@solongate/proxy 0.81.70 → 0.81.72

package/dist/api-client/client.d.ts

@@ -26,6 +26,14 @@ export declare function isActiveAccount(apiKey: string): boolean;
  * account. Best-effort; returns false on failure.
  */
 export declare function setActiveAccount(creds: Credentials): boolean;
+/**
+ * Clear the ACTIVE login credential — a local sign-out. Removes the key/url from
+ * the active-key file so `listAccounts` no longer re-seeds it (the source of the
+ * "ghost account …xxxx" that lingers after removing the account you're logged in
+ * as). The guard hooks then have NO key until the next `solongate login`, so this
+ * only runs when the user removes their LAST account. Best-effort; false on error.
+ */
+export declare function clearActiveCredential(): boolean;
 /**
  * Thrown for any non-2xx response. `code`/`message` come from the API's
  * `{ error: { code, message } }` envelope when present; `status` is the HTTP

package/dist/index.js

@@ -6946,11 +6946,12 @@ function PaneTitle({ label, extra, width: width2 }) {
     /* @__PURE__ */ jsx(Text, { color: theme.dim, children: tail + "\u2500".repeat(Math.max(0, width2 - used)) })
   ] });
 }
-function StreamLine({ e, loc, selected }) {
+function StreamLine({ e, loc, selected, date }) {
   return /* @__PURE__ */ jsxs(Text, { wrap: "truncate", backgroundColor: selected ? "#1c2f63" : void 0, children: [
     /* @__PURE__ */ jsx(Text, { color: selected ? theme.accentBright : theme.dim, children: selected ? "\u25B8" : " " }),
     /* @__PURE__ */ jsxs(Text, { color: theme.dim, children: [
       "[",
+      date ? ymd(e.at) + " " : "",
       hhmmss(e.at),
       " "
     ] }),
@@ -7001,7 +7002,7 @@ function KeyHints({ hints }) {
     i < hints.length - 1 ? "   " : ""
   ] }, i)) });
 }
-var hhmmss;
+var hhmmss, ymd;
 var init_components = __esm({
   "src/tui/components.tsx"() {
     "use strict";
@@ -7010,6 +7011,12 @@ var init_components = __esm({
       const d = new Date(ts);
       return Number.isNaN(d.getTime()) ? "--:--:--" : d.toTimeString().slice(0, 8);
     };
+    ymd = (ts) => {
+      const d = new Date(ts);
+      if (Number.isNaN(d.getTime())) return "----------";
+      const p = (n) => String(n).padStart(2, "0");
+      return `${d.getFullYear()}-${p(d.getMonth() + 1)}-${p(d.getDate())}`;
+    };
   }
 });
 
@@ -7168,6 +7175,28 @@ function setActiveAccount(creds) {
     return false;
   }
 }
+function clearActiveCredential() {
+  try {
+    const p = join8(homedir6(), ".solongate", ["cloud", "guard.json"].join("-"));
+    if (!existsSync3(p)) {
+      cached2 = null;
+      return true;
+    }
+    let existing = {};
+    try {
+      existing = JSON.parse(readFileSync8(p, "utf-8"));
+    } catch {
+    }
+    delete existing.apiKey;
+    delete existing.apiUrl;
+    writeFileSync6(p, JSON.stringify(existing, null, 2));
+    cached2 = null;
+    viewOverride = null;
+    return true;
+  } catch {
+    return false;
+  }
+}
 function loginCredentialFile() {
   try {
     const p = join8(homedir6(), ".solongate", "cloud-guard.json");
@@ -9951,7 +9980,7 @@ function AuditPanel({ active: active2, focused }) {
       )
     ] }) : null,
     /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: `${total} matched \xB7 page ${Math.min(page + 1, pages)}/${pages} \xB7 ${PAGE}/page \xB7 ${pageRows.length ? selClamped + 1 : 0}/${pageRows.length}${start ? ` \xB7 \u25B2${start} newer` : ""}${start + listRows < pageRows.length ? ` \xB7 \u25BC${pageRows.length - start - listRows} older` : ""}` }),
-    /* @__PURE__ */ jsx6(Box6, { flexDirection: "column", overflow: "hidden", children: windowed.map((e, i) => /* @__PURE__ */ jsx6(StreamLine, { e: toStream(e), loc: source === "local", selected: start + i === selClamped && focused }, e.id)) }),
+    /* @__PURE__ */ jsx6(Box6, { flexDirection: "column", overflow: "hidden", children: windowed.map((e, i) => /* @__PURE__ */ jsx6(StreamLine, { e: toStream(e), loc: source === "local", selected: start + i === selClamped && focused, date: true }, e.id)) }),
     pageRows.length === 0 ? /* @__PURE__ */ jsxs6(Text6, { color: theme.dim, children: [
       "(no entries",
       source === "local" ? " in the local file" : "",
@@ -10315,7 +10344,8 @@ function SettingsPanel({
   active: active2,
   focused,
   viewApiKey,
-  onView
+  onView,
+  onAccountsChanged
 }) {
   void active2;
   const { cols, rows } = usePanelSize();
@@ -10589,16 +10619,31 @@ function SettingsPanel({
           else activate(cur);
         }
       } else if (inp === "x" && cur.kind === "acct") {
-        const k = "acct:" + cur.acc.apiKey;
+        const target = cur.acc;
+        const k = "acct:" + target.apiKey;
+        const wasActive = isActiveAccount(target.apiKey);
+        const others = accounts.filter((a) => a.apiKey !== target.apiKey);
         if (confirmDel !== k) {
           setConfirmDel(k);
-          setMsg({ text: `press x again to remove ${acctLabel(cur.acc)} from this device (the cloud account is untouched)`, level: "bad" });
+          const note = wasActive ? others.length ? ` \u2014 the ACTIVE guard key; ${acctLabel(others[0])} takes over` : " \u2014 your ONLY account & the active guard key; this signs the device out (guard has no key until you log in again)" : " (the cloud account is untouched)";
+          setMsg({ text: `press x again to remove ${acctLabel(target)} from this device${note}`, level: "bad" });
           return;
         }
         setConfirmDel(null);
-        removeAccount(cur.acc.apiKey);
-        setMsg({ text: `\u2713 removed ${acctLabel(cur.acc)} from this device`, level: "ok" });
+        removeAccount(target.apiKey);
+        let extra = " from this device";
+        if (wasActive) {
+          if (others.length) {
+            setActiveAccount({ apiKey: others[0].apiKey, apiUrl: others[0].apiUrl });
+            extra = ` \xB7 ${acctLabel(others[0])} is now the active key`;
+          } else {
+            clearActiveCredential();
+            extra = " \xB7 signed out of this device";
+          }
+        }
+        setMsg({ text: `\u2713 removed ${acctLabel(target)}${extra}`, level: "ok" });
         refreshAccounts();
+        onAccountsChanged?.();
       } else if (inp === "t" && cur.kind === "wh") {
         run12("webhook test sent \u2014 check your endpoint", () => api.settings.sendTestWebhook(cur.wh.id).then((r) => {
           if (!r.delivered) throw new Error("endpoint rejected the test (non-2xx)");
@@ -10953,6 +10998,14 @@ function App() {
     if (accounts.length < 2) return;
     viewAccount(accounts[(acctIdx + 1) % accounts.length]);
   };
+  const syncAccounts = () => {
+    const list6 = listAccounts();
+    setAccounts(list6);
+    const next = list6.find((a) => a.apiKey === viewKey) ?? list6[0];
+    setViewCredentials(next ? { apiKey: next.apiKey, apiUrl: next.apiUrl } : null);
+    setViewKey(next?.apiKey);
+    setViewNonce((n) => n + 1);
+  };
   const locked = accounts.length === 0;
   const effectiveSection = locked ? SETTINGS_SECTION : section;
   useInput7((input, key) => {
@@ -10988,7 +11041,7 @@ function App() {
     return /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: cols, height: rows - 1, overflow: "hidden", children: /* @__PURE__ */ jsx8(LivePanel, { active: true, focused: true }, viewNonce) });
   }
   const Panel = current.Panel;
-  const panelBody = current.label === "Settings" ? /* @__PURE__ */ jsx8(SettingsPanel, { active: true, focused: focus === "panel", viewApiKey: viewKey, onView: viewAccount }) : /* @__PURE__ */ jsx8(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" });
+  const panelBody = current.label === "Settings" ? /* @__PURE__ */ jsx8(SettingsPanel, { active: true, focused: focus === "panel", viewApiKey: viewKey, onView: viewAccount, onAccountsChanged: syncAccounts }) : /* @__PURE__ */ jsx8(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" });
   return (
     // height rows-1 (not rows): once total output reaches stdout.rows ink stops
     // diffing and clearTerminal-repaints every frame, which slides the banner.

package/dist/tui/components.d.ts

@@ -1,6 +1,8 @@
 import type { ReactNode } from 'react';
 /** HH:MM:SS for a timestamp (ms or ISO); `--:--:--` when unparseable. */
 export declare const hhmmss: (ts: string | number) => string;
+/** YYYY-MM-DD for a timestamp; `----------` when unparseable. */
+export declare const ymd: (ts: string | number) => string;
 /** Section divider title used across the Live/Audit consoles. */
 export declare function PaneTitle({ label, extra, width }: {
     label: string;
@@ -25,10 +27,11 @@ export interface StreamRow {
     evalMs?: number | null;
     rule?: string | null;
 }
-export declare function StreamLine({ e, loc, selected }: {
+export declare function StreamLine({ e, loc, selected, date }: {
     e: StreamRow;
     loc: boolean;
     selected?: boolean;
+    date?: boolean;
 }): JSX.Element;
 export declare function Panel({ title, subtitle, children }: {
     title: string;

package/dist/tui/index.js

@@ -129,6 +129,12 @@ var hhmmss = (ts) => {
   const d = new Date(ts);
   return Number.isNaN(d.getTime()) ? "--:--:--" : d.toTimeString().slice(0, 8);
 };
+var ymd = (ts) => {
+  const d = new Date(ts);
+  if (Number.isNaN(d.getTime())) return "----------";
+  const p = (n) => String(n).padStart(2, "0");
+  return `${d.getFullYear()}-${p(d.getMonth() + 1)}-${p(d.getDate())}`;
+};
 function PaneTitle({ label, extra, width }) {
   const tail = extra ? ` ${extra} ` : " ";
   const used = 2 + 1 + label.length + tail.length;
@@ -141,11 +147,12 @@ function PaneTitle({ label, extra, width }) {
     /* @__PURE__ */ jsx(Text, { color: theme.dim, children: tail + "\u2500".repeat(Math.max(0, width - used)) })
   ] });
 }
-function StreamLine({ e, loc, selected }) {
+function StreamLine({ e, loc, selected, date }) {
   return /* @__PURE__ */ jsxs(Text, { wrap: "truncate", backgroundColor: selected ? "#1c2f63" : void 0, children: [
     /* @__PURE__ */ jsx(Text, { color: selected ? theme.accentBright : theme.dim, children: selected ? "\u25B8" : " " }),
     /* @__PURE__ */ jsxs(Text, { color: theme.dim, children: [
       "[",
+      date ? ymd(e.at) + " " : "",
       hhmmss(e.at),
       " "
     ] }),
@@ -359,6 +366,28 @@ function setActiveAccount(creds) {
     return false;
   }
 }
+function clearActiveCredential() {
+  try {
+    const p = join3(homedir3(), ".solongate", ["cloud", "guard.json"].join("-"));
+    if (!existsSync(p)) {
+      cached2 = null;
+      return true;
+    }
+    let existing = {};
+    try {
+      existing = JSON.parse(readFileSync3(p, "utf-8"));
+    } catch {
+    }
+    delete existing.apiKey;
+    delete existing.apiUrl;
+    writeFileSync2(p, JSON.stringify(existing, null, 2));
+    cached2 = null;
+    viewOverride = null;
+    return true;
+  } catch {
+    return false;
+  }
+}
 var ApiError = class extends Error {
   status;
   code;
@@ -3071,7 +3100,7 @@ function AuditPanel({ active: active2, focused }) {
       )
     ] }) : null,
     /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: `${total} matched \xB7 page ${Math.min(page + 1, pages)}/${pages} \xB7 ${PAGE}/page \xB7 ${pageRows.length ? selClamped + 1 : 0}/${pageRows.length}${start ? ` \xB7 \u25B2${start} newer` : ""}${start + listRows < pageRows.length ? ` \xB7 \u25BC${pageRows.length - start - listRows} older` : ""}` }),
-    /* @__PURE__ */ jsx6(Box6, { flexDirection: "column", overflow: "hidden", children: windowed.map((e, i) => /* @__PURE__ */ jsx6(StreamLine, { e: toStream(e), loc: source === "local", selected: start + i === selClamped && focused }, e.id)) }),
+    /* @__PURE__ */ jsx6(Box6, { flexDirection: "column", overflow: "hidden", children: windowed.map((e, i) => /* @__PURE__ */ jsx6(StreamLine, { e: toStream(e), loc: source === "local", selected: start + i === selClamped && focused, date: true }, e.id)) }),
     pageRows.length === 0 ? /* @__PURE__ */ jsxs6(Text6, { color: theme.dim, children: [
       "(no entries",
       source === "local" ? " in the local file" : "",
@@ -3215,7 +3244,8 @@ function SettingsPanel({
   active: active2,
   focused,
   viewApiKey,
-  onView
+  onView,
+  onAccountsChanged
 }) {
   void active2;
   const { cols, rows } = usePanelSize();
@@ -3489,16 +3519,31 @@ function SettingsPanel({
           else activate(cur);
         }
       } else if (inp === "x" && cur.kind === "acct") {
-        const k = "acct:" + cur.acc.apiKey;
+        const target = cur.acc;
+        const k = "acct:" + target.apiKey;
+        const wasActive = isActiveAccount(target.apiKey);
+        const others = accounts.filter((a) => a.apiKey !== target.apiKey);
         if (confirmDel !== k) {
           setConfirmDel(k);
-          setMsg({ text: `press x again to remove ${acctLabel(cur.acc)} from this device (the cloud account is untouched)`, level: "bad" });
+          const note = wasActive ? others.length ? ` \u2014 the ACTIVE guard key; ${acctLabel(others[0])} takes over` : " \u2014 your ONLY account & the active guard key; this signs the device out (guard has no key until you log in again)" : " (the cloud account is untouched)";
+          setMsg({ text: `press x again to remove ${acctLabel(target)} from this device${note}`, level: "bad" });
           return;
         }
         setConfirmDel(null);
-        removeAccount(cur.acc.apiKey);
-        setMsg({ text: `\u2713 removed ${acctLabel(cur.acc)} from this device`, level: "ok" });
+        removeAccount(target.apiKey);
+        let extra = " from this device";
+        if (wasActive) {
+          if (others.length) {
+            setActiveAccount({ apiKey: others[0].apiKey, apiUrl: others[0].apiUrl });
+            extra = ` \xB7 ${acctLabel(others[0])} is now the active key`;
+          } else {
+            clearActiveCredential();
+            extra = " \xB7 signed out of this device";
+          }
+        }
+        setMsg({ text: `\u2713 removed ${acctLabel(target)}${extra}`, level: "ok" });
         refreshAccounts();
+        onAccountsChanged?.();
       } else if (inp === "t" && cur.kind === "wh") {
         run("webhook test sent \u2014 check your endpoint", () => api.settings.sendTestWebhook(cur.wh.id).then((r) => {
           if (!r.delivered) throw new Error("endpoint rejected the test (non-2xx)");
@@ -3958,6 +4003,14 @@ function App() {
     if (accounts.length < 2) return;
     viewAccount(accounts[(acctIdx + 1) % accounts.length]);
   };
+  const syncAccounts = () => {
+    const list5 = listAccounts();
+    setAccounts(list5);
+    const next = list5.find((a) => a.apiKey === viewKey) ?? list5[0];
+    setViewCredentials(next ? { apiKey: next.apiKey, apiUrl: next.apiUrl } : null);
+    setViewKey(next?.apiKey);
+    setViewNonce((n) => n + 1);
+  };
   const locked = accounts.length === 0;
   const effectiveSection = locked ? SETTINGS_SECTION : section;
   useInput7((input, key) => {
@@ -3993,7 +4046,7 @@ function App() {
     return /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: cols, height: rows - 1, overflow: "hidden", children: /* @__PURE__ */ jsx8(LivePanel, { active: true, focused: true }, viewNonce) });
   }
   const Panel = current.Panel;
-  const panelBody = current.label === "Settings" ? /* @__PURE__ */ jsx8(SettingsPanel, { active: true, focused: focus === "panel", viewApiKey: viewKey, onView: viewAccount }) : /* @__PURE__ */ jsx8(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" });
+  const panelBody = current.label === "Settings" ? /* @__PURE__ */ jsx8(SettingsPanel, { active: true, focused: focus === "panel", viewApiKey: viewKey, onView: viewAccount, onAccountsChanged: syncAccounts }) : /* @__PURE__ */ jsx8(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" });
   return (
     // height rows-1 (not rows): once total output reaches stdout.rows ink stops
     // diffing and clearTerminal-repaints every frame, which slides the banner.

package/dist/tui/panels/Settings.d.ts

@@ -1,7 +1,10 @@
 import { type SavedAccount } from '../../api-client/client.js';
-export declare function SettingsPanel({ active, focused, viewApiKey, onView, }: {
+export declare function SettingsPanel({ active, focused, viewApiKey, onView, onAccountsChanged, }: {
     active: boolean;
     focused: boolean;
     viewApiKey?: string;
     onView?: (acc: SavedAccount) => void;
+    /** Fired after this panel mutates the on-disk account set so the App shell can
+     *  re-derive its header / view / locked state from disk. */
+    onAccountsChanged?: () => void;
 }): JSX.Element;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.70",
+  "version": "0.81.72",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {