@solongate/proxy 0.81.61 → 0.81.62

package/hooks/.solongate/.eval-ring.jsonl

@@ -27,3 +27,29 @@
 {"ms":2,"ts":1784360134508,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
 {"ms":5,"ts":1784360234461,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
 {"ms":4,"ts":1784360256656,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":5,"ts":1784365255204,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":4,"ts":1784365279092,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":4,"ts":1784365328385,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":4,"ts":1784365360712,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":4,"ts":1784365375478,"tool":"Write","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":3,"ts":1784365383985,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":9,"ts":1784365415903,"tool":"Write","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":4,"ts":1784365422626,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":5,"ts":1784365497358,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":4,"ts":1784365509533,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":4,"ts":1784365523577,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":1,"ts":1784365524083,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":2,"ts":1784365525077,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":3,"ts":1784365525605,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":3,"ts":1784365526627,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":2,"ts":1784365527031,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":5,"ts":1784366243066,"tool":"Write","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":3,"ts":1784366250503,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":4,"ts":1784366281171,"tool":"Write","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":2,"ts":1784366288049,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":3,"ts":1784367337998,"tool":"Write","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":2,"ts":1784367345104,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":4,"ts":1784367420866,"tool":"Write","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":2,"ts":1784367428790,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":3,"ts":1784369708978,"tool":"Write","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":4,"ts":1784369720104,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}

package/hooks/.solongate/.last-deny

@@ -1 +1 @@
-{"tool":"Bash","ts":1784360236505}
+{"tool":"Bash","ts":1784365527031}

package/hooks/.solongate/.last-eval

@@ -1 +1 @@
-{"ms":4,"ts":1784360256656,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}
+{"ms":4,"ts":1784369720104,"tool":"Bash","session":"f5933c65-c315-4440-9afb-7136fce6b695"}

package/hooks/.solongate/.last-tool-call

@@ -1 +1 @@
-1784360236504
+1784369709035

package/hooks/guard.bundled.mjs

@@ -6536,7 +6536,7 @@ import { resolve, join, dirname, isAbsolute } from "node:path";
 import { homedir } from "node:os";
 import { gunzipSync } from "node:zlib";
 import { createHash } from "node:crypto";
-var HOOK_VERSION = 35;
+var HOOK_VERSION = 36;
 function localLogsOnly(security) {
   if (security && typeof security === "object") {
     const l = security.localLogs;
@@ -6557,6 +6557,7 @@ function writeLocalMarker(security) {
   } catch {
   }
 }
+var _invalidPathNoted = false;
 function resolveLocalLogDir(rawPath) {
   const dir = String(rawPath || "").trim().replace(/[\\/]+$/, "");
   if (!dir)
@@ -6564,13 +6565,16 @@ function resolveLocalLogDir(rawPath) {
   if (isAbsolute(dir))
     return dir;
   const fallback = resolve(homedir(), ".solongate", "local-logs");
-  try {
-    mkdirSync(resolve(homedir(), ".solongate"), { recursive: true });
-    writeFileSync(
-      resolve(homedir(), ".solongate", ".local-logs-invalid-path"),
-      JSON.stringify({ configured: dir, fallback, ts: Date.now() })
-    );
-  } catch {
+  if (!_invalidPathNoted) {
+    _invalidPathNoted = true;
+    try {
+      mkdirSync(resolve(homedir(), ".solongate"), { recursive: true });
+      writeFileSync(
+        resolve(homedir(), ".solongate", ".local-logs-invalid-path"),
+        JSON.stringify({ configured: dir, fallback, ts: Date.now() })
+      );
+    } catch {
+    }
   }
   return fallback;
 }

package/hooks/guard.mjs

@@ -32,7 +32,7 @@ import { createHash } from 'node:crypto';
 // the installed hook self-updates when the cloud version is higher (see
 // maybeSelfUpdate). This is what makes guard fixes propagate without a manual
 // reinstall — the same trust model as the OPA WASM this hook already runs.
-const HOOK_VERSION = 35;
+const HOOK_VERSION = 36;
 
 // True when local log storage is ON. In that mode logs are kept LOCAL ONLY and
 // nothing is sent to the cloud audit log.
@@ -72,16 +72,24 @@ function writeLocalMarker(security) {
 // When the configured path isn't absolute here, fall back to a fixed home folder
 // so entries are never lost and never leak into a project, and record the bad
 // path so the dashboard/user can be told their path isn't valid on this device.
+let _invalidPathNoted = false;
 function resolveLocalLogDir(rawPath) {
   const dir = String(rawPath || '').trim().replace(/[\\/]+$/, '');
   if (!dir) return null;
   if (isAbsolute(dir)) return dir;
   const fallback = resolve(homedir(), '.solongate', 'local-logs');
-  try {
-    mkdirSync(resolve(homedir(), '.solongate'), { recursive: true });
-    writeFileSync(resolve(homedir(), '.solongate', '.local-logs-invalid-path'),
-      JSON.stringify({ configured: dir, fallback, ts: Date.now() }));
-  } catch { /* ignore */ }
+  // Non-absolute path (e.g. a Windows path on Linux): fall back. The diagnostic
+  // marker is written at most ONCE per process, NOT on every denial — a per-call
+  // writeFileSync here widened the window where a concurrent guard process dies
+  // before its audit append lands (dropped denials under a simultaneous burst).
+  if (!_invalidPathNoted) {
+    _invalidPathNoted = true;
+    try {
+      mkdirSync(resolve(homedir(), '.solongate'), { recursive: true });
+      writeFileSync(resolve(homedir(), '.solongate', '.local-logs-invalid-path'),
+        JSON.stringify({ configured: dir, fallback, ts: Date.now() }));
+    } catch { /* ignore */ }
+  }
   return fallback;
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.61",
+  "version": "0.81.62",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {