@solongate/proxy 0.81.81 → 0.81.82

package/dist/global-install.d.ts

@@ -25,6 +25,14 @@ export declare function installGlobalQuiet(): {
     ok: boolean;
     message: string;
 };
+/** HOOK_VERSION of the guard hook currently installed on THIS device (read from
+ *  the file), or null when not installed. The LOCAL truth — independent of the
+ *  cloud guard-status (which only knows what the device last REPORTED). */
+export declare function installedGuardVersion(): number | null;
+/** True when the installed guard hook DIFFERS from the one this CLI ships — i.e.
+ *  a newer hook is available locally (the CLI self-updated). Cloud-independent,
+ *  so the dataroom can offer/apply an update even when the API is behind. */
+export declare function guardHookOutdated(): boolean;
 /**
  * Are the SolonGate guard hooks currently installed in the global Claude settings
  * on THIS device? Reflects a local install/remove IMMEDIATELY — unlike the cloud

package/dist/global-install.js

@@ -180,11 +180,29 @@ function installGlobalQuiet() {
     };
     writeFileSync(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
     if (process.env["SOLONGATE_OS_LOCK"] === "1") lockProtected();
-    return { ok: true, message: "guard installed \u2014 active in NEW Claude Code sessions (open a new one)" };
+    return { ok: true, message: "guard installed (open a new session)" };
   } catch (e) {
     return { ok: false, message: e instanceof Error ? e.message : String(e) };
   }
 }
+function installedGuardVersion() {
+  try {
+    const p = globalPaths();
+    const s = readFileSync(join(p.hooksDir, "guard.mjs"), "utf-8");
+    const m = s.match(/HOOK_VERSION\s*=\s*(\d+)/);
+    return m ? parseInt(m[1], 10) : null;
+  } catch {
+    return null;
+  }
+}
+function guardHookOutdated() {
+  try {
+    const p = globalPaths();
+    return readFileSync(join(p.hooksDir, "guard.mjs"), "utf-8") !== readGuard();
+  } catch {
+    return false;
+  }
+}
 function isGuardInstalled() {
   try {
     const p = globalPaths();
@@ -200,18 +218,11 @@ function uninstallGlobalQuiet() {
     const p = globalPaths();
     unlockProtected();
     removeClaudeShim();
-    const applies = "applies to NEW Claude Code sessions \u2014 a session already running keeps its loaded hooks until it ends";
-    if (existsSync(p.backupPath)) {
-      writeFileSync(p.settingsPath, readFileSync(p.backupPath, "utf-8"));
-      return { ok: true, message: `guard removed \u2014 restored the pre-install settings \xB7 ${applies}` };
-    }
-    if (existsSync(p.settingsPath)) {
-      const s = JSON.parse(readFileSync(p.settingsPath, "utf-8"));
-      delete s.hooks;
-      writeFileSync(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
-      return { ok: true, message: `guard removed \u2014 hooks cleared \xB7 ${applies}` };
-    }
-    return { ok: true, message: "nothing to remove \u2014 no global Claude Code settings found" };
+    if (!existsSync(p.settingsPath)) return { ok: true, message: "guard removed (open a new session)" };
+    const s = JSON.parse(readFileSync(p.settingsPath, "utf-8"));
+    delete s.hooks;
+    writeFileSync(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
+    return { ok: true, message: "guard removed (open a new session)" };
   } catch (e) {
     return { ok: false, message: e instanceof Error ? e.message : String(e) };
   }
@@ -356,9 +367,11 @@ async function installGlobalWithKey(apiKey, apiUrl) {
 export {
   clearGuardUpdateCheck,
   globalPaths,
+  guardHookOutdated,
   installClaudeShim,
   installGlobalQuiet,
   installGlobalWithKey,
+  installedGuardVersion,
   isGuardInstalled,
   lockProtected,
   removeClaudeShim,

package/dist/index.js

@@ -10229,11 +10229,29 @@ function installGlobalQuiet() {
     };
     writeFileSync9(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
     if (process.env["SOLONGATE_OS_LOCK"] === "1") lockProtected();
-    return { ok: true, message: "guard installed \u2014 active in NEW Claude Code sessions (open a new one)" };
+    return { ok: true, message: "guard installed (open a new session)" };
   } catch (e) {
     return { ok: false, message: e instanceof Error ? e.message : String(e) };
   }
 }
+function installedGuardVersion() {
+  try {
+    const p = globalPaths();
+    const s = readFileSync9(join11(p.hooksDir, "guard.mjs"), "utf-8");
+    const m = s.match(/HOOK_VERSION\s*=\s*(\d+)/);
+    return m ? parseInt(m[1], 10) : null;
+  } catch {
+    return null;
+  }
+}
+function guardHookOutdated() {
+  try {
+    const p = globalPaths();
+    return readFileSync9(join11(p.hooksDir, "guard.mjs"), "utf-8") !== readGuard();
+  } catch {
+    return false;
+  }
+}
 function isGuardInstalled() {
   try {
     const p = globalPaths();
@@ -10249,18 +10267,11 @@ function uninstallGlobalQuiet() {
     const p = globalPaths();
     unlockProtected();
     removeClaudeShim();
-    const applies = "applies to NEW Claude Code sessions \u2014 a session already running keeps its loaded hooks until it ends";
-    if (existsSync4(p.backupPath)) {
-      writeFileSync9(p.settingsPath, readFileSync9(p.backupPath, "utf-8"));
-      return { ok: true, message: `guard removed \u2014 restored the pre-install settings \xB7 ${applies}` };
-    }
-    if (existsSync4(p.settingsPath)) {
-      const s = JSON.parse(readFileSync9(p.settingsPath, "utf-8"));
-      delete s.hooks;
-      writeFileSync9(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
-      return { ok: true, message: `guard removed \u2014 hooks cleared \xB7 ${applies}` };
-    }
-    return { ok: true, message: "nothing to remove \u2014 no global Claude Code settings found" };
+    if (!existsSync4(p.settingsPath)) return { ok: true, message: "guard removed (open a new session)" };
+    const s = JSON.parse(readFileSync9(p.settingsPath, "utf-8"));
+    delete s.hooks;
+    writeFileSync9(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
+    return { ok: true, message: "guard removed (open a new session)" };
   } catch (e) {
     return { ok: false, message: e instanceof Error ? e.message : String(e) };
   }
@@ -10336,6 +10347,13 @@ function SettingsPanel({
   const abort = useRef3(false);
   const refreshAccounts = () => setAccounts(listAccounts());
   const [guardHere, setGuardHere] = useState7(() => isGuardInstalled());
+  const [guardVer, setGuardVer] = useState7(() => installedGuardVersion());
+  const [guardOld, setGuardOld] = useState7(() => guardHookOutdated());
+  const refreshGuard = () => {
+    setGuardHere(isGuardInstalled());
+    setGuardVer(installedGuardVersion());
+    setGuardOld(guardHookOutdated());
+  };
   const locked = accounts.length === 0;
   const [srv, setSrv] = useState7(() => logsServerStatus());
   useEffect6(() => {
@@ -10353,21 +10371,20 @@ function SettingsPanel({
   const guardQ = useLoader(() => listAccounts().length ? api.settings.getGuardStatus() : Promise.resolve(null));
   const selfQ = useLoader(() => listAccounts().length ? api.settings.getSelfProtection() : Promise.resolve(null));
   const local = localQ.data;
-  const guard = guardQ.data;
   const selfProt = selfQ.data;
   const autoInstalledRef = useRef3(false);
   useEffect6(() => {
     if (autoInstalledRef.current) return;
-    if (guardHere && guard && guard.installed != null && !guard.up_to_date) {
+    if (guardHere && guardOld) {
       autoInstalledRef.current = true;
       const res = installGlobalQuiet();
       if (res.ok) {
-        setGuardHere(isGuardInstalled());
-        setMsg({ text: `\u2713 guard auto-updated \u2192 v${guard.latest} hooks written \xB7 open a new Claude Code session to apply`, level: "ok" });
+        refreshGuard();
+        setMsg({ text: `\u2713 guard updated \u2192 v${installedGuardVersion() ?? "?"} (open a new session)`, level: "ok" });
         guardQ.reload();
       }
     }
-  }, [guardHere, guard]);
+  }, [guardHere, guardOld]);
   const [hidden, setHidden] = useState7(/* @__PURE__ */ new Set());
   const webhooks = (whQ.data?.webhooks ?? []).filter((w) => !hidden.has("wh:" + w.id));
   const alerts = (alertQ.data?.rules ?? []).filter((r) => !hidden.has("alert:" + r.id));
@@ -10495,7 +10512,7 @@ function SettingsPanel({
     } else if (r.kind === "guard") {
       const res = installGlobalQuiet();
       setMsg({ text: (res.ok ? "\u2713 " : "\u2717 ") + res.message, level: res.ok ? "ok" : "bad" });
-      setGuardHere(isGuardInstalled());
+      refreshGuard();
       guardQ.reload();
     } else if (r.kind === "self") {
       if (!selfProt) return;
@@ -10659,7 +10676,7 @@ function SettingsPanel({
         setConfirmDel(null);
         const res = uninstallGlobalQuiet();
         setMsg({ text: (res.ok ? "\u2713 " : "\u2717 ") + res.message, level: res.ok ? "ok" : "bad" });
-        setGuardHere(isGuardInstalled());
+        refreshGuard();
         guardQ.reload();
       } else if (inp === "d" && (cur.kind === "wh" || cur.kind === "alert")) {
         const k = keyOf(cur);
@@ -10768,13 +10785,13 @@ function SettingsPanel({
           /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "guard".padEnd(11) }),
           !guardHere ? /* @__PURE__ */ jsxs7(Fragment4, { children: [
             /* @__PURE__ */ jsx7(Text7, { color: theme.bad, bold: true, children: "removed" }),
-            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \u2014 new Claude Code sessions are unguarded \xB7 " }),
+            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \xB7 " }),
             /* @__PURE__ */ jsx7(Text7, { color: theme.accentBright, children: "enter to install" })
-          ] }) : guard ? /* @__PURE__ */ jsxs7(Fragment4, { children: [
-            /* @__PURE__ */ jsx7(Text7, { color: guard.up_to_date ? theme.ok : theme.warn, children: `v${guard.installed ?? "?"}` }),
-            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: guard.up_to_date ? " (latest) \xB7 enter reinstall" : ` \u2192 v${guard.latest} available \xB7 enter update` }),
-            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: `  \xB7  ${guard.device_count} device${guard.device_count === 1 ? "" : "s"}${guard.outdated_count ? ` \xB7 ${guard.outdated_count} outdated` : ""} \xB7 d remove` })
-          ] }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "installed \xB7 enter reinstall/update \xB7 d remove" })
+          ] }) : /* @__PURE__ */ jsxs7(Fragment4, { children: [
+            /* @__PURE__ */ jsx7(Text7, { color: guardOld ? theme.warn : theme.ok, children: `v${guardVer ?? "?"}` }),
+            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: guardOld ? " \xB7 update available \xB7 enter update" : " (latest) \xB7 enter reinstall" }),
+            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \xB7 d remove" })
+          ] })
         ] });
       case "self":
         return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [

package/dist/tui/index.js

@@ -3286,11 +3286,29 @@ function installGlobalQuiet() {
     };
     writeFileSync5(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
     if (process.env["SOLONGATE_OS_LOCK"] === "1") lockProtected();
-    return { ok: true, message: "guard installed \u2014 active in NEW Claude Code sessions (open a new one)" };
+    return { ok: true, message: "guard installed (open a new session)" };
   } catch (e) {
     return { ok: false, message: e instanceof Error ? e.message : String(e) };
   }
 }
+function installedGuardVersion() {
+  try {
+    const p = globalPaths();
+    const s = readFileSync4(join6(p.hooksDir, "guard.mjs"), "utf-8");
+    const m = s.match(/HOOK_VERSION\s*=\s*(\d+)/);
+    return m ? parseInt(m[1], 10) : null;
+  } catch {
+    return null;
+  }
+}
+function guardHookOutdated() {
+  try {
+    const p = globalPaths();
+    return readFileSync4(join6(p.hooksDir, "guard.mjs"), "utf-8") !== readGuard();
+  } catch {
+    return false;
+  }
+}
 function isGuardInstalled() {
   try {
     const p = globalPaths();
@@ -3306,18 +3324,11 @@ function uninstallGlobalQuiet() {
     const p = globalPaths();
     unlockProtected();
     removeClaudeShim();
-    const applies = "applies to NEW Claude Code sessions \u2014 a session already running keeps its loaded hooks until it ends";
-    if (existsSync2(p.backupPath)) {
-      writeFileSync5(p.settingsPath, readFileSync4(p.backupPath, "utf-8"));
-      return { ok: true, message: `guard removed \u2014 restored the pre-install settings \xB7 ${applies}` };
-    }
-    if (existsSync2(p.settingsPath)) {
-      const s = JSON.parse(readFileSync4(p.settingsPath, "utf-8"));
-      delete s.hooks;
-      writeFileSync5(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
-      return { ok: true, message: `guard removed \u2014 hooks cleared \xB7 ${applies}` };
-    }
-    return { ok: true, message: "nothing to remove \u2014 no global Claude Code settings found" };
+    if (!existsSync2(p.settingsPath)) return { ok: true, message: "guard removed (open a new session)" };
+    const s = JSON.parse(readFileSync4(p.settingsPath, "utf-8"));
+    delete s.hooks;
+    writeFileSync5(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
+    return { ok: true, message: "guard removed (open a new session)" };
   } catch (e) {
     return { ok: false, message: e instanceof Error ? e.message : String(e) };
   }
@@ -3473,6 +3484,13 @@ function SettingsPanel({
   const abort = useRef3(false);
   const refreshAccounts = () => setAccounts(listAccounts());
   const [guardHere, setGuardHere] = useState7(() => isGuardInstalled());
+  const [guardVer, setGuardVer] = useState7(() => installedGuardVersion());
+  const [guardOld, setGuardOld] = useState7(() => guardHookOutdated());
+  const refreshGuard = () => {
+    setGuardHere(isGuardInstalled());
+    setGuardVer(installedGuardVersion());
+    setGuardOld(guardHookOutdated());
+  };
   const locked = accounts.length === 0;
   const [srv, setSrv] = useState7(() => logsServerStatus());
   useEffect6(() => {
@@ -3490,21 +3508,20 @@ function SettingsPanel({
   const guardQ = useLoader(() => listAccounts().length ? api.settings.getGuardStatus() : Promise.resolve(null));
   const selfQ = useLoader(() => listAccounts().length ? api.settings.getSelfProtection() : Promise.resolve(null));
   const local = localQ.data;
-  const guard = guardQ.data;
   const selfProt = selfQ.data;
   const autoInstalledRef = useRef3(false);
   useEffect6(() => {
     if (autoInstalledRef.current) return;
-    if (guardHere && guard && guard.installed != null && !guard.up_to_date) {
+    if (guardHere && guardOld) {
       autoInstalledRef.current = true;
       const res = installGlobalQuiet();
       if (res.ok) {
-        setGuardHere(isGuardInstalled());
-        setMsg({ text: `\u2713 guard auto-updated \u2192 v${guard.latest} hooks written \xB7 open a new Claude Code session to apply`, level: "ok" });
+        refreshGuard();
+        setMsg({ text: `\u2713 guard updated \u2192 v${installedGuardVersion() ?? "?"} (open a new session)`, level: "ok" });
         guardQ.reload();
       }
     }
-  }, [guardHere, guard]);
+  }, [guardHere, guardOld]);
   const [hidden, setHidden] = useState7(/* @__PURE__ */ new Set());
   const webhooks = (whQ.data?.webhooks ?? []).filter((w) => !hidden.has("wh:" + w.id));
   const alerts = (alertQ.data?.rules ?? []).filter((r) => !hidden.has("alert:" + r.id));
@@ -3632,7 +3649,7 @@ function SettingsPanel({
     } else if (r.kind === "guard") {
       const res = installGlobalQuiet();
       setMsg({ text: (res.ok ? "\u2713 " : "\u2717 ") + res.message, level: res.ok ? "ok" : "bad" });
-      setGuardHere(isGuardInstalled());
+      refreshGuard();
       guardQ.reload();
     } else if (r.kind === "self") {
       if (!selfProt) return;
@@ -3796,7 +3813,7 @@ function SettingsPanel({
         setConfirmDel(null);
         const res = uninstallGlobalQuiet();
         setMsg({ text: (res.ok ? "\u2713 " : "\u2717 ") + res.message, level: res.ok ? "ok" : "bad" });
-        setGuardHere(isGuardInstalled());
+        refreshGuard();
         guardQ.reload();
       } else if (inp === "d" && (cur.kind === "wh" || cur.kind === "alert")) {
         const k = keyOf(cur);
@@ -3905,13 +3922,13 @@ function SettingsPanel({
           /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "guard".padEnd(11) }),
           !guardHere ? /* @__PURE__ */ jsxs7(Fragment4, { children: [
             /* @__PURE__ */ jsx7(Text7, { color: theme.bad, bold: true, children: "removed" }),
-            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \u2014 new Claude Code sessions are unguarded \xB7 " }),
+            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \xB7 " }),
             /* @__PURE__ */ jsx7(Text7, { color: theme.accentBright, children: "enter to install" })
-          ] }) : guard ? /* @__PURE__ */ jsxs7(Fragment4, { children: [
-            /* @__PURE__ */ jsx7(Text7, { color: guard.up_to_date ? theme.ok : theme.warn, children: `v${guard.installed ?? "?"}` }),
-            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: guard.up_to_date ? " (latest) \xB7 enter reinstall" : ` \u2192 v${guard.latest} available \xB7 enter update` }),
-            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: `  \xB7  ${guard.device_count} device${guard.device_count === 1 ? "" : "s"}${guard.outdated_count ? ` \xB7 ${guard.outdated_count} outdated` : ""} \xB7 d remove` })
-          ] }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "installed \xB7 enter reinstall/update \xB7 d remove" })
+          ] }) : /* @__PURE__ */ jsxs7(Fragment4, { children: [
+            /* @__PURE__ */ jsx7(Text7, { color: guardOld ? theme.warn : theme.ok, children: `v${guardVer ?? "?"}` }),
+            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: guardOld ? " \xB7 update available \xB7 enter update" : " (latest) \xB7 enter reinstall" }),
+            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \xB7 d remove" })
+          ] })
         ] });
       case "self":
         return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.81",
+  "version": "0.81.82",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {