@solongate/proxy 0.81.81 → 0.81.83

package/dist/global-install.d.ts

@@ -11,6 +11,13 @@ export declare function globalPaths(): {
 };
 export declare function clearGuardUpdateCheck(): boolean;
 export declare function runGlobalRestore(): void;
+/**
+ * Delete the guard's cached policy/security config (`~/.solongate/.policy-cache-*.json`)
+ * so the next tool call RE-FETCHES it from the API. Fixes a stale cache — e.g. the
+ * guard still enforcing DLP `detect` after you switched it to `block` in the
+ * dataroom. Best-effort; returns how many cache files it cleared.
+ */
+export declare function clearPolicyCache(): number;
 /**
  * TUI-safe (re)install — the dataroom's one-key "install / update guard" action.
  * Writes the hook files THIS CLI ships (readGuard = the current package's bundle,
@@ -25,6 +32,14 @@ export declare function installGlobalQuiet(): {
     ok: boolean;
     message: string;
 };
+/** HOOK_VERSION of the guard hook currently installed on THIS device (read from
+ *  the file), or null when not installed. The LOCAL truth — independent of the
+ *  cloud guard-status (which only knows what the device last REPORTED). */
+export declare function installedGuardVersion(): number | null;
+/** True when the installed guard hook DIFFERS from the one this CLI ships — i.e.
+ *  a newer hook is available locally (the CLI self-updated). Cloud-independent,
+ *  so the dataroom can offer/apply an update even when the API is behind. */
+export declare function guardHookOutdated(): boolean;
 /**
  * Are the SolonGate guard hooks currently installed in the global Claude settings
  * on THIS device? Reflects a local install/remove IMMEDIATELY — unlike the cloud

package/dist/global-install.js

@@ -1,5 +1,5 @@
 // src/global-install.ts
-import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync } from "fs";
+import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync, readdirSync } from "fs";
 import { resolve, join, dirname } from "path";
 import { homedir } from "os";
 import { fileURLToPath } from "url";
@@ -137,6 +137,24 @@ function runGlobalRestore() {
   }
   console.log("  Global SolonGate enforcement uninstalled. Restart Claude Code.");
 }
+function clearPolicyCache() {
+  try {
+    const dir = globalPaths().sgDir;
+    let n = 0;
+    for (const f of readdirSync(dir)) {
+      if (f.startsWith(".policy-cache-") && f.endsWith(".json")) {
+        try {
+          rmSync(join(dir, f), { force: true });
+          n++;
+        } catch {
+        }
+      }
+    }
+    return n;
+  } catch {
+    return 0;
+  }
+}
 function installGlobalQuiet() {
   try {
     const p = globalPaths();
@@ -179,12 +197,31 @@ function installGlobalQuiet() {
       }
     };
     writeFileSync(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
+    clearPolicyCache();
     if (process.env["SOLONGATE_OS_LOCK"] === "1") lockProtected();
-    return { ok: true, message: "guard installed \u2014 active in NEW Claude Code sessions (open a new one)" };
+    return { ok: true, message: "guard installed + policy refreshed (open a new session)" };
   } catch (e) {
     return { ok: false, message: e instanceof Error ? e.message : String(e) };
   }
 }
+function installedGuardVersion() {
+  try {
+    const p = globalPaths();
+    const s = readFileSync(join(p.hooksDir, "guard.mjs"), "utf-8");
+    const m = s.match(/HOOK_VERSION\s*=\s*(\d+)/);
+    return m ? parseInt(m[1], 10) : null;
+  } catch {
+    return null;
+  }
+}
+function guardHookOutdated() {
+  try {
+    const p = globalPaths();
+    return readFileSync(join(p.hooksDir, "guard.mjs"), "utf-8") !== readGuard();
+  } catch {
+    return false;
+  }
+}
 function isGuardInstalled() {
   try {
     const p = globalPaths();
@@ -200,18 +237,11 @@ function uninstallGlobalQuiet() {
     const p = globalPaths();
     unlockProtected();
     removeClaudeShim();
-    const applies = "applies to NEW Claude Code sessions \u2014 a session already running keeps its loaded hooks until it ends";
-    if (existsSync(p.backupPath)) {
-      writeFileSync(p.settingsPath, readFileSync(p.backupPath, "utf-8"));
-      return { ok: true, message: `guard removed \u2014 restored the pre-install settings \xB7 ${applies}` };
-    }
-    if (existsSync(p.settingsPath)) {
-      const s = JSON.parse(readFileSync(p.settingsPath, "utf-8"));
-      delete s.hooks;
-      writeFileSync(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
-      return { ok: true, message: `guard removed \u2014 hooks cleared \xB7 ${applies}` };
-    }
-    return { ok: true, message: "nothing to remove \u2014 no global Claude Code settings found" };
+    if (!existsSync(p.settingsPath)) return { ok: true, message: "guard removed (open a new session)" };
+    const s = JSON.parse(readFileSync(p.settingsPath, "utf-8"));
+    delete s.hooks;
+    writeFileSync(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
+    return { ok: true, message: "guard removed (open a new session)" };
   } catch (e) {
     return { ok: false, message: e instanceof Error ? e.message : String(e) };
   }
@@ -355,10 +385,13 @@ async function installGlobalWithKey(apiKey, apiUrl) {
 }
 export {
   clearGuardUpdateCheck,
+  clearPolicyCache,
   globalPaths,
+  guardHookOutdated,
   installClaudeShim,
   installGlobalQuiet,
   installGlobalWithKey,
+  installedGuardVersion,
   isGuardInstalled,
   lockProtected,
   removeClaudeShim,

package/dist/index.js

@@ -10085,7 +10085,7 @@ var init_Audit = __esm({
 });
 
 // src/global-install.ts
-import { readFileSync as readFileSync9, writeFileSync as writeFileSync9, existsSync as existsSync4, mkdirSync as mkdirSync8, rmSync as rmSync2 } from "fs";
+import { readFileSync as readFileSync9, writeFileSync as writeFileSync9, existsSync as existsSync4, mkdirSync as mkdirSync8, rmSync as rmSync2, readdirSync } from "fs";
 import { resolve as resolve4, join as join11, dirname as dirname3 } from "path";
 import { homedir as homedir9 } from "os";
 import { fileURLToPath as fileURLToPath3 } from "url";
@@ -10186,6 +10186,24 @@ function readGuard() {
   const bundled = join11(HOOKS_DIR, "guard.bundled.mjs");
   return existsSync4(bundled) ? readFileSync9(bundled, "utf-8") : readHook("guard.mjs");
 }
+function clearPolicyCache() {
+  try {
+    const dir = globalPaths().sgDir;
+    let n = 0;
+    for (const f of readdirSync(dir)) {
+      if (f.startsWith(".policy-cache-") && f.endsWith(".json")) {
+        try {
+          rmSync2(join11(dir, f), { force: true });
+          n++;
+        } catch {
+        }
+      }
+    }
+    return n;
+  } catch {
+    return 0;
+  }
+}
 function installGlobalQuiet() {
   try {
     const p = globalPaths();
@@ -10228,12 +10246,31 @@ function installGlobalQuiet() {
       }
     };
     writeFileSync9(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
+    clearPolicyCache();
     if (process.env["SOLONGATE_OS_LOCK"] === "1") lockProtected();
-    return { ok: true, message: "guard installed \u2014 active in NEW Claude Code sessions (open a new one)" };
+    return { ok: true, message: "guard installed + policy refreshed (open a new session)" };
   } catch (e) {
     return { ok: false, message: e instanceof Error ? e.message : String(e) };
   }
 }
+function installedGuardVersion() {
+  try {
+    const p = globalPaths();
+    const s = readFileSync9(join11(p.hooksDir, "guard.mjs"), "utf-8");
+    const m = s.match(/HOOK_VERSION\s*=\s*(\d+)/);
+    return m ? parseInt(m[1], 10) : null;
+  } catch {
+    return null;
+  }
+}
+function guardHookOutdated() {
+  try {
+    const p = globalPaths();
+    return readFileSync9(join11(p.hooksDir, "guard.mjs"), "utf-8") !== readGuard();
+  } catch {
+    return false;
+  }
+}
 function isGuardInstalled() {
   try {
     const p = globalPaths();
@@ -10249,18 +10286,11 @@ function uninstallGlobalQuiet() {
     const p = globalPaths();
     unlockProtected();
     removeClaudeShim();
-    const applies = "applies to NEW Claude Code sessions \u2014 a session already running keeps its loaded hooks until it ends";
-    if (existsSync4(p.backupPath)) {
-      writeFileSync9(p.settingsPath, readFileSync9(p.backupPath, "utf-8"));
-      return { ok: true, message: `guard removed \u2014 restored the pre-install settings \xB7 ${applies}` };
-    }
-    if (existsSync4(p.settingsPath)) {
-      const s = JSON.parse(readFileSync9(p.settingsPath, "utf-8"));
-      delete s.hooks;
-      writeFileSync9(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
-      return { ok: true, message: `guard removed \u2014 hooks cleared \xB7 ${applies}` };
-    }
-    return { ok: true, message: "nothing to remove \u2014 no global Claude Code settings found" };
+    if (!existsSync4(p.settingsPath)) return { ok: true, message: "guard removed (open a new session)" };
+    const s = JSON.parse(readFileSync9(p.settingsPath, "utf-8"));
+    delete s.hooks;
+    writeFileSync9(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
+    return { ok: true, message: "guard removed (open a new session)" };
   } catch (e) {
     return { ok: false, message: e instanceof Error ? e.message : String(e) };
   }
@@ -10336,6 +10366,13 @@ function SettingsPanel({
   const abort = useRef3(false);
   const refreshAccounts = () => setAccounts(listAccounts());
   const [guardHere, setGuardHere] = useState7(() => isGuardInstalled());
+  const [guardVer, setGuardVer] = useState7(() => installedGuardVersion());
+  const [guardOld, setGuardOld] = useState7(() => guardHookOutdated());
+  const refreshGuard = () => {
+    setGuardHere(isGuardInstalled());
+    setGuardVer(installedGuardVersion());
+    setGuardOld(guardHookOutdated());
+  };
   const locked = accounts.length === 0;
   const [srv, setSrv] = useState7(() => logsServerStatus());
   useEffect6(() => {
@@ -10353,21 +10390,20 @@ function SettingsPanel({
   const guardQ = useLoader(() => listAccounts().length ? api.settings.getGuardStatus() : Promise.resolve(null));
   const selfQ = useLoader(() => listAccounts().length ? api.settings.getSelfProtection() : Promise.resolve(null));
   const local = localQ.data;
-  const guard = guardQ.data;
   const selfProt = selfQ.data;
   const autoInstalledRef = useRef3(false);
   useEffect6(() => {
     if (autoInstalledRef.current) return;
-    if (guardHere && guard && guard.installed != null && !guard.up_to_date) {
+    if (guardHere && guardOld) {
       autoInstalledRef.current = true;
       const res = installGlobalQuiet();
       if (res.ok) {
-        setGuardHere(isGuardInstalled());
-        setMsg({ text: `\u2713 guard auto-updated \u2192 v${guard.latest} hooks written \xB7 open a new Claude Code session to apply`, level: "ok" });
+        refreshGuard();
+        setMsg({ text: `\u2713 guard updated \u2192 v${installedGuardVersion() ?? "?"} (open a new session)`, level: "ok" });
         guardQ.reload();
       }
     }
-  }, [guardHere, guard]);
+  }, [guardHere, guardOld]);
   const [hidden, setHidden] = useState7(/* @__PURE__ */ new Set());
   const webhooks = (whQ.data?.webhooks ?? []).filter((w) => !hidden.has("wh:" + w.id));
   const alerts = (alertQ.data?.rules ?? []).filter((r) => !hidden.has("alert:" + r.id));
@@ -10495,7 +10531,7 @@ function SettingsPanel({
     } else if (r.kind === "guard") {
       const res = installGlobalQuiet();
       setMsg({ text: (res.ok ? "\u2713 " : "\u2717 ") + res.message, level: res.ok ? "ok" : "bad" });
-      setGuardHere(isGuardInstalled());
+      refreshGuard();
       guardQ.reload();
     } else if (r.kind === "self") {
       if (!selfProt) return;
@@ -10659,7 +10695,7 @@ function SettingsPanel({
         setConfirmDel(null);
         const res = uninstallGlobalQuiet();
         setMsg({ text: (res.ok ? "\u2713 " : "\u2717 ") + res.message, level: res.ok ? "ok" : "bad" });
-        setGuardHere(isGuardInstalled());
+        refreshGuard();
         guardQ.reload();
       } else if (inp === "d" && (cur.kind === "wh" || cur.kind === "alert")) {
         const k = keyOf(cur);
@@ -10768,13 +10804,13 @@ function SettingsPanel({
           /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "guard".padEnd(11) }),
           !guardHere ? /* @__PURE__ */ jsxs7(Fragment4, { children: [
             /* @__PURE__ */ jsx7(Text7, { color: theme.bad, bold: true, children: "removed" }),
-            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \u2014 new Claude Code sessions are unguarded \xB7 " }),
+            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \xB7 " }),
             /* @__PURE__ */ jsx7(Text7, { color: theme.accentBright, children: "enter to install" })
-          ] }) : guard ? /* @__PURE__ */ jsxs7(Fragment4, { children: [
-            /* @__PURE__ */ jsx7(Text7, { color: guard.up_to_date ? theme.ok : theme.warn, children: `v${guard.installed ?? "?"}` }),
-            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: guard.up_to_date ? " (latest) \xB7 enter reinstall" : ` \u2192 v${guard.latest} available \xB7 enter update` }),
-            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: `  \xB7  ${guard.device_count} device${guard.device_count === 1 ? "" : "s"}${guard.outdated_count ? ` \xB7 ${guard.outdated_count} outdated` : ""} \xB7 d remove` })
-          ] }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "installed \xB7 enter reinstall/update \xB7 d remove" })
+          ] }) : /* @__PURE__ */ jsxs7(Fragment4, { children: [
+            /* @__PURE__ */ jsx7(Text7, { color: guardOld ? theme.warn : theme.ok, children: `v${guardVer ?? "?"}` }),
+            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: guardOld ? " \xB7 update available \xB7 enter update" : " (latest) \xB7 enter reinstall" }),
+            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \xB7 d remove" })
+          ] })
         ] });
       case "self":
         return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
@@ -12333,7 +12369,7 @@ import { createServer, request as httpRequest } from "http";
 import { request as httpsRequest } from "https";
 import { spawn as spawn5 } from "child_process";
 import { URL as URL2 } from "url";
-import { readFileSync as readFileSync11, existsSync as existsSync7, readdirSync, statSync as statSync4 } from "fs";
+import { readFileSync as readFileSync11, existsSync as existsSync7, readdirSync as readdirSync2, statSync as statSync4 } from "fs";
 import { resolve as resolve5 } from "path";
 import { homedir as homedir13 } from "os";
 function findCacheFile() {
@@ -12345,7 +12381,7 @@ function findCacheFile() {
   }
   let best = null, bestTs = -1;
   try {
-    for (const name of readdirSync(dir)) {
+    for (const name of readdirSync2(dir)) {
       if (name.startsWith(".policy-cache-") && name.endsWith(".json")) {
         const full = resolve5(dir, name);
         const ts = statSync4(full).mtimeMs;
@@ -12655,7 +12691,7 @@ import { createServer as createServer2 } from "http";
 import { readFileSync as readFileSync12, statSync as statSync5 } from "fs";
 import { resolve as resolve6, join as join15, isAbsolute } from "path";
 import { homedir as homedir14 } from "os";
-import { readdirSync as readdirSync2 } from "fs";
+import { readdirSync as readdirSync3 } from "fs";
 function allowedOrigins() {
   const base = [
     "https://dashboard.solongate.com",
@@ -12676,7 +12712,7 @@ function resolveLocalLogDir(rawPath) {
 async function findLogDir() {
   const base = resolve6(homedir14(), ".solongate");
   try {
-    const files = readdirSync2(base).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json"));
+    const files = readdirSync3(base).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json"));
     for (const f of files) {
       try {
         const c2 = JSON.parse(readFileSync12(join15(base, f), "utf-8"));

package/dist/login.js

@@ -26,7 +26,7 @@ var c = {
 var BANNER_COLORS = [c.blue1, c.blue2, c.blue3, c.blue4, c.blue5, c.blue6];
 
 // src/global-install.ts
-import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync } from "fs";
+import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync, readdirSync } from "fs";
 import { resolve, join, dirname } from "path";
 import { homedir } from "os";
 import { fileURLToPath } from "url";

package/dist/tui/index.js

@@ -3140,7 +3140,7 @@ import TextInput5 from "ink-text-input";
 import { useEffect as useEffect6, useRef as useRef3, useState as useState7 } from "react";
 
 // src/global-install.ts
-import { readFileSync as readFileSync4, writeFileSync as writeFileSync5, existsSync as existsSync2, mkdirSync as mkdirSync4, rmSync } from "fs";
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync5, existsSync as existsSync2, mkdirSync as mkdirSync4, rmSync, readdirSync } from "fs";
 import { resolve as resolve2, join as join6, dirname } from "path";
 import { homedir as homedir6 } from "os";
 import { fileURLToPath } from "url";
@@ -3243,6 +3243,24 @@ function readGuard() {
   const bundled = join6(HOOKS_DIR, "guard.bundled.mjs");
   return existsSync2(bundled) ? readFileSync4(bundled, "utf-8") : readHook("guard.mjs");
 }
+function clearPolicyCache() {
+  try {
+    const dir = globalPaths().sgDir;
+    let n = 0;
+    for (const f of readdirSync(dir)) {
+      if (f.startsWith(".policy-cache-") && f.endsWith(".json")) {
+        try {
+          rmSync(join6(dir, f), { force: true });
+          n++;
+        } catch {
+        }
+      }
+    }
+    return n;
+  } catch {
+    return 0;
+  }
+}
 function installGlobalQuiet() {
   try {
     const p = globalPaths();
@@ -3285,12 +3303,31 @@ function installGlobalQuiet() {
       }
     };
     writeFileSync5(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
+    clearPolicyCache();
     if (process.env["SOLONGATE_OS_LOCK"] === "1") lockProtected();
-    return { ok: true, message: "guard installed \u2014 active in NEW Claude Code sessions (open a new one)" };
+    return { ok: true, message: "guard installed + policy refreshed (open a new session)" };
   } catch (e) {
     return { ok: false, message: e instanceof Error ? e.message : String(e) };
   }
 }
+function installedGuardVersion() {
+  try {
+    const p = globalPaths();
+    const s = readFileSync4(join6(p.hooksDir, "guard.mjs"), "utf-8");
+    const m = s.match(/HOOK_VERSION\s*=\s*(\d+)/);
+    return m ? parseInt(m[1], 10) : null;
+  } catch {
+    return null;
+  }
+}
+function guardHookOutdated() {
+  try {
+    const p = globalPaths();
+    return readFileSync4(join6(p.hooksDir, "guard.mjs"), "utf-8") !== readGuard();
+  } catch {
+    return false;
+  }
+}
 function isGuardInstalled() {
   try {
     const p = globalPaths();
@@ -3306,18 +3343,11 @@ function uninstallGlobalQuiet() {
     const p = globalPaths();
     unlockProtected();
     removeClaudeShim();
-    const applies = "applies to NEW Claude Code sessions \u2014 a session already running keeps its loaded hooks until it ends";
-    if (existsSync2(p.backupPath)) {
-      writeFileSync5(p.settingsPath, readFileSync4(p.backupPath, "utf-8"));
-      return { ok: true, message: `guard removed \u2014 restored the pre-install settings \xB7 ${applies}` };
-    }
-    if (existsSync2(p.settingsPath)) {
-      const s = JSON.parse(readFileSync4(p.settingsPath, "utf-8"));
-      delete s.hooks;
-      writeFileSync5(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
-      return { ok: true, message: `guard removed \u2014 hooks cleared \xB7 ${applies}` };
-    }
-    return { ok: true, message: "nothing to remove \u2014 no global Claude Code settings found" };
+    if (!existsSync2(p.settingsPath)) return { ok: true, message: "guard removed (open a new session)" };
+    const s = JSON.parse(readFileSync4(p.settingsPath, "utf-8"));
+    delete s.hooks;
+    writeFileSync5(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
+    return { ok: true, message: "guard removed (open a new session)" };
   } catch (e) {
     return { ok: false, message: e instanceof Error ? e.message : String(e) };
   }
@@ -3473,6 +3503,13 @@ function SettingsPanel({
   const abort = useRef3(false);
   const refreshAccounts = () => setAccounts(listAccounts());
   const [guardHere, setGuardHere] = useState7(() => isGuardInstalled());
+  const [guardVer, setGuardVer] = useState7(() => installedGuardVersion());
+  const [guardOld, setGuardOld] = useState7(() => guardHookOutdated());
+  const refreshGuard = () => {
+    setGuardHere(isGuardInstalled());
+    setGuardVer(installedGuardVersion());
+    setGuardOld(guardHookOutdated());
+  };
   const locked = accounts.length === 0;
   const [srv, setSrv] = useState7(() => logsServerStatus());
   useEffect6(() => {
@@ -3490,21 +3527,20 @@ function SettingsPanel({
   const guardQ = useLoader(() => listAccounts().length ? api.settings.getGuardStatus() : Promise.resolve(null));
   const selfQ = useLoader(() => listAccounts().length ? api.settings.getSelfProtection() : Promise.resolve(null));
   const local = localQ.data;
-  const guard = guardQ.data;
   const selfProt = selfQ.data;
   const autoInstalledRef = useRef3(false);
   useEffect6(() => {
     if (autoInstalledRef.current) return;
-    if (guardHere && guard && guard.installed != null && !guard.up_to_date) {
+    if (guardHere && guardOld) {
       autoInstalledRef.current = true;
       const res = installGlobalQuiet();
       if (res.ok) {
-        setGuardHere(isGuardInstalled());
-        setMsg({ text: `\u2713 guard auto-updated \u2192 v${guard.latest} hooks written \xB7 open a new Claude Code session to apply`, level: "ok" });
+        refreshGuard();
+        setMsg({ text: `\u2713 guard updated \u2192 v${installedGuardVersion() ?? "?"} (open a new session)`, level: "ok" });
         guardQ.reload();
       }
     }
-  }, [guardHere, guard]);
+  }, [guardHere, guardOld]);
   const [hidden, setHidden] = useState7(/* @__PURE__ */ new Set());
   const webhooks = (whQ.data?.webhooks ?? []).filter((w) => !hidden.has("wh:" + w.id));
   const alerts = (alertQ.data?.rules ?? []).filter((r) => !hidden.has("alert:" + r.id));
@@ -3632,7 +3668,7 @@ function SettingsPanel({
     } else if (r.kind === "guard") {
       const res = installGlobalQuiet();
       setMsg({ text: (res.ok ? "\u2713 " : "\u2717 ") + res.message, level: res.ok ? "ok" : "bad" });
-      setGuardHere(isGuardInstalled());
+      refreshGuard();
       guardQ.reload();
     } else if (r.kind === "self") {
       if (!selfProt) return;
@@ -3796,7 +3832,7 @@ function SettingsPanel({
         setConfirmDel(null);
         const res = uninstallGlobalQuiet();
         setMsg({ text: (res.ok ? "\u2713 " : "\u2717 ") + res.message, level: res.ok ? "ok" : "bad" });
-        setGuardHere(isGuardInstalled());
+        refreshGuard();
         guardQ.reload();
       } else if (inp === "d" && (cur.kind === "wh" || cur.kind === "alert")) {
         const k = keyOf(cur);
@@ -3905,13 +3941,13 @@ function SettingsPanel({
           /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "guard".padEnd(11) }),
           !guardHere ? /* @__PURE__ */ jsxs7(Fragment4, { children: [
             /* @__PURE__ */ jsx7(Text7, { color: theme.bad, bold: true, children: "removed" }),
-            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \u2014 new Claude Code sessions are unguarded \xB7 " }),
+            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \xB7 " }),
             /* @__PURE__ */ jsx7(Text7, { color: theme.accentBright, children: "enter to install" })
-          ] }) : guard ? /* @__PURE__ */ jsxs7(Fragment4, { children: [
-            /* @__PURE__ */ jsx7(Text7, { color: guard.up_to_date ? theme.ok : theme.warn, children: `v${guard.installed ?? "?"}` }),
-            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: guard.up_to_date ? " (latest) \xB7 enter reinstall" : ` \u2192 v${guard.latest} available \xB7 enter update` }),
-            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: `  \xB7  ${guard.device_count} device${guard.device_count === 1 ? "" : "s"}${guard.outdated_count ? ` \xB7 ${guard.outdated_count} outdated` : ""} \xB7 d remove` })
-          ] }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "installed \xB7 enter reinstall/update \xB7 d remove" })
+          ] }) : /* @__PURE__ */ jsxs7(Fragment4, { children: [
+            /* @__PURE__ */ jsx7(Text7, { color: guardOld ? theme.warn : theme.ok, children: `v${guardVer ?? "?"}` }),
+            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: guardOld ? " \xB7 update available \xB7 enter update" : " (latest) \xB7 enter reinstall" }),
+            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \xB7 d remove" })
+          ] })
         ] });
       case "self":
         return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.81",
+  "version": "0.81.83",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {