@solongate/proxy 0.81.25 → 0.81.26

package/dist/api-client/audit.d.ts

@@ -12,6 +12,19 @@ export interface AuditQuery {
     signal?: 'dlp' | 'ratelimit';
 }
 export declare function list(query?: AuditQuery): Promise<AuditList>;
+export declare function remove(ids: string[]): Promise<{
+    deleted: {
+        logs: number;
+        agents: number;
+    };
+}>;
+/** Deletes EVERY audit log of the project (agents/sessions are kept). */
+export declare function removeAll(): Promise<{
+    deleted: {
+        logs: number;
+        agents: number;
+    };
+}>;
 export declare function whitelist(id: string, scope?: 'exact' | 'tool'): Promise<{
     ok: true;
     deduped: boolean;

package/dist/commands/index.js

@@ -291,11 +291,19 @@ var audit_exports = {};
 __export(audit_exports, {
   block: () => block,
   list: () => list2,
+  remove: () => remove2,
+  removeAll: () => removeAll,
   whitelist: () => whitelist
 });
 function list2(query = {}) {
   return request("GET", "/audit-logs", { query });
 }
+function remove2(ids) {
+  return request("DELETE", "/audit-logs", { body: { ids } });
+}
+function removeAll() {
+  return request("DELETE", "/audit-logs", { body: { scope: "logs" } });
+}
 function whitelist(id, scope = "exact") {
   return request("POST", `/audit-logs/${encodeURIComponent(id)}/whitelist`, { body: { scope } });
 }

package/dist/index.js

@@ -6845,7 +6845,7 @@ var init_components = __esm({
 });
 
 // src/tui/local-log.ts
-import { closeSync, openSync, readSync, statSync } from "fs";
+import { closeSync, openSync, readFileSync as readFileSync6, readSync, statSync, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir4 } from "os";
 import { join as join6 } from "path";
 function tailLines(file, maxBytes = 131072) {
@@ -6863,6 +6863,39 @@ function tailLines(file, maxBytes = 131072) {
     return [];
   }
 }
+function deleteLocalEntry(at, tool, session) {
+  try {
+    const lines = readFileSync6(LOCAL_LOG, "utf-8").split("\n");
+    let removed = 0;
+    const kept = lines.filter((line) => {
+      if (!line.trim()) return false;
+      if (removed) return true;
+      try {
+        const j = JSON.parse(line);
+        const hit = Date.parse(j.ts ?? "") === at && (j.tool ?? "?") === tool && (!session || j.session_id === session);
+        if (hit) {
+          removed++;
+          return false;
+        }
+      } catch {
+      }
+      return true;
+    });
+    if (removed) writeFileSync3(LOCAL_LOG, kept.length ? kept.join("\n") + "\n" : "");
+    return removed;
+  } catch {
+    return 0;
+  }
+}
+function clearLocalLog() {
+  try {
+    const n = readFileSync6(LOCAL_LOG, "utf-8").split("\n").filter(Boolean).length;
+    writeFileSync3(LOCAL_LOG, "");
+    return n;
+  } catch {
+    return 0;
+  }
+}
 function parseLocalLines(lines) {
   const out2 = [];
   for (const line of lines) {
@@ -7062,11 +7095,19 @@ var audit_exports = {};
 __export(audit_exports, {
   block: () => block,
   list: () => list2,
+  remove: () => remove2,
+  removeAll: () => removeAll,
   whitelist: () => whitelist
 });
 function list2(query = {}) {
   return request("GET", "/audit-logs", { query });
 }
+function remove2(ids) {
+  return request("DELETE", "/audit-logs", { body: { ids } });
+}
+function removeAll() {
+  return request("DELETE", "/audit-logs", { body: { scope: "logs" } });
+}
 function whitelist(id, scope = "exact") {
   return request("POST", `/audit-logs/${encodeURIComponent(id)}/whitelist`, { body: { scope } });
 }
@@ -7267,7 +7308,7 @@ var init_hooks = __esm({
 // src/tui/panels/Live.tsx
 import { Box as Box2, Text as Text2, useInput } from "ink";
 import TextInput from "ink-text-input";
-import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync3 } from "fs";
+import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync4 } from "fs";
 import { homedir as homedir5 } from "os";
 import { join as join7 } from "path";
 import { useCallback as useCallback2, useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
@@ -7818,7 +7859,7 @@ function LivePanel({ active: active2 }) {
         const file = join7(homedir5(), ".solongate", "live-export.jsonl");
         try {
           mkdirSync3(join7(homedir5(), ".solongate"), { recursive: true });
-          writeFileSync3(file, visibleDesc.map((x) => JSON.stringify(x)).join("\n") + "\n");
+          writeFileSync4(file, visibleDesc.map((x) => JSON.stringify(x)).join("\n") + "\n");
           setActionMsg({ text: `\u2713 exported ${visibleDesc.length} lines \u2192 ${file}`, level: "ok", until: Date.now() + 6e3 });
         } catch (err2) {
           setActionMsg({ text: "\u2717 export failed: " + (err2 instanceof Error ? err2.message : String(err2)), level: "bad", until: Date.now() + 6e3 });
@@ -8873,6 +8914,8 @@ function AuditPanel({ active: active2, focused }) {
   const [si, setSi] = useState6(0);
   const [sessSearch, setSessSearch] = useState6("");
   const [sessSel, setSessSel] = useState6(0);
+  const [confirm, setConfirm] = useState6(null);
+  const [msg, setMsg] = useState6(null);
   const toTop = () => setSel(0);
   const statsQ = useLoader(() => source === "cloud" ? api.stats.get() : Promise.resolve(null), [source]);
   const tsQ = useLoader(() => source === "cloud" ? api.stats.timeseries({ period: "24h" }) : Promise.resolve(null), [source]);
@@ -8958,6 +9001,31 @@ function AuditPanel({ active: active2, focused }) {
     () => view === "detail" && current?.session && source === "cloud" ? api.audit.list({ session_id: current.session, limit: 40 }) : Promise.resolve(null),
     [view, current?.session, source]
   );
+  const logsLoading = (source === "cloud" ? cloudQ.loading : localQ.loading) && !editing;
+  const sessLoading = source === "cloud" ? agentsQ.loading : localQ.loading;
+  const doDelete = (kind) => {
+    setMsg({ text: "deleting\u2026", level: "ok" });
+    const run12 = async () => {
+      if (source === "cloud") {
+        if (kind === "one") {
+          if (!current) throw new Error("nothing selected");
+          await api.audit.remove([current.id]);
+        } else {
+          await api.audit.removeAll();
+        }
+        cloudQ.reload();
+        statsQ.reloadQuiet();
+      } else {
+        const n = kind === "one" && current ? deleteLocalEntry(current.at, current.tool, current.session) : kind === "all" ? clearLocalLog() : 0;
+        if (!n) throw new Error("entry not found in the local file");
+        localQ.reload();
+      }
+    };
+    run12().then(() => {
+      setMsg({ text: kind === "one" ? "\u2713 entry deleted" : `\u2713 ALL ${source} logs deleted`, level: "ok" });
+      toTop();
+    }).catch((e) => setMsg({ text: "\u2717 " + (e instanceof Error ? e.message : String(e)), level: "bad" }));
+  };
   useInput5(
     (input, key) => {
       if (view === "detail") {
@@ -8968,6 +9036,11 @@ function AuditPanel({ active: active2, focused }) {
         else if (key.pageDown) setDetailScroll((n) => n + 10);
         return;
       }
+      if (view === "logs" ? logsLoading : sessLoading) return;
+      if (confirm && input !== "x" && input !== "X") {
+        setConfirm(null);
+        setMsg(null);
+      }
       if (input === "s") {
         setSource((s) => s === "cloud" ? "local" : "cloud");
         setPage(0);
@@ -9029,6 +9102,23 @@ function AuditPanel({ active: active2, focused }) {
         setGi((n) => (n + 1) % SIGNALS.length);
         setPage(0);
         toTop();
+      } else if (input === "x") {
+        if (!current) return;
+        if (confirm?.kind !== "one" || confirm.key !== current.id) {
+          setConfirm({ kind: "one", key: current.id });
+          setMsg({ text: `delete ${current.decision} ${current.tool} (${ago(current.at)} ago)? press x again`, level: "bad" });
+          return;
+        }
+        setConfirm(null);
+        doDelete("one");
+      } else if (input === "X") {
+        if (confirm?.kind !== "all") {
+          setConfirm({ kind: "all", key: "all" });
+          setMsg({ text: `DELETE ALL ${source} logs (${total} entries)? press X again`, level: "bad" });
+          return;
+        }
+        setConfirm(null);
+        doDelete("all");
       } else if (input === "t") setEditing("tool");
       else if (input === "n") setEditing("agent");
       else if (input === "/") setEditing("search");
@@ -9155,8 +9245,7 @@ function AuditPanel({ active: active2, focused }) {
     const selC = Math.min(sessSel, Math.max(0, sessionsFiltered.length - 1));
     const start2 = Math.min(Math.max(0, selC - Math.floor((listRows2 - 1) / 2)), Math.max(0, sessionsFiltered.length - listRows2));
     const win = sessionsFiltered.slice(start2, start2 + listRows2);
-    const loading2 = source === "cloud" ? agentsQ.loading : localQ.loading;
-    return /* @__PURE__ */ jsx6(DataView, { loading: loading2, error: source === "cloud" ? agentsQ.error : localQ.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+    return /* @__PURE__ */ jsx6(DataView, { loading: sessLoading, error: source === "cloud" ? agentsQ.error : localQ.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
       strip,
       /* @__PURE__ */ jsxs6(Box6, { children: [
         srcChip,
@@ -9219,15 +9308,14 @@ function AuditPanel({ active: active2, focused }) {
       ] }) : null
     ] }) });
   }
-  const headerRows = 6 + (editing && editing !== "sess-search" ? 1 : 0);
+  const headerRows = 6 + (editing && editing !== "sess-search" ? 1 : 0) + (msg ? 1 : 0);
   const listRows = Math.max(4, rows - headerRows);
   const selClamped = Math.min(sel, Math.max(0, pageRows.length - 1));
   const maxStart = Math.max(0, pageRows.length - listRows);
   const start = Math.min(Math.max(0, selClamped - Math.floor((listRows - 1) / 2)), maxStart);
   const windowed = pageRows.slice(start, start + listRows);
   const reasonW = Math.min(60, Math.max(12, cols - 67));
-  const loading = (source === "cloud" ? cloudQ.loading : localQ.loading) && !editing;
-  return /* @__PURE__ */ jsx6(DataView, { loading, error: source === "cloud" ? cloudQ.error : localQ.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+  return /* @__PURE__ */ jsx6(DataView, { loading: logsLoading, error: source === "cloud" ? cloudQ.error : localQ.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
     strip,
     /* @__PURE__ */ jsxs6(Box6, { children: [
       srcChip,
@@ -9240,7 +9328,8 @@ function AuditPanel({ active: active2, focused }) {
       chip("search", search || "\xB7", !!search),
       sessFilter ? chip("sess", sessFilter.slice(0, 8), true) : null
     ] }),
-    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter full entry \xB7 \u2190\u2192 page \xB7 f dec \xB7 g sig \xB7 t tool \xB7 n agent \xB7 / search \xB7 s source \xB7 v sessions \xB7 c clear" : "press \u2192 to browse" }),
+    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter full entry \xB7 \u2190\u2192 page \xB7 f dec \xB7 g sig \xB7 t tool \xB7 n agent \xB7 / search \xB7 x del \xB7 X del ALL \xB7 s source \xB7 v sessions \xB7 c clear" : "press \u2192 to browse" }),
+    msg ? /* @__PURE__ */ jsx6(Text6, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate2(msg.text, cols) }) : null,
     editing && editing !== "sess-search" ? /* @__PURE__ */ jsxs6(Box6, { children: [
       /* @__PURE__ */ jsxs6(Text6, { color: theme.warn, children: [
         editing,
@@ -9663,7 +9752,7 @@ var init_App = __esm({
       ["Live", [["\u2191\u2193", "select a stream row"], ["enter", "full entry content"], ["w", "whitelist the selected DENY"], ["b", "block the selected ALLOW"], ["d / x / r", "filter denies / dlp / rate-limit"], ["f", "local / cloud filter"], ["/", "search"], ["s", "sessions (\u2191\u2193 pick, enter open)"], ["space", "copy mode (freeze)"]]],
       ["Policies", [["\u2191\u2193", "browse / select"], ["a", "activate (pin) selected policy"], ["x", "deactivate \u2014 no active policy"], ["enter", "open rules \u2192 open a rule"], ["space", "toggle a rule on/off"], ["e", "flip effect"], ["n", "new rule"], ["d", "delete rule"], ["m", "flip mode"], ["D", "dry-run the draft"], ["s", "save"], ["x", "discard"]]],
       ["Rate limit / DLP", [["\u2191\u2193", "field / pattern"], ["\u2190\u2192", "adjust (shift = \xB110)"], ["space", "toggle pattern"], ["m", "mode"], ["a / d", "add / remove custom"], ["g", "ghost mode"], ["P", "self-protection"], ["s", "save"]]],
-      ["Audit", [["v", "logs \u2194 sessions"], ["s", "source: cloud \u2194 local"], ["\u2190 \u2192", "prev / next page (500 each)"], ["\u2191\u2193", "select (list scrolls)"], ["enter", "full entry / session logs"], ["f / g", "decision / signal filter"], ["t / n / /", "tool / agent / search"], ["c", "clear filters"]]],
+      ["Audit", [["v", "logs \u2194 sessions"], ["s", "source: cloud \u2194 local"], ["\u2190 \u2192", "prev / next page (500 each)"], ["\u2191\u2193", "select (list scrolls)"], ["enter", "full entry / session logs"], ["f / g", "decision / signal filter"], ["t / n / /", "tool / agent / search"], ["x / X", "delete entry / ALL (press twice)"], ["c", "clear filters"]]],
       ["Settings", [["\u2191\u2193", "move"], ["enter / space", "toggle \xB7 edit \xB7 add"], ["e", "webhook events"], ["d d", "delete"], ["r", "refresh"]]]
     ];
   }
@@ -9801,7 +9890,7 @@ var init_args = __esm({
 });
 
 // src/commands/policy.ts
-import { readFileSync as readFileSync6 } from "fs";
+import { readFileSync as readFileSync7 } from "fs";
 async function run(argv) {
   const { positionals, flags } = parse(argv);
   const sub = positionals[0];
@@ -9976,7 +10065,7 @@ function printRules(rules) {
 }
 async function resolveRules(target) {
   if (target.endsWith(".json")) {
-    const parsed = JSON.parse(readFileSync6(target, "utf-8"));
+    const parsed = JSON.parse(readFileSync7(target, "utf-8"));
     return parsed.rules ?? [];
   }
   const p = await api.policies.get(target);
@@ -10869,7 +10958,7 @@ __export(global_install_exports, {
   runGlobalRestore: () => runGlobalRestore,
   unlockProtected: () => unlockProtected
 });
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync4, existsSync as existsSync6, mkdirSync as mkdirSync4 } from "fs";
+import { readFileSync as readFileSync8, writeFileSync as writeFileSync5, existsSync as existsSync6, mkdirSync as mkdirSync4 } from "fs";
 import { resolve as resolve4, join as join10, dirname } from "path";
 import { homedir as homedir8 } from "os";
 import { fileURLToPath } from "url";
@@ -10964,11 +11053,11 @@ function globalPaths() {
   };
 }
 function readHook(filename) {
-  return readFileSync7(join10(HOOKS_DIR, filename), "utf-8");
+  return readFileSync8(join10(HOOKS_DIR, filename), "utf-8");
 }
 function readGuard() {
   const bundled = join10(HOOKS_DIR, "guard.bundled.mjs");
-  return existsSync6(bundled) ? readFileSync7(bundled, "utf-8") : readHook("guard.mjs");
+  return existsSync6(bundled) ? readFileSync8(bundled, "utf-8") : readHook("guard.mjs");
 }
 function ask(question) {
   const rl = createInterface({ input: process.stdin, output: process.stderr });
@@ -10982,13 +11071,13 @@ function runGlobalRestore() {
   unlockProtected();
   removeClaudeShim();
   if (existsSync6(p.backupPath)) {
-    writeFileSync4(p.settingsPath, readFileSync7(p.backupPath, "utf-8"));
+    writeFileSync5(p.settingsPath, readFileSync8(p.backupPath, "utf-8"));
     console.log(`  Restored ${p.settingsPath} from backup.`);
   } else if (existsSync6(p.settingsPath)) {
     try {
-      const s = JSON.parse(readFileSync7(p.settingsPath, "utf-8"));
+      const s = JSON.parse(readFileSync8(p.settingsPath, "utf-8"));
       delete s.hooks;
-      writeFileSync4(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
+      writeFileSync5(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
       console.log(`  Removed SolonGate hooks from ${p.settingsPath}.`);
     } catch {
     }
@@ -11026,14 +11115,14 @@ function shimTargets() {
 }
 function writeShimBlock(file, block2) {
   const re = new RegExp(escapeRe(SHIM_BEGIN) + "[\\s\\S]*?" + escapeRe(SHIM_END) + "\\r?\\n?", "g");
-  let content = existsSync6(file) ? readFileSync7(file, "utf-8") : "";
+  let content = existsSync6(file) ? readFileSync8(file, "utf-8") : "";
   content = content.replace(re, "");
   if (block2) {
     if (content.length && !content.endsWith("\n")) content += "\n";
     content += block2 + "\n";
   }
   mkdirSync4(dirname(file), { recursive: true });
-  writeFileSync4(file, content);
+  writeFileSync5(file, content);
 }
 function installClaudeShim(shieldPath) {
   const real = resolveRealClaude();
@@ -11071,7 +11160,7 @@ async function runGlobalInstall(opts = {}) {
   let apiKey = opts.apiKey || process.env["SOLONGATE_API_KEY"] || "";
   if (!apiKey || apiKey === "sg_live_your_key_here") {
     try {
-      const cfg = JSON.parse(readFileSync7(p.configPath, "utf-8"));
+      const cfg = JSON.parse(readFileSync8(p.configPath, "utf-8"));
       if (cfg && typeof cfg.apiKey === "string") apiKey = cfg.apiKey;
     } catch {
     }
@@ -11087,19 +11176,19 @@ async function runGlobalInstall(opts = {}) {
   mkdirSync4(p.hooksDir, { recursive: true });
   mkdirSync4(p.claudeDir, { recursive: true });
   unlockProtected();
-  writeFileSync4(join10(p.hooksDir, "guard.mjs"), readGuard());
-  writeFileSync4(join10(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
-  writeFileSync4(join10(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
-  writeFileSync4(join10(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
+  writeFileSync5(join10(p.hooksDir, "guard.mjs"), readGuard());
+  writeFileSync5(join10(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
+  writeFileSync5(join10(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
+  writeFileSync5(join10(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
   console.log(`  Installed hooks \u2192 ${p.hooksDir}`);
   installClaudeShim(join10(p.hooksDir, "shield.mjs"));
-  writeFileSync4(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
+  writeFileSync5(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
   console.log(`  Wrote ${p.configPath}`);
   let existing = {};
   if (existsSync6(p.settingsPath)) {
-    const raw = readFileSync7(p.settingsPath, "utf-8");
+    const raw = readFileSync8(p.settingsPath, "utf-8");
     if (!existsSync6(p.backupPath)) {
-      writeFileSync4(p.backupPath, raw);
+      writeFileSync5(p.backupPath, raw);
       console.log(`  Backed up existing settings \u2192 ${p.backupPath}`);
     }
     try {
@@ -11122,7 +11211,7 @@ async function runGlobalInstall(opts = {}) {
       Stop: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(stopAbs) }] }]
     }
   };
-  writeFileSync4(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
+  writeFileSync5(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
   console.log(`  Registered global hooks \u2192 ${p.settingsPath}`);
   if (process.env["SOLONGATE_OS_LOCK"] === "1") {
     lockProtected();
@@ -11302,7 +11391,7 @@ import { createServer, request as httpRequest } from "http";
 import { request as httpsRequest } from "https";
 import { spawn as spawn3 } from "child_process";
 import { URL as URL2 } from "url";
-import { readFileSync as readFileSync8, existsSync as existsSync7, readdirSync, statSync as statSync4 } from "fs";
+import { readFileSync as readFileSync9, existsSync as existsSync7, readdirSync, statSync as statSync4 } from "fs";
 import { resolve as resolve5 } from "path";
 import { homedir as homedir9 } from "os";
 function findCacheFile() {
@@ -11332,7 +11421,7 @@ function loadCfg() {
   try {
     const f = findCacheFile();
     if (f && existsSync7(f)) {
-      const c2 = JSON.parse(readFileSync8(f, "utf-8"));
+      const c2 = JSON.parse(readFileSync9(f, "utf-8"));
       const d = c2?.security?.dlpRedact;
       const g = c2?.security?.ghost;
       const ghost = g && Array.isArray(g.patterns) ? g.patterns : [];
@@ -11620,7 +11709,7 @@ __export(logs_server_exports, {
   runLogsServer: () => runLogsServer
 });
 import { createServer as createServer2 } from "http";
-import { readFileSync as readFileSync9, statSync as statSync5 } from "fs";
+import { readFileSync as readFileSync10, statSync as statSync5 } from "fs";
 import { resolve as resolve6, join as join11, isAbsolute } from "path";
 import { homedir as homedir10 } from "os";
 import { readdirSync as readdirSync2 } from "fs";
@@ -11647,7 +11736,7 @@ async function findLogDir() {
     const files = readdirSync2(base).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json"));
     for (const f of files) {
       try {
-        const c2 = JSON.parse(readFileSync9(join11(base, f), "utf-8"));
+        const c2 = JSON.parse(readFileSync10(join11(base, f), "utf-8"));
         const p = c2?.security?.localLogs?.path;
         if (typeof p === "string" && p.trim()) return { dir: resolveLocalLogDir(p), configured: p };
       } catch {
@@ -11656,7 +11745,7 @@ async function findLogDir() {
   } catch {
   }
   try {
-    const cfgRaw = readFileSync9(join11(base, "cloud-guard.json"), "utf-8");
+    const cfgRaw = readFileSync10(join11(base, "cloud-guard.json"), "utf-8");
     const { apiKey, apiUrl } = JSON.parse(cfgRaw);
     if (apiKey) {
       const url = `${apiUrl || "https://api.solongate.com"}/api/v1/policies/active`;
@@ -11746,7 +11835,7 @@ async function runLogsServer() {
         return;
       }
       try {
-        const text = readFileSync9(info.file, "utf-8");
+        const text = readFileSync10(info.file, "utf-8");
         res.writeHead(200, { "Content-Type": "text/plain; charset=utf-8", "Last-Modified": lastMod, "X-Solongate-Exists": "1" });
         res.end(text);
       } catch {
@@ -11798,7 +11887,7 @@ var init_logs_server = __esm({
 
 // src/inject.ts
 var inject_exports = {};
-import { readFileSync as readFileSync10, writeFileSync as writeFileSync5, existsSync as existsSync8, copyFileSync } from "fs";
+import { readFileSync as readFileSync11, writeFileSync as writeFileSync6, existsSync as existsSync8, copyFileSync } from "fs";
 import { resolve as resolve7 } from "path";
 import { execSync } from "child_process";
 function parseInjectArgs(argv) {
@@ -11858,7 +11947,7 @@ WHAT IT DOES
 function detectProject() {
   if (!existsSync8(resolve7("package.json"))) return false;
   try {
-    const pkg = JSON.parse(readFileSync10(resolve7("package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync11(resolve7("package.json"), "utf-8"));
     const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
     return !!(allDeps["@modelcontextprotocol/sdk"] || allDeps["@modelcontextprotocol/server"]);
   } catch {
@@ -11867,7 +11956,7 @@ function detectProject() {
 }
 function findTsEntryFile() {
   try {
-    const pkg = JSON.parse(readFileSync10(resolve7("package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync11(resolve7("package.json"), "utf-8"));
     if (pkg.bin) {
       const binPath = typeof pkg.bin === "string" ? pkg.bin : Object.values(pkg.bin)[0];
       if (typeof binPath === "string") {
@@ -11894,7 +11983,7 @@ function findTsEntryFile() {
     const full = resolve7(c2);
     if (existsSync8(full)) {
       try {
-        const content = readFileSync10(full, "utf-8");
+        const content = readFileSync11(full, "utf-8");
         if (content.includes("McpServer") || content.includes("McpServer")) {
           return full;
         }
@@ -11914,7 +12003,7 @@ function detectPackageManager() {
 }
 function installSdk() {
   try {
-    const pkg = JSON.parse(readFileSync10(resolve7("package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync11(resolve7("package.json"), "utf-8"));
     const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
     if (allDeps["@solongate/proxy"]) {
       log3("  @solongate/proxy already installed");
@@ -11935,7 +12024,7 @@ function installSdk() {
   }
 }
 function injectTypeScript(filePath) {
-  const original = readFileSync10(filePath, "utf-8");
+  const original = readFileSync11(filePath, "utf-8");
   const changes = [];
   let modified = original;
   if (modified.includes("SecureMcpServer")) {
@@ -12106,7 +12195,7 @@ async function main2() {
     log3("");
     log3(`  Backup: ${backupPath}`);
   }
-  writeFileSync5(entryFile, result.modified);
+  writeFileSync6(entryFile, result.modified);
   log3("");
   log3("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
   log3("  \u2502  SolonGate SDK injected successfully!         \u2502");
@@ -12135,7 +12224,7 @@ var init_inject = __esm({
 
 // src/create.ts
 var create_exports = {};
-import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync6, existsSync as existsSync9 } from "fs";
+import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync7, existsSync as existsSync9 } from "fs";
 import { resolve as resolve8, join as join12 } from "path";
 import { execSync as execSync2 } from "child_process";
 function withSpinner(message, fn) {
@@ -12215,7 +12304,7 @@ EXAMPLES
 `);
 }
 function createProject(dir, name, _policy) {
-  writeFileSync6(
+  writeFileSync7(
     join12(dir, "package.json"),
     JSON.stringify(
       {
@@ -12245,7 +12334,7 @@ function createProject(dir, name, _policy) {
       2
     ) + "\n"
   );
-  writeFileSync6(
+  writeFileSync7(
     join12(dir, "tsconfig.json"),
     JSON.stringify(
       {
@@ -12267,7 +12356,7 @@ function createProject(dir, name, _policy) {
     ) + "\n"
   );
   mkdirSync5(join12(dir, "src"), { recursive: true });
-  writeFileSync6(
+  writeFileSync7(
     join12(dir, "src", "index.ts"),
     `#!/usr/bin/env node
 
@@ -12309,7 +12398,7 @@ console.log('');
 console.log('Press Ctrl+C to stop.');
 `
   );
-  writeFileSync6(
+  writeFileSync7(
     join12(dir, ".mcp.json"),
     JSON.stringify(
       {
@@ -12327,12 +12416,12 @@ console.log('Press Ctrl+C to stop.');
       2
     ) + "\n"
   );
-  writeFileSync6(
+  writeFileSync7(
     join12(dir, ".env"),
     `SOLONGATE_API_KEY=sg_live_YOUR_KEY_HERE
 `
   );
-  writeFileSync6(
+  writeFileSync7(
     join12(dir, ".gitignore"),
     `node_modules/
 dist/
@@ -12426,14 +12515,14 @@ var init_create = __esm({
 
 // src/pull-push.ts
 var pull_push_exports = {};
-import { readFileSync as readFileSync11, writeFileSync as writeFileSync7, existsSync as existsSync10 } from "fs";
+import { readFileSync as readFileSync12, writeFileSync as writeFileSync8, existsSync as existsSync10 } from "fs";
 import { resolve as resolve9 } from "path";
 function loadEnv() {
   if (process.env.SOLONGATE_API_KEY) return;
   const envPath = resolve9(".env");
   if (!existsSync10(envPath)) return;
   try {
-    const content = readFileSync11(envPath, "utf-8");
+    const content = readFileSync12(envPath, "utf-8");
     for (const line of content.split("\n")) {
       const trimmed = line.trim();
       if (!trimmed || trimmed.startsWith("#")) continue;
@@ -12621,7 +12710,7 @@ async function pull(apiKey, file, policyId) {
   const policy = await fetchCloudPolicy(apiKey, API_URL, policyId);
   const { id: _id, ...policyWithoutId } = policy;
   const json = JSON.stringify(policyWithoutId, null, 2) + "\n";
-  writeFileSync7(file, json, "utf-8");
+  writeFileSync8(file, json, "utf-8");
   log5("");
   log5(green2("  Saved to: ") + file);
   log5(`  ${dim2("Name:")}    ${policy.name}`);
@@ -12650,7 +12739,7 @@ async function push(apiKey, file, policyId) {
     log5("  solongate-proxy list");
     process.exit(1);
   }
-  const content = readFileSync11(file, "utf-8");
+  const content = readFileSync12(file, "utf-8");
   let policy;
   try {
     policy = JSON.parse(content);

package/dist/tui/index.js

@@ -169,12 +169,12 @@ function KeyHints({ hints }) {
 // src/tui/panels/Live.tsx
 import { Box as Box2, Text as Text2, useInput } from "ink";
 import TextInput from "ink-text-input";
-import { mkdirSync, writeFileSync } from "fs";
+import { mkdirSync, writeFileSync as writeFileSync2 } from "fs";
 import { homedir as homedir4 } from "os";
 import { join as join4 } from "path";
 
 // src/tui/local-log.ts
-import { closeSync, openSync, readSync, statSync } from "fs";
+import { closeSync, openSync, readFileSync as readFileSync2, readSync, statSync, writeFileSync } from "fs";
 import { homedir as homedir2 } from "os";
 import { join as join2 } from "path";
 var LOCAL_LOG = join2(homedir2(), ".solongate", "local-logs", "solongate-audit.jsonl");
@@ -193,6 +193,39 @@ function tailLines(file, maxBytes = 131072) {
     return [];
   }
 }
+function deleteLocalEntry(at, tool, session) {
+  try {
+    const lines = readFileSync2(LOCAL_LOG, "utf-8").split("\n");
+    let removed = 0;
+    const kept = lines.filter((line) => {
+      if (!line.trim()) return false;
+      if (removed) return true;
+      try {
+        const j = JSON.parse(line);
+        const hit = Date.parse(j.ts ?? "") === at && (j.tool ?? "?") === tool && (!session || j.session_id === session);
+        if (hit) {
+          removed++;
+          return false;
+        }
+      } catch {
+      }
+      return true;
+    });
+    if (removed) writeFileSync(LOCAL_LOG, kept.length ? kept.join("\n") + "\n" : "");
+    return removed;
+  } catch {
+    return 0;
+  }
+}
+function clearLocalLog() {
+  try {
+    const n = readFileSync2(LOCAL_LOG, "utf-8").split("\n").filter(Boolean).length;
+    writeFileSync(LOCAL_LOG, "");
+    return n;
+  } catch {
+    return 0;
+  }
+}
 function parseLocalLines(lines) {
   const out = [];
   for (const line of lines) {
@@ -210,7 +243,7 @@ function parseLocalLines(lines) {
 import { useCallback as useCallback2, useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
 
 // src/api-client/client.ts
-import { readFileSync as readFileSync2, existsSync } from "fs";
+import { readFileSync as readFileSync3, existsSync } from "fs";
 import { resolve, join as join3 } from "path";
 import { homedir as homedir3 } from "os";
 var DEFAULT_API_URL = "https://api.solongate.com";
@@ -234,7 +267,7 @@ function loginCredentialFile() {
   try {
     const p = join3(homedir3(), ".solongate", "cloud-guard.json");
     if (!existsSync(p)) return {};
-    const c2 = JSON.parse(readFileSync2(p, "utf-8"));
+    const c2 = JSON.parse(readFileSync3(p, "utf-8"));
     return c2 && typeof c2 === "object" ? c2 : {};
   } catch {
     return {};
@@ -244,7 +277,7 @@ function dotenvApiKey() {
   try {
     const envPath = resolve(".env");
     if (!existsSync(envPath)) return void 0;
-    for (const line of readFileSync2(envPath, "utf-8").split("\n")) {
+    for (const line of readFileSync3(envPath, "utf-8").split("\n")) {
       const trimmed = line.trim();
       if (!trimmed || trimmed.startsWith("#")) continue;
       const eq = trimmed.indexOf("=");
@@ -496,11 +529,19 @@ var audit_exports = {};
 __export(audit_exports, {
   block: () => block,
   list: () => list2,
+  remove: () => remove2,
+  removeAll: () => removeAll,
   whitelist: () => whitelist
 });
 function list2(query = {}) {
   return request("GET", "/audit-logs", { query });
 }
+function remove2(ids) {
+  return request("DELETE", "/audit-logs", { body: { ids } });
+}
+function removeAll() {
+  return request("DELETE", "/audit-logs", { body: { scope: "logs" } });
+}
 function whitelist(id, scope = "exact") {
   return request("POST", `/audit-logs/${encodeURIComponent(id)}/whitelist`, { body: { scope } });
 }
@@ -1257,7 +1298,7 @@ function LivePanel({ active: active2 }) {
         const file = join4(homedir4(), ".solongate", "live-export.jsonl");
         try {
           mkdirSync(join4(homedir4(), ".solongate"), { recursive: true });
-          writeFileSync(file, visibleDesc.map((x) => JSON.stringify(x)).join("\n") + "\n");
+          writeFileSync2(file, visibleDesc.map((x) => JSON.stringify(x)).join("\n") + "\n");
           setActionMsg({ text: `\u2713 exported ${visibleDesc.length} lines \u2192 ${file}`, level: "ok", until: Date.now() + 6e3 });
         } catch (err) {
           setActionMsg({ text: "\u2717 export failed: " + (err instanceof Error ? err.message : String(err)), level: "bad", until: Date.now() + 6e3 });
@@ -2237,6 +2278,8 @@ function AuditPanel({ active: active2, focused }) {
   const [si, setSi] = useState6(0);
   const [sessSearch, setSessSearch] = useState6("");
   const [sessSel, setSessSel] = useState6(0);
+  const [confirm, setConfirm] = useState6(null);
+  const [msg, setMsg] = useState6(null);
   const toTop = () => setSel(0);
   const statsQ = useLoader(() => source === "cloud" ? api.stats.get() : Promise.resolve(null), [source]);
   const tsQ = useLoader(() => source === "cloud" ? api.stats.timeseries({ period: "24h" }) : Promise.resolve(null), [source]);
@@ -2322,6 +2365,31 @@ function AuditPanel({ active: active2, focused }) {
     () => view === "detail" && current?.session && source === "cloud" ? api.audit.list({ session_id: current.session, limit: 40 }) : Promise.resolve(null),
     [view, current?.session, source]
   );
+  const logsLoading = (source === "cloud" ? cloudQ.loading : localQ.loading) && !editing;
+  const sessLoading = source === "cloud" ? agentsQ.loading : localQ.loading;
+  const doDelete = (kind) => {
+    setMsg({ text: "deleting\u2026", level: "ok" });
+    const run = async () => {
+      if (source === "cloud") {
+        if (kind === "one") {
+          if (!current) throw new Error("nothing selected");
+          await api.audit.remove([current.id]);
+        } else {
+          await api.audit.removeAll();
+        }
+        cloudQ.reload();
+        statsQ.reloadQuiet();
+      } else {
+        const n = kind === "one" && current ? deleteLocalEntry(current.at, current.tool, current.session) : kind === "all" ? clearLocalLog() : 0;
+        if (!n) throw new Error("entry not found in the local file");
+        localQ.reload();
+      }
+    };
+    run().then(() => {
+      setMsg({ text: kind === "one" ? "\u2713 entry deleted" : `\u2713 ALL ${source} logs deleted`, level: "ok" });
+      toTop();
+    }).catch((e) => setMsg({ text: "\u2717 " + (e instanceof Error ? e.message : String(e)), level: "bad" }));
+  };
   useInput5(
     (input, key) => {
       if (view === "detail") {
@@ -2332,6 +2400,11 @@ function AuditPanel({ active: active2, focused }) {
         else if (key.pageDown) setDetailScroll((n) => n + 10);
         return;
       }
+      if (view === "logs" ? logsLoading : sessLoading) return;
+      if (confirm && input !== "x" && input !== "X") {
+        setConfirm(null);
+        setMsg(null);
+      }
       if (input === "s") {
         setSource((s) => s === "cloud" ? "local" : "cloud");
         setPage(0);
@@ -2393,6 +2466,23 @@ function AuditPanel({ active: active2, focused }) {
         setGi((n) => (n + 1) % SIGNALS.length);
         setPage(0);
         toTop();
+      } else if (input === "x") {
+        if (!current) return;
+        if (confirm?.kind !== "one" || confirm.key !== current.id) {
+          setConfirm({ kind: "one", key: current.id });
+          setMsg({ text: `delete ${current.decision} ${current.tool} (${ago(current.at)} ago)? press x again`, level: "bad" });
+          return;
+        }
+        setConfirm(null);
+        doDelete("one");
+      } else if (input === "X") {
+        if (confirm?.kind !== "all") {
+          setConfirm({ kind: "all", key: "all" });
+          setMsg({ text: `DELETE ALL ${source} logs (${total} entries)? press X again`, level: "bad" });
+          return;
+        }
+        setConfirm(null);
+        doDelete("all");
       } else if (input === "t") setEditing("tool");
       else if (input === "n") setEditing("agent");
       else if (input === "/") setEditing("search");
@@ -2519,8 +2609,7 @@ function AuditPanel({ active: active2, focused }) {
     const selC = Math.min(sessSel, Math.max(0, sessionsFiltered.length - 1));
     const start2 = Math.min(Math.max(0, selC - Math.floor((listRows2 - 1) / 2)), Math.max(0, sessionsFiltered.length - listRows2));
     const win = sessionsFiltered.slice(start2, start2 + listRows2);
-    const loading2 = source === "cloud" ? agentsQ.loading : localQ.loading;
-    return /* @__PURE__ */ jsx6(DataView, { loading: loading2, error: source === "cloud" ? agentsQ.error : localQ.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+    return /* @__PURE__ */ jsx6(DataView, { loading: sessLoading, error: source === "cloud" ? agentsQ.error : localQ.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
       strip,
       /* @__PURE__ */ jsxs6(Box6, { children: [
         srcChip,
@@ -2583,15 +2672,14 @@ function AuditPanel({ active: active2, focused }) {
       ] }) : null
     ] }) });
   }
-  const headerRows = 6 + (editing && editing !== "sess-search" ? 1 : 0);
+  const headerRows = 6 + (editing && editing !== "sess-search" ? 1 : 0) + (msg ? 1 : 0);
   const listRows = Math.max(4, rows - headerRows);
   const selClamped = Math.min(sel, Math.max(0, pageRows.length - 1));
   const maxStart = Math.max(0, pageRows.length - listRows);
   const start = Math.min(Math.max(0, selClamped - Math.floor((listRows - 1) / 2)), maxStart);
   const windowed = pageRows.slice(start, start + listRows);
   const reasonW = Math.min(60, Math.max(12, cols - 67));
-  const loading = (source === "cloud" ? cloudQ.loading : localQ.loading) && !editing;
-  return /* @__PURE__ */ jsx6(DataView, { loading, error: source === "cloud" ? cloudQ.error : localQ.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+  return /* @__PURE__ */ jsx6(DataView, { loading: logsLoading, error: source === "cloud" ? cloudQ.error : localQ.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
     strip,
     /* @__PURE__ */ jsxs6(Box6, { children: [
       srcChip,
@@ -2604,7 +2692,8 @@ function AuditPanel({ active: active2, focused }) {
       chip("search", search || "\xB7", !!search),
       sessFilter ? chip("sess", sessFilter.slice(0, 8), true) : null
     ] }),
-    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter full entry \xB7 \u2190\u2192 page \xB7 f dec \xB7 g sig \xB7 t tool \xB7 n agent \xB7 / search \xB7 s source \xB7 v sessions \xB7 c clear" : "press \u2192 to browse" }),
+    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter full entry \xB7 \u2190\u2192 page \xB7 f dec \xB7 g sig \xB7 t tool \xB7 n agent \xB7 / search \xB7 x del \xB7 X del ALL \xB7 s source \xB7 v sessions \xB7 c clear" : "press \u2192 to browse" }),
+    msg ? /* @__PURE__ */ jsx6(Text6, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate(msg.text, cols) }) : null,
     editing && editing !== "sess-search" ? /* @__PURE__ */ jsxs6(Box6, { children: [
       /* @__PURE__ */ jsxs6(Text6, { color: theme.warn, children: [
         editing,
@@ -2950,7 +3039,7 @@ var HELP = [
   ["Live", [["\u2191\u2193", "select a stream row"], ["enter", "full entry content"], ["w", "whitelist the selected DENY"], ["b", "block the selected ALLOW"], ["d / x / r", "filter denies / dlp / rate-limit"], ["f", "local / cloud filter"], ["/", "search"], ["s", "sessions (\u2191\u2193 pick, enter open)"], ["space", "copy mode (freeze)"]]],
   ["Policies", [["\u2191\u2193", "browse / select"], ["a", "activate (pin) selected policy"], ["x", "deactivate \u2014 no active policy"], ["enter", "open rules \u2192 open a rule"], ["space", "toggle a rule on/off"], ["e", "flip effect"], ["n", "new rule"], ["d", "delete rule"], ["m", "flip mode"], ["D", "dry-run the draft"], ["s", "save"], ["x", "discard"]]],
   ["Rate limit / DLP", [["\u2191\u2193", "field / pattern"], ["\u2190\u2192", "adjust (shift = \xB110)"], ["space", "toggle pattern"], ["m", "mode"], ["a / d", "add / remove custom"], ["g", "ghost mode"], ["P", "self-protection"], ["s", "save"]]],
-  ["Audit", [["v", "logs \u2194 sessions"], ["s", "source: cloud \u2194 local"], ["\u2190 \u2192", "prev / next page (500 each)"], ["\u2191\u2193", "select (list scrolls)"], ["enter", "full entry / session logs"], ["f / g", "decision / signal filter"], ["t / n / /", "tool / agent / search"], ["c", "clear filters"]]],
+  ["Audit", [["v", "logs \u2194 sessions"], ["s", "source: cloud \u2194 local"], ["\u2190 \u2192", "prev / next page (500 each)"], ["\u2191\u2193", "select (list scrolls)"], ["enter", "full entry / session logs"], ["f / g", "decision / signal filter"], ["t / n / /", "tool / agent / search"], ["x / X", "delete entry / ALL (press twice)"], ["c", "clear filters"]]],
   ["Settings", [["\u2191\u2193", "move"], ["enter / space", "toggle \xB7 edit \xB7 add"], ["e", "webhook events"], ["d d", "delete"], ["r", "refresh"]]]
 ];
 function HelpOverlay({ cols, rows }) {

package/dist/tui/local-log.d.ts

@@ -17,6 +17,10 @@ export interface LocalLogLine {
     matched_rule_id?: string;
     rate_limit_burst?: boolean;
 }
+/** Delete ONE matching line (ts + tool [+ session]) from the local log file. */
+export declare function deleteLocalEntry(at: number, tool: string, session?: string | null): number;
+/** Empty the local log file. Returns how many lines were removed. */
+export declare function clearLocalLog(): number;
 export declare function parseLocalLines(lines: string[]): Array<LocalLogLine & {
     at: number;
 }>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.25",
+  "version": "0.81.26",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {