@solongate/proxy 0.81.70 → 0.81.71

package/dist/api-client/client.d.ts

@@ -26,6 +26,14 @@ export declare function isActiveAccount(apiKey: string): boolean;
  * account. Best-effort; returns false on failure.
  */
 export declare function setActiveAccount(creds: Credentials): boolean;
+/**
+ * Clear the ACTIVE login credential — a local sign-out. Removes the key/url from
+ * the active-key file so `listAccounts` no longer re-seeds it (the source of the
+ * "ghost account …xxxx" that lingers after removing the account you're logged in
+ * as). The guard hooks then have NO key until the next `solongate login`, so this
+ * only runs when the user removes their LAST account. Best-effort; false on error.
+ */
+export declare function clearActiveCredential(): boolean;
 /**
  * Thrown for any non-2xx response. `code`/`message` come from the API's
  * `{ error: { code, message } }` envelope when present; `status` is the HTTP

package/dist/index.js

@@ -7168,6 +7168,28 @@ function setActiveAccount(creds) {
     return false;
   }
 }
+function clearActiveCredential() {
+  try {
+    const p = join8(homedir6(), ".solongate", ["cloud", "guard.json"].join("-"));
+    if (!existsSync3(p)) {
+      cached2 = null;
+      return true;
+    }
+    let existing = {};
+    try {
+      existing = JSON.parse(readFileSync8(p, "utf-8"));
+    } catch {
+    }
+    delete existing.apiKey;
+    delete existing.apiUrl;
+    writeFileSync6(p, JSON.stringify(existing, null, 2));
+    cached2 = null;
+    viewOverride = null;
+    return true;
+  } catch {
+    return false;
+  }
+}
 function loginCredentialFile() {
   try {
     const p = join8(homedir6(), ".solongate", "cloud-guard.json");
@@ -10315,7 +10337,8 @@ function SettingsPanel({
   active: active2,
   focused,
   viewApiKey,
-  onView
+  onView,
+  onAccountsChanged
 }) {
   void active2;
   const { cols, rows } = usePanelSize();
@@ -10589,16 +10612,31 @@ function SettingsPanel({
           else activate(cur);
         }
       } else if (inp === "x" && cur.kind === "acct") {
-        const k = "acct:" + cur.acc.apiKey;
+        const target = cur.acc;
+        const k = "acct:" + target.apiKey;
+        const wasActive = isActiveAccount(target.apiKey);
+        const others = accounts.filter((a) => a.apiKey !== target.apiKey);
         if (confirmDel !== k) {
           setConfirmDel(k);
-          setMsg({ text: `press x again to remove ${acctLabel(cur.acc)} from this device (the cloud account is untouched)`, level: "bad" });
+          const note = wasActive ? others.length ? ` \u2014 the ACTIVE guard key; ${acctLabel(others[0])} takes over` : " \u2014 your ONLY account & the active guard key; this signs the device out (guard has no key until you log in again)" : " (the cloud account is untouched)";
+          setMsg({ text: `press x again to remove ${acctLabel(target)} from this device${note}`, level: "bad" });
           return;
         }
         setConfirmDel(null);
-        removeAccount(cur.acc.apiKey);
-        setMsg({ text: `\u2713 removed ${acctLabel(cur.acc)} from this device`, level: "ok" });
+        removeAccount(target.apiKey);
+        let extra = " from this device";
+        if (wasActive) {
+          if (others.length) {
+            setActiveAccount({ apiKey: others[0].apiKey, apiUrl: others[0].apiUrl });
+            extra = ` \xB7 ${acctLabel(others[0])} is now the active key`;
+          } else {
+            clearActiveCredential();
+            extra = " \xB7 signed out of this device";
+          }
+        }
+        setMsg({ text: `\u2713 removed ${acctLabel(target)}${extra}`, level: "ok" });
         refreshAccounts();
+        onAccountsChanged?.();
       } else if (inp === "t" && cur.kind === "wh") {
         run12("webhook test sent \u2014 check your endpoint", () => api.settings.sendTestWebhook(cur.wh.id).then((r) => {
           if (!r.delivered) throw new Error("endpoint rejected the test (non-2xx)");
@@ -10953,6 +10991,14 @@ function App() {
     if (accounts.length < 2) return;
     viewAccount(accounts[(acctIdx + 1) % accounts.length]);
   };
+  const syncAccounts = () => {
+    const list6 = listAccounts();
+    setAccounts(list6);
+    const next = list6.find((a) => a.apiKey === viewKey) ?? list6[0];
+    setViewCredentials(next ? { apiKey: next.apiKey, apiUrl: next.apiUrl } : null);
+    setViewKey(next?.apiKey);
+    setViewNonce((n) => n + 1);
+  };
   const locked = accounts.length === 0;
   const effectiveSection = locked ? SETTINGS_SECTION : section;
   useInput7((input, key) => {
@@ -10988,7 +11034,7 @@ function App() {
     return /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: cols, height: rows - 1, overflow: "hidden", children: /* @__PURE__ */ jsx8(LivePanel, { active: true, focused: true }, viewNonce) });
   }
   const Panel = current.Panel;
-  const panelBody = current.label === "Settings" ? /* @__PURE__ */ jsx8(SettingsPanel, { active: true, focused: focus === "panel", viewApiKey: viewKey, onView: viewAccount }) : /* @__PURE__ */ jsx8(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" });
+  const panelBody = current.label === "Settings" ? /* @__PURE__ */ jsx8(SettingsPanel, { active: true, focused: focus === "panel", viewApiKey: viewKey, onView: viewAccount, onAccountsChanged: syncAccounts }) : /* @__PURE__ */ jsx8(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" });
   return (
     // height rows-1 (not rows): once total output reaches stdout.rows ink stops
     // diffing and clearTerminal-repaints every frame, which slides the banner.

package/dist/tui/index.js

@@ -359,6 +359,28 @@ function setActiveAccount(creds) {
     return false;
   }
 }
+function clearActiveCredential() {
+  try {
+    const p = join3(homedir3(), ".solongate", ["cloud", "guard.json"].join("-"));
+    if (!existsSync(p)) {
+      cached2 = null;
+      return true;
+    }
+    let existing = {};
+    try {
+      existing = JSON.parse(readFileSync3(p, "utf-8"));
+    } catch {
+    }
+    delete existing.apiKey;
+    delete existing.apiUrl;
+    writeFileSync2(p, JSON.stringify(existing, null, 2));
+    cached2 = null;
+    viewOverride = null;
+    return true;
+  } catch {
+    return false;
+  }
+}
 var ApiError = class extends Error {
   status;
   code;
@@ -3215,7 +3237,8 @@ function SettingsPanel({
   active: active2,
   focused,
   viewApiKey,
-  onView
+  onView,
+  onAccountsChanged
 }) {
   void active2;
   const { cols, rows } = usePanelSize();
@@ -3489,16 +3512,31 @@ function SettingsPanel({
           else activate(cur);
         }
       } else if (inp === "x" && cur.kind === "acct") {
-        const k = "acct:" + cur.acc.apiKey;
+        const target = cur.acc;
+        const k = "acct:" + target.apiKey;
+        const wasActive = isActiveAccount(target.apiKey);
+        const others = accounts.filter((a) => a.apiKey !== target.apiKey);
         if (confirmDel !== k) {
           setConfirmDel(k);
-          setMsg({ text: `press x again to remove ${acctLabel(cur.acc)} from this device (the cloud account is untouched)`, level: "bad" });
+          const note = wasActive ? others.length ? ` \u2014 the ACTIVE guard key; ${acctLabel(others[0])} takes over` : " \u2014 your ONLY account & the active guard key; this signs the device out (guard has no key until you log in again)" : " (the cloud account is untouched)";
+          setMsg({ text: `press x again to remove ${acctLabel(target)} from this device${note}`, level: "bad" });
           return;
         }
         setConfirmDel(null);
-        removeAccount(cur.acc.apiKey);
-        setMsg({ text: `\u2713 removed ${acctLabel(cur.acc)} from this device`, level: "ok" });
+        removeAccount(target.apiKey);
+        let extra = " from this device";
+        if (wasActive) {
+          if (others.length) {
+            setActiveAccount({ apiKey: others[0].apiKey, apiUrl: others[0].apiUrl });
+            extra = ` \xB7 ${acctLabel(others[0])} is now the active key`;
+          } else {
+            clearActiveCredential();
+            extra = " \xB7 signed out of this device";
+          }
+        }
+        setMsg({ text: `\u2713 removed ${acctLabel(target)}${extra}`, level: "ok" });
         refreshAccounts();
+        onAccountsChanged?.();
       } else if (inp === "t" && cur.kind === "wh") {
         run("webhook test sent \u2014 check your endpoint", () => api.settings.sendTestWebhook(cur.wh.id).then((r) => {
           if (!r.delivered) throw new Error("endpoint rejected the test (non-2xx)");
@@ -3958,6 +3996,14 @@ function App() {
     if (accounts.length < 2) return;
     viewAccount(accounts[(acctIdx + 1) % accounts.length]);
   };
+  const syncAccounts = () => {
+    const list5 = listAccounts();
+    setAccounts(list5);
+    const next = list5.find((a) => a.apiKey === viewKey) ?? list5[0];
+    setViewCredentials(next ? { apiKey: next.apiKey, apiUrl: next.apiUrl } : null);
+    setViewKey(next?.apiKey);
+    setViewNonce((n) => n + 1);
+  };
   const locked = accounts.length === 0;
   const effectiveSection = locked ? SETTINGS_SECTION : section;
   useInput7((input, key) => {
@@ -3993,7 +4039,7 @@ function App() {
     return /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: cols, height: rows - 1, overflow: "hidden", children: /* @__PURE__ */ jsx8(LivePanel, { active: true, focused: true }, viewNonce) });
   }
   const Panel = current.Panel;
-  const panelBody = current.label === "Settings" ? /* @__PURE__ */ jsx8(SettingsPanel, { active: true, focused: focus === "panel", viewApiKey: viewKey, onView: viewAccount }) : /* @__PURE__ */ jsx8(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" });
+  const panelBody = current.label === "Settings" ? /* @__PURE__ */ jsx8(SettingsPanel, { active: true, focused: focus === "panel", viewApiKey: viewKey, onView: viewAccount, onAccountsChanged: syncAccounts }) : /* @__PURE__ */ jsx8(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" });
   return (
     // height rows-1 (not rows): once total output reaches stdout.rows ink stops
     // diffing and clearTerminal-repaints every frame, which slides the banner.

package/dist/tui/panels/Settings.d.ts

@@ -1,7 +1,10 @@
 import { type SavedAccount } from '../../api-client/client.js';
-export declare function SettingsPanel({ active, focused, viewApiKey, onView, }: {
+export declare function SettingsPanel({ active, focused, viewApiKey, onView, onAccountsChanged, }: {
     active: boolean;
     focused: boolean;
     viewApiKey?: string;
     onView?: (acc: SavedAccount) => void;
+    /** Fired after this panel mutates the on-disk account set so the App shell can
+     *  re-derive its header / view / locked state from disk. */
+    onAccountsChanged?: () => void;
 }): JSX.Element;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.70",
+  "version": "0.81.71",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {