@solongate/proxy 0.81.47 → 0.81.48

package/dist/index.js

@@ -6558,7 +6558,8 @@ var init_cli_utils = __esm({
 var self_update_exports = {};
 __export(self_update_exports, {
   currentVersion: () => currentVersion,
-  maybeSelfUpdate: () => maybeSelfUpdate
+  maybeSelfUpdate: () => maybeSelfUpdate,
+  tuiUpdateFlow: () => tuiUpdateFlow
 });
 import { execFile, spawn } from "child_process";
 import { mkdirSync as mkdirSync3, openSync, readFileSync as readFileSync4, realpathSync, writeFileSync as writeFileSync3 } from "fs";
@@ -6647,6 +6648,51 @@ function spawnGlobalInstall(version) {
     return false;
   }
 }
+function runGlobalInstall(version) {
+  return new Promise((resolve10) => {
+    try {
+      mkdirSync3(join4(homedir2(), ".solongate"), { recursive: true });
+      execFile(
+        "npm",
+        ["install", "-g", `${PKG}@${version}`],
+        { timeout: 3e5, windowsHide: true, shell: process.platform === "win32" },
+        (err2, stdout, stderr) => {
+          try {
+            writeFileSync3(LOG_FILE, `${(/* @__PURE__ */ new Date()).toISOString()} install ${version}: ${err2 ? "FAILED" : "ok"}
+${stdout}
+${stderr}
+`, { flag: "a" });
+          } catch {
+          }
+          resolve10(!err2);
+        }
+      );
+    } catch {
+      resolve10(false);
+    }
+  });
+}
+async function tuiUpdateFlow(onStatus) {
+  try {
+    const current = currentVersion();
+    const latest = await fetchLatest();
+    const state = readState();
+    if (latest) writeState({ ...state, lastCheckAt: Date.now(), latestSeen: latest });
+    if (!latest || !newerThan(latest, current)) return;
+    const attempts = readState().attempts ?? {};
+    const canRetry = Date.now() - (attempts[latest] ?? 0) >= ATTEMPT_EVERY_MS;
+    if (await isGlobalInstall() && canRetry) {
+      writeState({ ...readState(), attempts: { [latest]: Date.now() } });
+      onStatus({ kind: "updating", version: latest });
+      if (await runGlobalInstall(latest)) {
+        onStatus({ kind: "updated", version: latest });
+        return;
+      }
+    }
+    onStatus({ kind: "manual", version: latest });
+  } catch {
+  }
+}
 function maybeSelfUpdate(notify = (l) => process.stderr.write(l + "\n")) {
   void (async () => {
     try {
@@ -10299,6 +10345,17 @@ function App() {
   const [section, setSection] = useState9(accounts.length === 0 ? ACCOUNTS_SECTION : 0);
   const [focus, setFocus] = useState9("nav");
   const [help, setHelp] = useState9(false);
+  const [update2, setUpdate] = useState9({ kind: "idle" });
+  useEffect7(() => {
+    let alive = true;
+    const run12 = () => void tuiUpdateFlow((s) => alive && setUpdate(s));
+    run12();
+    const t = setInterval(run12, 30 * 6e4);
+    return () => {
+      alive = false;
+      clearInterval(t);
+    };
+  }, []);
   const acctIdx = Math.max(0, accounts.findIndex((a) => a.apiKey === viewKey));
   const cur = accounts[acctIdx];
   const acctLabel = cur ? cur.project || cur.user || `account \u2026${cur.apiKey.slice(-4)}` : "not logged in";
@@ -10368,7 +10425,8 @@ function App() {
     /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "account: " }),
       /* @__PURE__ */ jsx9(Text9, { color: locked ? theme.warn : theme.accentBright, bold: true, children: acctLabel }),
-      locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Accounts to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Accounts to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Accounts to add another" })
+      locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Accounts to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Accounts to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Accounts to add another" }),
+      update2.kind === "updating" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 updating to v${update2.version}\u2026` }) : update2.kind === "updated" ? /* @__PURE__ */ jsx9(Text9, { color: theme.ok, bold: true, children: `  \u2191 v${update2.version} installed \u2014 restart (q, then solongate) to apply` }) : update2.kind === "manual" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 v${update2.version} available \u2014 npm i -g @solongate/proxy@latest` }) : null
     ] }),
     /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexGrow: 1, children: [
       /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {
@@ -10411,6 +10469,7 @@ var init_App = __esm({
     init_hooks();
     init_client();
     init_api_client();
+    init_self_update();
     SECTIONS = [
       { label: "Live", Panel: LiveHint },
       { label: "Policies", Panel: PoliciesPanel },
@@ -11806,7 +11865,7 @@ ${SHIM_END}`;
     }
   }
 }
-async function runGlobalInstall(opts = {}) {
+async function runGlobalInstall2(opts = {}) {
   const p = globalPaths();
   let apiKey = opts.apiKey || process.env["SOLONGATE_API_KEY"] || "";
   if (!apiKey || apiKey === "sg_live_your_key_here") {
@@ -11997,7 +12056,7 @@ async function main() {
     return;
   }
   console.log("");
-  await runGlobalInstall({ apiKey, apiUrl });
+  await runGlobalInstall2({ apiKey, apiUrl });
   console.log("");
   console.log("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
   console.log("  \u2502  You are logged in and protected.               \u2502");
@@ -16540,9 +16599,10 @@ async function main5() {
   const subcommand = process.argv[2];
   if (IS_HUMAN_CLI) {
     const tuiBound = subcommand === "dataroom" || process.argv.length <= 2 && process.stdout.isTTY && process.stdin.isTTY;
-    const { maybeSelfUpdate: maybeSelfUpdate2 } = await Promise.resolve().then(() => (init_self_update(), self_update_exports));
-    maybeSelfUpdate2(tuiBound ? () => {
-    } : void 0);
+    if (!tuiBound) {
+      const { maybeSelfUpdate: maybeSelfUpdate2 } = await Promise.resolve().then(() => (init_self_update(), self_update_exports));
+      maybeSelfUpdate2();
+    }
   }
   if (process.argv.length <= 2) {
     if (process.stdout.isTTY && process.stdin.isTTY) {

package/dist/self-update.d.ts

@@ -1,4 +1,24 @@
 export declare function currentVersion(): string;
+/** What the dataroom shows about the updater. */
+export type UpdateStatus = {
+    kind: 'idle';
+} | {
+    kind: 'updating';
+    version: string;
+} | {
+    kind: 'updated';
+    version: string;
+} | {
+    kind: 'manual';
+    version: string;
+};
+/**
+ * The dataroom's updater (Claude Code-style): check the registry EVERY time the
+ * TUI opens (and periodically while it stays open), install the new version in
+ * the background, then tell the user to restart. `onStatus` drives the in-app
+ * status line; nothing is ever written to the terminal directly.
+ */
+export declare function tuiUpdateFlow(onStatus: (s: UpdateStatus) => void): Promise<void>;
 /**
  * Fire-and-forget startup hook. `notify` writes the human-facing one-liner —
  * callers pass a stderr writer so the notice never lands in piped stdout.

package/dist/tui/index.js

@@ -5,9 +5,9 @@ var __export = (target, all) => {
 };
 
 // src/tui/index.tsx
-import { appendFileSync, mkdirSync as mkdirSync4 } from "fs";
-import { homedir as homedir6 } from "os";
-import { join as join6 } from "path";
+import { appendFileSync, mkdirSync as mkdirSync5 } from "fs";
+import { homedir as homedir7 } from "os";
+import { join as join7 } from "path";
 import { render } from "ink";
 
 // src/tui/App.tsx
@@ -3423,6 +3423,127 @@ function AccountsPanel({
   ] });
 }
 
+// src/self-update.ts
+import { execFile, spawn as spawn3 } from "child_process";
+import { mkdirSync as mkdirSync4, openSync as openSync2, readFileSync as readFileSync4, realpathSync, writeFileSync as writeFileSync5 } from "fs";
+import { homedir as homedir6 } from "os";
+import { dirname, join as join6 } from "path";
+import { fileURLToPath } from "url";
+var PKG = "@solongate/proxy";
+var CHECK_EVERY_MS = 30 * 60 * 1e3;
+var ATTEMPT_EVERY_MS = 6 * 60 * 60 * 1e3;
+var STATE_FILE = join6(homedir6(), ".solongate", ".self-update.json");
+var LOG_FILE = join6(homedir6(), ".solongate", "self-update.log");
+function readState() {
+  try {
+    const s = JSON.parse(readFileSync4(STATE_FILE, "utf-8"));
+    return s && typeof s === "object" ? s : {};
+  } catch {
+    return {};
+  }
+}
+function writeState(s) {
+  try {
+    mkdirSync4(join6(homedir6(), ".solongate"), { recursive: true });
+    writeFileSync5(STATE_FILE, JSON.stringify(s));
+  } catch {
+  }
+}
+function currentVersion() {
+  try {
+    const pkg = JSON.parse(readFileSync4(join6(dirname(fileURLToPath(import.meta.url)), "..", "package.json"), "utf-8"));
+    return pkg.version ?? "0.0.0";
+  } catch {
+    return "0.0.0";
+  }
+}
+function newerThan(b, a) {
+  const pa = a.split(".").map((n) => parseInt(n, 10) || 0);
+  const pb = b.split(".").map((n) => parseInt(n, 10) || 0);
+  for (let i = 0; i < 3; i++) {
+    if ((pb[i] ?? 0) > (pa[i] ?? 0)) return true;
+    if ((pb[i] ?? 0) < (pa[i] ?? 0)) return false;
+  }
+  return false;
+}
+async function fetchLatest() {
+  try {
+    const res = await fetch(`https://registry.npmjs.org/${PKG}/latest`, { signal: AbortSignal.timeout(2e3) });
+    if (!res.ok) return null;
+    const j = await res.json();
+    return typeof j.version === "string" ? j.version : null;
+  } catch {
+    return null;
+  }
+}
+function npmGlobalRoot() {
+  return new Promise((resolve2) => {
+    try {
+      execFile("npm", ["root", "-g"], { timeout: 5e3, windowsHide: true, shell: process.platform === "win32" }, (err, stdout) => {
+        resolve2(err ? null : stdout.trim() || null);
+      });
+    } catch {
+      resolve2(null);
+    }
+  });
+}
+async function isGlobalInstall() {
+  try {
+    const script = realpathSync(process.argv[1] ?? "");
+    if (!script) return false;
+    const root = await npmGlobalRoot();
+    if (!root) return false;
+    return script.startsWith(realpathSync(root));
+  } catch {
+    return false;
+  }
+}
+function runGlobalInstall(version) {
+  return new Promise((resolve2) => {
+    try {
+      mkdirSync4(join6(homedir6(), ".solongate"), { recursive: true });
+      execFile(
+        "npm",
+        ["install", "-g", `${PKG}@${version}`],
+        { timeout: 3e5, windowsHide: true, shell: process.platform === "win32" },
+        (err, stdout, stderr) => {
+          try {
+            writeFileSync5(LOG_FILE, `${(/* @__PURE__ */ new Date()).toISOString()} install ${version}: ${err ? "FAILED" : "ok"}
+${stdout}
+${stderr}
+`, { flag: "a" });
+          } catch {
+          }
+          resolve2(!err);
+        }
+      );
+    } catch {
+      resolve2(false);
+    }
+  });
+}
+async function tuiUpdateFlow(onStatus) {
+  try {
+    const current = currentVersion();
+    const latest = await fetchLatest();
+    const state = readState();
+    if (latest) writeState({ ...state, lastCheckAt: Date.now(), latestSeen: latest });
+    if (!latest || !newerThan(latest, current)) return;
+    const attempts = readState().attempts ?? {};
+    const canRetry = Date.now() - (attempts[latest] ?? 0) >= ATTEMPT_EVERY_MS;
+    if (await isGlobalInstall() && canRetry) {
+      writeState({ ...readState(), attempts: { [latest]: Date.now() } });
+      onStatus({ kind: "updating", version: latest });
+      if (await runGlobalInstall(latest)) {
+        onStatus({ kind: "updated", version: latest });
+        return;
+      }
+    }
+    onStatus({ kind: "manual", version: latest });
+  } catch {
+  }
+}
+
 // src/tui/App.tsx
 import { jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
 function LiveHint() {
@@ -3469,6 +3590,17 @@ function App() {
   const [section, setSection] = useState9(accounts.length === 0 ? ACCOUNTS_SECTION : 0);
   const [focus, setFocus] = useState9("nav");
   const [help, setHelp] = useState9(false);
+  const [update2, setUpdate] = useState9({ kind: "idle" });
+  useEffect7(() => {
+    let alive = true;
+    const run = () => void tuiUpdateFlow((s) => alive && setUpdate(s));
+    run();
+    const t = setInterval(run, 30 * 6e4);
+    return () => {
+      alive = false;
+      clearInterval(t);
+    };
+  }, []);
   const acctIdx = Math.max(0, accounts.findIndex((a) => a.apiKey === viewKey));
   const cur = accounts[acctIdx];
   const acctLabel = cur ? cur.project || cur.user || `account \u2026${cur.apiKey.slice(-4)}` : "not logged in";
@@ -3538,7 +3670,8 @@ function App() {
     /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "account: " }),
       /* @__PURE__ */ jsx9(Text9, { color: locked ? theme.warn : theme.accentBright, bold: true, children: acctLabel }),
-      locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Accounts to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Accounts to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Accounts to add another" })
+      locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Accounts to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Accounts to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Accounts to add another" }),
+      update2.kind === "updating" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 updating to v${update2.version}\u2026` }) : update2.kind === "updated" ? /* @__PURE__ */ jsx9(Text9, { color: theme.ok, bold: true, children: `  \u2191 v${update2.version} installed \u2014 restart (q, then solongate) to apply` }) : update2.kind === "manual" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 v${update2.version} available \u2014 npm i -g @solongate/proxy@latest` }) : null
     ] }),
     /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexGrow: 1, children: [
       /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {
@@ -3584,11 +3717,11 @@ async function launchTui() {
     return;
   }
   process.stdout.write("\x1B[?1049h\x1B[H");
-  const debugLog = join6(homedir6(), ".solongate", "dataroom-debug.log");
+  const debugLog = join7(homedir7(), ".solongate", "dataroom-debug.log");
   const saved = { log: console.log, warn: console.warn, error: console.error, info: console.info, debug: console.debug };
   const toFile = (level) => (...args) => {
     try {
-      mkdirSync4(join6(homedir6(), ".solongate"), { recursive: true });
+      mkdirSync5(join7(homedir7(), ".solongate"), { recursive: true });
       appendFileSync(debugLog, `${(/* @__PURE__ */ new Date()).toISOString()} [${level}] ${args.map((a) => typeof a === "string" ? a : JSON.stringify(a)).join(" ")}
 `);
     } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.47",
+  "version": "0.81.48",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {