@solongate/proxy 0.6.6 → 0.6.8

package/dist/index.js

@@ -88,6 +88,7 @@ function parseArgs(argv) {
   let upstreamUrl;
   let upstreamTransport;
   let port;
+  let policyId;
   let separatorIndex = args.indexOf("--");
   const flags = separatorIndex >= 0 ? args.slice(0, separatorIndex) : args;
   const upstreamArgs = separatorIndex >= 0 ? args.slice(separatorIndex + 1) : [];
@@ -126,6 +127,10 @@ function parseArgs(argv) {
       case "--port":
         port = parseInt(flags[++i], 10);
         break;
+      case "--policy-id":
+      case "--id":
+        policyId = flags[++i];
+        break;
     }
   }
   if (apiKey && /^\$\{.+\}$/.test(apiKey)) {
@@ -173,7 +178,8 @@ function parseArgs(argv) {
       apiKey: apiKey ?? fileConfig.apiKey,
       apiUrl: apiUrl ?? fileConfig.apiUrl,
       port: port ?? fileConfig.port,
-      policyPath: resolvePolicyPath(cfgPolicySource) ?? void 0
+      policyPath: resolvePolicyPath(cfgPolicySource) ?? void 0,
+      policyId: policyId ?? fileConfig.policyId
     };
   }
   if (upstreamUrl) {
@@ -193,7 +199,8 @@ function parseArgs(argv) {
       apiKey,
       apiUrl,
       port,
-      policyPath: resolvedPolicyPath ?? void 0
+      policyPath: resolvedPolicyPath ?? void 0,
+      policyId
     };
   }
   if (upstreamArgs.length === 0) {
@@ -217,7 +224,8 @@ function parseArgs(argv) {
     apiKey,
     apiUrl,
     port,
-    policyPath: resolvedPolicyPath ?? void 0
+    policyPath: resolvedPolicyPath ?? void 0,
+    policyId
   };
 }
 function resolvePolicyPath(source) {
@@ -1158,6 +1166,20 @@ process.stdin.on('end', async () => {
       for (const p of protectedPaths) {
         if (s.includes(p)) {
           const msg = 'SOLONGATE: Access to protected file "' + p + '" is blocked';
+          if (API_KEY && API_KEY.startsWith('sg_live_')) {
+            try {
+              await fetch(API_URL + '/api/v1/audit-logs', {
+                method: 'POST',
+                headers: { 'Authorization': 'Bearer ' + API_KEY, 'Content-Type': 'application/json' },
+                body: JSON.stringify({
+                  tool: data.tool_name || '', arguments: args,
+                  decision: 'DENY', reason: msg,
+                  source: 'claude-code-guard',
+                }),
+                signal: AbortSignal.timeout(3000),
+              });
+            } catch {}
+          }
           process.stderr.write(msg);
           process.exit(2);
         }
@@ -3722,10 +3744,12 @@ var PolicySyncManager = class {
   pollTimer = null;
   watcher = null;
   isLiveKey;
+  policyId;
   constructor(opts) {
     this.localPath = opts.localPath;
     this.apiKey = opts.apiKey;
     this.apiUrl = opts.apiUrl;
+    this.policyId = opts.policyId;
     this.pollIntervalMs = opts.pollIntervalMs ?? 6e4;
     this.onPolicyUpdate = opts.onPolicyUpdate;
     this.currentPolicy = opts.initialPolicy;
@@ -3827,7 +3851,7 @@ var PolicySyncManager = class {
    */
   async onPollTick() {
     try {
-      const cloudPolicy = await fetchCloudPolicy(this.apiKey, this.apiUrl);
+      const cloudPolicy = await fetchCloudPolicy(this.apiKey, this.apiUrl, this.policyId);
       const cloudVer = cloudPolicy.version ?? 0;
       if (cloudVer <= this.localVersion && this.policiesEqual(cloudPolicy, this.currentPolicy)) {
         return;
@@ -3981,7 +4005,7 @@ var SolonGateProxy = class {
       }
       if (!this.config.apiKey.startsWith("sg_test_")) {
         try {
-          const cloudPolicy = await fetchCloudPolicy(this.config.apiKey, apiUrl);
+          const cloudPolicy = await fetchCloudPolicy(this.config.apiKey, apiUrl, this.config.policyId);
           this.config.policy = cloudPolicy;
           log2(`Loaded cloud policy: ${cloudPolicy.name} (${cloudPolicy.rules.length} rules)`);
         } catch (err) {
@@ -4296,6 +4320,7 @@ var SolonGateProxy = class {
       apiUrl,
       pollIntervalMs: 6e4,
       initialPolicy: this.config.policy,
+      policyId: this.config.policyId,
       onPolicyUpdate: (policy) => {
         this.config.policy = policy;
         this.gate.loadPolicy(policy);

package/dist/init.js

@@ -347,6 +347,20 @@ process.stdin.on('end', async () => {
       for (const p of protectedPaths) {
         if (s.includes(p)) {
           const msg = 'SOLONGATE: Access to protected file "' + p + '" is blocked';
+          if (API_KEY && API_KEY.startsWith('sg_live_')) {
+            try {
+              await fetch(API_URL + '/api/v1/audit-logs', {
+                method: 'POST',
+                headers: { 'Authorization': 'Bearer ' + API_KEY, 'Content-Type': 'application/json' },
+                body: JSON.stringify({
+                  tool: data.tool_name || '', arguments: args,
+                  decision: 'DENY', reason: msg,
+                  source: 'claude-code-guard',
+                }),
+                signal: AbortSignal.timeout(3000),
+              });
+            } catch {}
+          }
           process.stderr.write(msg);
           process.exit(2);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.6.6",
+  "version": "0.6.8",
   "description": "MCP security proxy — protect any MCP server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {