use strict";
     var PlainValue = require_PlainValue_516d5bc2();
     var resolveSeq = require_resolveSeq_95613e94();
@@ -5345,9 +5345,9 @@ var require_Schema_bcc6c2d7 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/Document-a8d0fbf9.js
+// node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/Document-a8d0fbf9.js
 var require_Document_a8d0fbf9 = __commonJS({
-  "../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/Document-a8d0fbf9.js"(exports) {
+  "node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/Document-a8d0fbf9.js"(exports) {
     "use strict";
     var PlainValue = require_PlainValue_516d5bc2();
     var resolveSeq = require_resolveSeq_95613e94();
@@ -6028,9 +6028,9 @@ ${cbNode.commentBefore}` : cb;
   }
 });
 
-// ../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/index.js
+// node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/index.js
 var require_dist = __commonJS({
-  "../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/index.js"(exports) {
+  "node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/dist/index.js"(exports) {
     "use strict";
     var parseCst = require_parse_cst();
     var Document$1 = require_Document_a8d0fbf9();
@@ -6099,16 +6099,16 @@ var require_dist = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/index.js
+// node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/index.js
 var require_yaml = __commonJS({
-  "../../node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/index.js"(exports, module) {
+  "node_modules/.pnpm/yaml@1.10.3/node_modules/yaml/index.js"(exports, module) {
     module.exports = require_dist().YAML;
   }
 });
 
-// ../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/yaml.js
+// node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/yaml.js
 var require_yaml2 = __commonJS({
-  "../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/yaml.js"(exports, module) {
+  "node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/yaml.js"(exports, module) {
     var yaml = require_yaml();
     var errors = /* @__PURE__ */ new Set([
       "YAMLReferenceError",
@@ -6143,9 +6143,9 @@ var require_yaml2 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/index.js
+// node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/index.js
 var require_builtins = __commonJS({
-  "../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/index.js"(exports, module) {
+  "node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/builtins/index.js"(exports, module) {
     var json = require_json();
     var strings = require_strings();
     var regex = require_regex();
@@ -6159,9 +6159,9 @@ var require_builtins = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/opa.js
+// node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/opa.js
 var require_opa = __commonJS({
-  "../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/opa.js"(exports, module) {
+  "node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/opa.js"(exports, module) {
     var builtIns = require_builtins();
     function stringDecoder(mem) {
       return function(addr) {
@@ -6514,7 +6514,7 @@ var require_opa = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/index.mjs
+// node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/index.mjs
 var src_exports = {};
 __export(src_exports, {
   default: () => src_default,
@@ -6522,20 +6522,21 @@ __export(src_exports, {
 });
 var import_opa, loadPolicy, src_default;
 var init_src = __esm({
-  "../../node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/index.mjs"() {
+  "node_modules/.pnpm/@open-policy-agent+opa-wasm@1.10.0/node_modules/@open-policy-agent/opa-wasm/src/index.mjs"() {
     import_opa = __toESM(require_opa(), 1);
     loadPolicy = import_opa.default.loadPolicy;
     src_default = import_opa.default;
   }
 });
 
-// hooks/guard.mjs
+// packages/proxy/hooks/guard.mjs
 import { readFileSync, existsSync, statSync, writeFileSync, mkdirSync, chmodSync, renameSync, appendFileSync } from "node:fs";
+import { spawn } from "node:child_process";
 import { resolve, join, dirname, isAbsolute } from "node:path";
 import { homedir } from "node:os";
 import { gunzipSync } from "node:zlib";
 import { createHash } from "node:crypto";
-var HOOK_VERSION = 31;
+var HOOK_VERSION = 33;
 function localLogsOnly(security) {
   const l = security && security.localLogs;
   return !!(l && l.enabled && typeof l.path === "string" && l.path.trim());
@@ -6713,6 +6714,51 @@ var AGENT_TYPE = process.argv[2] || "claude-code";
 var POLICY_SELECTOR = process.env.SOLONGATE_AGENT_ID || "";
 var AGENT_ID = POLICY_SELECTOR || AGENT_TYPE;
 var AGENT_NAME = process.env.SOLONGATE_AGENT_NAME || process.argv[3] || AGENT_TYPE;
+var REFRESH_MODE = process.argv.includes("--sg-refresh-policy");
+async function refreshPolicyCache() {
+  try {
+    const agentKey = (AGENT_ID || "default").replace(/[^a-zA-Z0-9_-]/g, "_");
+    const cacheFile = join(resolve(homedir(), ".solongate"), ".policy-cache-" + agentKey + ".json");
+    let selfProtect = true, security = null, hookVersions = null, policy = null;
+    try {
+      if (existsSync(cacheFile)) {
+        const c = JSON.parse(readFileSync(cacheFile, "utf-8"));
+        if (c) {
+          policy = c.policy ?? null;
+          if (typeof c.selfProtect === "boolean")
+            selfProtect = c.selfProtect;
+          if (c.security !== void 0)
+            security = c.security;
+          if (c.hookVersions)
+            hookVersions = c.hookVersions;
+        }
+      }
+    } catch {
+    }
+    try {
+      const res = await fetch(API_URL + "/api/v1/policies/active?agent_id=" + encodeURIComponent(AGENT_ID || "") + "&hv=" + HOOK_VERSION, { headers: AUTH_HEADERS, signal: AbortSignal.timeout(8e3) });
+      if (res.ok) {
+        const body = await res.json();
+        if (typeof body?.self_protection_enabled === "boolean")
+          selfProtect = body.self_protection_enabled;
+        if (body?.security !== void 0)
+          security = body.security;
+        if (body?.hook_versions && typeof body.hook_versions === "object")
+          hookVersions = body.hook_versions;
+        policy = body && body.policy ? body.policy : null;
+      }
+    } catch {
+    }
+    try {
+      writeFileSync(cacheFile, JSON.stringify({ _ts: Date.now(), policy, selfProtect, security, hookVersions }));
+    } catch {
+    }
+  } catch {
+  }
+}
+if (REFRESH_MODE) {
+  refreshPolicyCache().finally(() => process.exit(0));
+}
 function blockTool(reason) {
   if (AGENT_TYPE === "gemini-cli") {
     process.stdout.write(JSON.stringify({
@@ -7610,6 +7656,8 @@ function readReferencedFiles(args, cwd) {
 }
 process.stdin.on("data", (c) => input += c);
 process.stdin.on("end", async () => {
+  if (REFRESH_MODE)
+    return;
   if (process.env.SOLONGATE_DEBUG) {
   }
   if (!API_KEY) {
@@ -7650,12 +7698,14 @@ process.stdin.on("end", async () => {
     try {
       let dashboardPolicy = null;
       let staleCache = null;
+      let refreshDue = true;
       try {
         if (existsSync(policyCacheFile)) {
           const cached = JSON.parse(readFileSync(policyCacheFile, "utf-8"));
           if (cached && cached.policy)
             staleCache = cached;
           if (cached && cached._ts && Date.now() - cached._ts < POLICY_TTL_MS) {
+            refreshDue = false;
             if (cached.policy)
               dashboardPolicy = cached.policy;
             if (typeof cached.selfProtect === "boolean")
@@ -7668,26 +7718,7 @@ process.stdin.on("end", async () => {
         }
       } catch {
       }
-      if (!dashboardPolicy) {
-        try {
-          const res = await fetch(API_URL + "/api/v1/policies/active?agent_id=" + encodeURIComponent(AGENT_ID || "") + "&hv=" + HOOK_VERSION, { headers: AUTH_HEADERS, signal: AbortSignal.timeout(2e3) });
-          if (res.ok) {
-            const body = await res.json();
-            if (typeof body?.self_protection_enabled === "boolean")
-              selfProtectEnabled = body.self_protection_enabled;
-            if (body?.security !== void 0)
-              securityCfg = body.security;
-            if (body?.hook_versions && typeof body.hook_versions === "object")
-              CLOUD_HOOK_VERSIONS = body.hook_versions;
-            if (body && body.policy)
-              dashboardPolicy = body.policy;
-            try {
-              writeFileSync(policyCacheFile, JSON.stringify({ _ts: Date.now(), policy: dashboardPolicy || null, selfProtect: selfProtectEnabled, security: securityCfg, hookVersions: CLOUD_HOOK_VERSIONS }));
-            } catch {
-            }
-          }
-        } catch {
-        }
+      if (refreshDue) {
         if (!dashboardPolicy && staleCache) {
           dashboardPolicy = staleCache.policy;
           if (typeof staleCache.selfProtect === "boolean")
@@ -7697,6 +7728,20 @@ process.stdin.on("end", async () => {
           if (staleCache.hookVersions)
             CLOUD_HOOK_VERSIONS = staleCache.hookVersions;
         }
+        if (API_KEY) {
+          try {
+            const lock = join(resolve(homedir(), ".solongate"), ".policy-refresh-" + agentKey + ".lock");
+            const due = !existsSync(lock) || Date.now() - statSync(lock).mtimeMs > 3e3;
+            if (due) {
+              try {
+                writeFileSync(lock, String(Date.now()));
+              } catch {
+              }
+              spawn(process.execPath, [process.argv[1], AGENT_TYPE, AGENT_NAME, "--sg-refresh-policy"], { detached: true, stdio: "ignore", env: process.env }).unref();
+            }
+          } catch {
+          }
+        }
       }
       if (process.env.SOLONGATE_DEBUG) {
       }

package/hooks/guard.mjs

@@ -22,6 +22,7 @@
  * Auto-installed by: npx @solongate/proxy init --global
  */
 import { readFileSync, existsSync, statSync, writeFileSync, mkdirSync, chmodSync, renameSync, appendFileSync } from 'node:fs';
+import { spawn } from 'node:child_process';
 import { resolve, join, dirname, isAbsolute } from 'node:path';
 import { homedir } from 'node:os';
 import { gunzipSync } from 'node:zlib';
@@ -31,7 +32,7 @@ import { createHash } from 'node:crypto';
 // the installed hook self-updates when the cloud version is higher (see
 // maybeSelfUpdate). This is what makes guard fixes propagate without a manual
 // reinstall — the same trust model as the OPA WASM this hook already runs.
-const HOOK_VERSION = 31;
+const HOOK_VERSION = 33;
 
 // True when local log storage is ON. In that mode logs are kept LOCAL ONLY and
 // nothing is sent to the cloud audit log.
@@ -248,6 +249,40 @@ const POLICY_SELECTOR = process.env.SOLONGATE_AGENT_ID || '';
 const AGENT_ID = POLICY_SELECTOR || AGENT_TYPE;
 const AGENT_NAME = process.env.SOLONGATE_AGENT_NAME || process.argv[3] || AGENT_TYPE;
 
+// ── Background policy refresh (stale-while-revalidate) ──
+// The hot path NEVER blocks on the network: when the policy cache is stale it
+// serves the cached (or local) policy INSTANTLY and spawns this detached mode to
+// fetch a fresh policy and rewrite the cache for the NEXT call. Result: fast tool
+// calls AND ~one-call propagation of policy changes — no long-TTL tradeoff.
+const REFRESH_MODE = process.argv.includes('--sg-refresh-policy');
+async function refreshPolicyCache() {
+  try {
+    const agentKey = (AGENT_ID || 'default').replace(/[^a-zA-Z0-9_-]/g, '_');
+    const cacheFile = join(resolve(homedir(), '.solongate'), '.policy-cache-' + agentKey + '.json');
+    // Preserve existing fields so a failed fetch never erases the last-known-good.
+    let selfProtect = true, security = null, hookVersions = null, policy = null;
+    try {
+      if (existsSync(cacheFile)) {
+        const c = JSON.parse(readFileSync(cacheFile, 'utf-8'));
+        if (c) { policy = c.policy ?? null; if (typeof c.selfProtect === 'boolean') selfProtect = c.selfProtect; if (c.security !== undefined) security = c.security; if (c.hookVersions) hookVersions = c.hookVersions; }
+      }
+    } catch {}
+    try {
+      const res = await fetch(API_URL + '/api/v1/policies/active?agent_id=' + encodeURIComponent(AGENT_ID || '') + '&hv=' + HOOK_VERSION, { headers: AUTH_HEADERS, signal: AbortSignal.timeout(8000) });
+      if (res.ok) {
+        const body = await res.json();
+        if (typeof body?.self_protection_enabled === 'boolean') selfProtect = body.self_protection_enabled;
+        if (body?.security !== undefined) security = body.security;
+        if (body?.hook_versions && typeof body.hook_versions === 'object') hookVersions = body.hook_versions;
+        policy = (body && body.policy) ? body.policy : null;
+      }
+    } catch {}
+    // Always advance _ts (success or failure) so the hot path backs off between refreshes.
+    try { writeFileSync(cacheFile, JSON.stringify({ _ts: Date.now(), policy, selfProtect, security, hookVersions })); } catch {}
+  } catch {}
+}
+if (REFRESH_MODE) { refreshPolicyCache().finally(() => process.exit(0)); }
+
 // ── Per-tool block/allow output ──
 // Response format depends on the agent:
 // Claude Code:  exit 2 + stderr = BLOCK, exit 0 = ALLOW
@@ -1369,6 +1404,9 @@ function readReferencedFiles(args, cwd) {
 
 process.stdin.on('data', c => input += c);
 process.stdin.on('end', async () => {
+  // Background-refresh invocation has no tool call to evaluate — it already ran
+  // refreshPolicyCache() at startup; do nothing on the (empty) stdin.
+  if (REFRESH_MODE) return;
   // No policy selected => no enforcement. A plain launch (no SOLONGATE_AGENT_ID)
   // is intentionally unrestricted.
   if (process.env.SOLONGATE_DEBUG) {
@@ -1443,15 +1481,22 @@ process.stdin.on('end', async () => {
     try {
       let dashboardPolicy = null;
       // Last-known-good cache, kept even past the TTL so we can fall back on it
-      // when the API is slow/unreachable instead of blocking or dropping the
-      // policy. `fresh` gates whether we skip the network entirely.
+      // when the API is slow/unreachable instead of blocking or dropping the policy.
       let staleCache = null;
-      // Try cache first
+      // Whether the TTL has elapsed since our last refresh ATTEMPT. Gating the
+      // fetch on the attempt timestamp (not on "do we already have a policy") is
+      // what makes the back-off actually work when the endpoint is slow: a failed
+      // or timed-out attempt still advances _ts, so we don't re-hit it — and eat
+      // the full 2s timeout — on every single call. Before this, _ts only moved on
+      // a SUCCESSFUL fetch, so a slow /policies/active meant ~2s on EVERY call and
+      // the 10s TTL never engaged (the cache never looked "fresh").
+      let refreshDue = true;
       try {
         if (existsSync(policyCacheFile)) {
           const cached = JSON.parse(readFileSync(policyCacheFile, 'utf-8'));
           if (cached && cached.policy) staleCache = cached;
           if (cached && cached._ts && Date.now() - cached._ts < POLICY_TTL_MS) {
+            refreshDue = false;
             if (cached.policy) dashboardPolicy = cached.policy;
             if (typeof cached.selfProtect === 'boolean') selfProtectEnabled = cached.selfProtect;
             if (cached.security !== undefined) securityCfg = cached.security;
@@ -1459,32 +1504,31 @@ process.stdin.on('end', async () => {
           }
         }
       } catch {}
-      // Refresh from API if cache expired
-      if (!dashboardPolicy) {
-        try {
-          // Report our installed version (hv) so the dashboard can show whether
-          // this guard is on the latest build. Short timeout: a stale cached
-          // policy (below) is a safe fallback, so there's no reason to block the
-          // tool for 8s waiting on a slow cloud — fail fast to last-known-good.
-          const res = await fetch(API_URL + '/api/v1/policies/active?agent_id=' + encodeURIComponent(AGENT_ID || '') + '&hv=' + HOOK_VERSION, { headers: AUTH_HEADERS, signal: AbortSignal.timeout(2000) });
-          if (res.ok) {
-            const body = await res.json();
-            // Capture the self-protection flag even when no cloud policy is set.
-            if (typeof body?.self_protection_enabled === 'boolean') selfProtectEnabled = body.self_protection_enabled;
-            if (body?.security !== undefined) securityCfg = body.security;
-            if (body?.hook_versions && typeof body.hook_versions === 'object') CLOUD_HOOK_VERSIONS = body.hook_versions;
-            if (body && body.policy) dashboardPolicy = body.policy;
-            try { writeFileSync(policyCacheFile, JSON.stringify({ _ts: Date.now(), policy: dashboardPolicy || null, selfProtect: selfProtectEnabled, security: securityCfg, hookVersions: CLOUD_HOOK_VERSIONS })); } catch {}
-          }
-        } catch {}
-        // API slow/unreachable → keep enforcing the last-known-good policy rather
-        // than blocking or silently falling through to the local default.
+      // Cache stale → DO NOT block the tool on the network. Serve the last-known-good
+      // policy right now (or the local policy.json fallback below if there is none)
+      // and kick off a DETACHED background refresh that rewrites the cache for the
+      // NEXT call. Stale-while-revalidate: tool calls stay instant (~ms), yet a
+      // policy change still lands within ~one call, because the fetch runs in
+      // parallel instead of on the hot path.
+      if (refreshDue) {
         if (!dashboardPolicy && staleCache) {
           dashboardPolicy = staleCache.policy;
           if (typeof staleCache.selfProtect === 'boolean') selfProtectEnabled = staleCache.selfProtect;
           if (staleCache.security !== undefined) securityCfg = staleCache.security;
           if (staleCache.hookVersions) CLOUD_HOOK_VERSIONS = staleCache.hookVersions;
         }
+        // Debounce: at most one background refresh in flight per ~3s, so a burst of
+        // stale calls (or several agents sharing this cache) doesn't spawn a swarm.
+        if (API_KEY) {
+          try {
+            const lock = join(resolve(homedir(), '.solongate'), '.policy-refresh-' + agentKey + '.lock');
+            const due = !existsSync(lock) || (Date.now() - statSync(lock).mtimeMs) > 3000;
+            if (due) {
+              try { writeFileSync(lock, String(Date.now())); } catch {}
+              spawn(process.execPath, [process.argv[1], AGENT_TYPE, AGENT_NAME, '--sg-refresh-policy'], { detached: true, stdio: 'ignore', env: process.env }).unref();
+            }
+          } catch {}
+        }
       }
 
       if (process.env.SOLONGATE_DEBUG) {

package/hooks/shield.mjs

@@ -23,7 +23,7 @@ import { homedir } from 'node:os';
 
 // Bump on every shield.mjs change. The cloud serves the newest version; the
 // guard hook installs it on its next run (no re-login needed).
-const HOOK_VERSION = 5;
+const HOOK_VERSION = 7;
 
 const log = (...a) => process.stderr.write(`[SolonGate shield] ${a.map(String).join(' ')}\n`);
 
@@ -220,7 +220,23 @@ function startProxy(upstream) {
       try {
         if (body.length && String(req.headers['content-type'] || '').includes('json')) {
           const parsed = JSON.parse(body.toString('utf-8'));
-          body = Buffer.from(JSON.stringify(redactDeep(parsed, cfg)), 'utf-8');
+          // Only the NEW turn needs scanning. The model re-sends the WHOLE
+          // conversation on every request, but every prior message was already
+          // redacted when it was itself the latest turn — so re-scanning all of
+          // history each call is pure waste that grows with the session (this was
+          // the source of the intermittent stalls). Redact ONLY the last message:
+          // the fresh user input + tool results (e.g. an `ls` result → ghost-strip
+          // hidden paths, DLP-redact secret patterns). We deliberately do NOT scan
+          // the model's own generated prose — only inputs and tool results matter.
+          const msgs = parsed && Array.isArray(parsed.messages) ? parsed.messages : null;
+          if (msgs && msgs.length > 0) {
+            const i = msgs.length - 1;
+            msgs[i] = redactDeep(msgs[i], cfg);
+            body = Buffer.from(JSON.stringify(parsed), 'utf-8');
+          } else {
+            // Non-messages payload (rare) → redact it once.
+            body = Buffer.from(JSON.stringify(redactDeep(parsed, cfg)), 'utf-8');
+          }
         }
       } catch { /* fail open */ }
       const headers = { ...req.headers };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.59.2",
+  "version": "0.59.4",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {