@solongate/proxy 0.81.83 → 0.81.85

package/dist/global-install.d.ts

@@ -11,13 +11,6 @@ export declare function globalPaths(): {
 };
 export declare function clearGuardUpdateCheck(): boolean;
 export declare function runGlobalRestore(): void;
-/**
- * Delete the guard's cached policy/security config (`~/.solongate/.policy-cache-*.json`)
- * so the next tool call RE-FETCHES it from the API. Fixes a stale cache — e.g. the
- * guard still enforcing DLP `detect` after you switched it to `block` in the
- * dataroom. Best-effort; returns how many cache files it cleared.
- */
-export declare function clearPolicyCache(): number;
 /**
  * TUI-safe (re)install — the dataroom's one-key "install / update guard" action.
  * Writes the hook files THIS CLI ships (readGuard = the current package's bundle,

package/dist/global-install.js

@@ -1,5 +1,5 @@
 // src/global-install.ts
-import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync, readdirSync } from "fs";
+import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync } from "fs";
 import { resolve, join, dirname } from "path";
 import { homedir } from "os";
 import { fileURLToPath } from "url";
@@ -137,24 +137,6 @@ function runGlobalRestore() {
   }
   console.log("  Global SolonGate enforcement uninstalled. Restart Claude Code.");
 }
-function clearPolicyCache() {
-  try {
-    const dir = globalPaths().sgDir;
-    let n = 0;
-    for (const f of readdirSync(dir)) {
-      if (f.startsWith(".policy-cache-") && f.endsWith(".json")) {
-        try {
-          rmSync(join(dir, f), { force: true });
-          n++;
-        } catch {
-        }
-      }
-    }
-    return n;
-  } catch {
-    return 0;
-  }
-}
 function installGlobalQuiet() {
   try {
     const p = globalPaths();
@@ -197,9 +179,8 @@ function installGlobalQuiet() {
       }
     };
     writeFileSync(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
-    clearPolicyCache();
     if (process.env["SOLONGATE_OS_LOCK"] === "1") lockProtected();
-    return { ok: true, message: "guard installed + policy refreshed (open a new session)" };
+    return { ok: true, message: "guard installed (open a new session)" };
   } catch (e) {
     return { ok: false, message: e instanceof Error ? e.message : String(e) };
   }
@@ -385,7 +366,6 @@ async function installGlobalWithKey(apiKey, apiUrl) {
 }
 export {
   clearGuardUpdateCheck,
-  clearPolicyCache,
   globalPaths,
   guardHookOutdated,
   installClaudeShim,

package/dist/index.js

@@ -10085,7 +10085,7 @@ var init_Audit = __esm({
 });
 
 // src/global-install.ts
-import { readFileSync as readFileSync9, writeFileSync as writeFileSync9, existsSync as existsSync4, mkdirSync as mkdirSync8, rmSync as rmSync2, readdirSync } from "fs";
+import { readFileSync as readFileSync9, writeFileSync as writeFileSync9, existsSync as existsSync4, mkdirSync as mkdirSync8, rmSync as rmSync2 } from "fs";
 import { resolve as resolve4, join as join11, dirname as dirname3 } from "path";
 import { homedir as homedir9 } from "os";
 import { fileURLToPath as fileURLToPath3 } from "url";
@@ -10186,24 +10186,6 @@ function readGuard() {
   const bundled = join11(HOOKS_DIR, "guard.bundled.mjs");
   return existsSync4(bundled) ? readFileSync9(bundled, "utf-8") : readHook("guard.mjs");
 }
-function clearPolicyCache() {
-  try {
-    const dir = globalPaths().sgDir;
-    let n = 0;
-    for (const f of readdirSync(dir)) {
-      if (f.startsWith(".policy-cache-") && f.endsWith(".json")) {
-        try {
-          rmSync2(join11(dir, f), { force: true });
-          n++;
-        } catch {
-        }
-      }
-    }
-    return n;
-  } catch {
-    return 0;
-  }
-}
 function installGlobalQuiet() {
   try {
     const p = globalPaths();
@@ -10246,9 +10228,8 @@ function installGlobalQuiet() {
       }
     };
     writeFileSync9(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
-    clearPolicyCache();
     if (process.env["SOLONGATE_OS_LOCK"] === "1") lockProtected();
-    return { ok: true, message: "guard installed + policy refreshed (open a new session)" };
+    return { ok: true, message: "guard installed (open a new session)" };
   } catch (e) {
     return { ok: false, message: e instanceof Error ? e.message : String(e) };
   }
@@ -12369,7 +12350,7 @@ import { createServer, request as httpRequest } from "http";
 import { request as httpsRequest } from "https";
 import { spawn as spawn5 } from "child_process";
 import { URL as URL2 } from "url";
-import { readFileSync as readFileSync11, existsSync as existsSync7, readdirSync as readdirSync2, statSync as statSync4 } from "fs";
+import { readFileSync as readFileSync11, existsSync as existsSync7, readdirSync, statSync as statSync4 } from "fs";
 import { resolve as resolve5 } from "path";
 import { homedir as homedir13 } from "os";
 function findCacheFile() {
@@ -12381,7 +12362,7 @@ function findCacheFile() {
   }
   let best = null, bestTs = -1;
   try {
-    for (const name of readdirSync2(dir)) {
+    for (const name of readdirSync(dir)) {
       if (name.startsWith(".policy-cache-") && name.endsWith(".json")) {
         const full = resolve5(dir, name);
         const ts = statSync4(full).mtimeMs;
@@ -12691,7 +12672,7 @@ import { createServer as createServer2 } from "http";
 import { readFileSync as readFileSync12, statSync as statSync5 } from "fs";
 import { resolve as resolve6, join as join15, isAbsolute } from "path";
 import { homedir as homedir14 } from "os";
-import { readdirSync as readdirSync3 } from "fs";
+import { readdirSync as readdirSync2 } from "fs";
 function allowedOrigins() {
   const base = [
     "https://dashboard.solongate.com",
@@ -12712,7 +12693,7 @@ function resolveLocalLogDir(rawPath) {
 async function findLogDir() {
   const base = resolve6(homedir14(), ".solongate");
   try {
-    const files = readdirSync3(base).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json"));
+    const files = readdirSync2(base).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json"));
     for (const f of files) {
       try {
         const c2 = JSON.parse(readFileSync12(join15(base, f), "utf-8"));

package/dist/login.js

@@ -26,7 +26,7 @@ var c = {
 var BANNER_COLORS = [c.blue1, c.blue2, c.blue3, c.blue4, c.blue5, c.blue6];
 
 // src/global-install.ts
-import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync, readdirSync } from "fs";
+import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync } from "fs";
 import { resolve, join, dirname } from "path";
 import { homedir } from "os";
 import { fileURLToPath } from "url";

package/dist/tui/index.js

@@ -3140,7 +3140,7 @@ import TextInput5 from "ink-text-input";
 import { useEffect as useEffect6, useRef as useRef3, useState as useState7 } from "react";
 
 // src/global-install.ts
-import { readFileSync as readFileSync4, writeFileSync as writeFileSync5, existsSync as existsSync2, mkdirSync as mkdirSync4, rmSync, readdirSync } from "fs";
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync5, existsSync as existsSync2, mkdirSync as mkdirSync4, rmSync } from "fs";
 import { resolve as resolve2, join as join6, dirname } from "path";
 import { homedir as homedir6 } from "os";
 import { fileURLToPath } from "url";
@@ -3243,24 +3243,6 @@ function readGuard() {
   const bundled = join6(HOOKS_DIR, "guard.bundled.mjs");
   return existsSync2(bundled) ? readFileSync4(bundled, "utf-8") : readHook("guard.mjs");
 }
-function clearPolicyCache() {
-  try {
-    const dir = globalPaths().sgDir;
-    let n = 0;
-    for (const f of readdirSync(dir)) {
-      if (f.startsWith(".policy-cache-") && f.endsWith(".json")) {
-        try {
-          rmSync(join6(dir, f), { force: true });
-          n++;
-        } catch {
-        }
-      }
-    }
-    return n;
-  } catch {
-    return 0;
-  }
-}
 function installGlobalQuiet() {
   try {
     const p = globalPaths();
@@ -3303,9 +3285,8 @@ function installGlobalQuiet() {
       }
     };
     writeFileSync5(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
-    clearPolicyCache();
     if (process.env["SOLONGATE_OS_LOCK"] === "1") lockProtected();
-    return { ok: true, message: "guard installed + policy refreshed (open a new session)" };
+    return { ok: true, message: "guard installed (open a new session)" };
   } catch (e) {
     return { ok: false, message: e instanceof Error ? e.message : String(e) };
   }

package/hooks/guard.bundled.mjs

@@ -6536,7 +6536,7 @@ import { resolve, join, dirname, isAbsolute } from "node:path";
 import { homedir } from "node:os";
 import { gunzipSync } from "node:zlib";
 import { createHash } from "node:crypto";
-var HOOK_VERSION = 41;
+var HOOK_VERSION = 42;
 function localLogsOnly(security) {
   if (security && typeof security === "object") {
     const l = security.localLogs;
@@ -6804,17 +6804,16 @@ function blockTool(reason) {
     }));
     sgFinish(0);
   } else {
+    const msg = reason || "[SolonGate] Blocked by policy";
     process.stdout.write(JSON.stringify({
       hookSpecificOutput: {
         hookEventName: "PreToolUse",
         permissionDecision: "deny",
-        // Never empty: a deny with an empty reason becomes an is_error tool_result
-        // with empty content, which the API rejects and crashes the agent. Always
-        // carry a SolonGate-worded reason so the block says WHAT stopped it.
-        permissionDecisionReason: reason || "[SolonGate] Blocked by policy"
+        permissionDecisionReason: msg
       }
     }));
-    sgFinish(0);
+    process.stderr.write(msg + "\n");
+    sgFinish(2);
   }
 }
 function allowTool() {
@@ -7924,7 +7923,8 @@ if (!REFRESH_MODE) {
             sgFinish(0);
           }
           process.stdout.write(JSON.stringify({ hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "deny", permissionDecisionReason: ghostHit } }));
-          sgFinish(0);
+          process.stderr.write(ghostHit + "\n");
+          sgFinish(2);
         }
         if (AGENT_TYPE !== "gemini-cli" && toolName === "Bash") {
           const rw = ghostListingRewrite(args, securityCfg.ghost);

package/hooks/guard.mjs

@@ -32,7 +32,7 @@ import { createHash } from 'node:crypto';
 // the installed hook self-updates when the cloud version is higher (see
 // maybeSelfUpdate). This is what makes guard fixes propagate without a manual
 // reinstall — the same trust model as the OPA WASM this hook already runs.
-const HOOK_VERSION = 41;
+const HOOK_VERSION = 42;
 
 // True when local log storage is ON. In that mode logs are kept LOCAL ONLY and
 // nothing is sent to the cloud audit log.
@@ -385,23 +385,25 @@ function blockTool(reason) {
     }));
     sgFinish(0);
   } else {
-    // Claude Code — signal the block via the JSON PreToolUse protocol on stdout,
-    // NOT exit code 2. On Windows the hook runs through PowerShell, which does not
-    // reliably propagate a native process's exit code back to Claude Code, so an
-    // `exit 2` block was being seen as a "non-blocking status code" and the tool ran
-    // anyway. Claude only processes this JSON on exit 0 (JSON is ignored if you exit
-    // 2), so we MUST exit 0 here. This is shell-independent and works everywhere.
+    // Claude Code — emit the JSON PreToolUse deny on stdout AND exit 2 (reason on
+    // stderr). Exit 2 is the ONLY block Claude Code enforces in EVERY permission
+    // mode: JSON + exit 0 goes through the NORMAL permission flow, which
+    // AUTO-ACCEPT ("auto mode") OVERRIDES — the tool then runs despite the deny
+    // (observed: a DLP-blocked Write still landed on disk in auto mode). Exit 2
+    // hard-blocks BEFORE the permission system, in every mode. The JSON on stdout
+    // stays as the Windows/PowerShell fallback (there a native exit code may not
+    // propagate reliably; Claude Code parses the JSON instead). Reason is never
+    // empty — an empty deny becomes an is_error tool_result the API rejects.
+    const msg = reason || '[SolonGate] Blocked by policy';
     process.stdout.write(JSON.stringify({
       hookSpecificOutput: {
         hookEventName: 'PreToolUse',
         permissionDecision: 'deny',
-        // Never empty: a deny with an empty reason becomes an is_error tool_result
-        // with empty content, which the API rejects and crashes the agent. Always
-        // carry a SolonGate-worded reason so the block says WHAT stopped it.
-        permissionDecisionReason: reason || '[SolonGate] Blocked by policy',
+        permissionDecisionReason: msg,
       },
     }));
-    sgFinish(0);
+    process.stderr.write(msg + '\n');
+    sgFinish(2);
   }
 }
 
@@ -1761,10 +1763,13 @@ if (!REFRESH_MODE) { try { input += readFileSync(0, 'utf-8'); } catch {} }
         } catch {}
         await maybeSelfUpdate();
         if (AGENT_TYPE === 'gemini-cli') { process.stdout.write(JSON.stringify({ decision: 'deny', reason: ghostHit })); sgFinish(0); }
-        // Claude Code: JSON deny on stdout + exit 0 (see blockTool — exit codes are
-        // not reliable through PowerShell on Windows; JSON is ignored on exit 2).
+        // Claude Code: JSON deny on stdout + exit 2 (reason on stderr). Exit 2 is
+        // the only block enforced in auto-accept mode (see blockTool); the JSON is
+        // the Windows fallback. ghostHit is a bare "No such file or directory", so
+        // the stderr text keeps the stealth (looks like the path simply isn't there).
         process.stdout.write(JSON.stringify({ hookSpecificOutput: { hookEventName: 'PreToolUse', permissionDecision: 'deny', permissionDecisionReason: ghostHit } }));
-        sgFinish(0);
+        process.stderr.write(ghostHit + '\n');
+        sgFinish(2);
       }
       // No direct hit: if this is a listing command, rewrite it so hidden
       // entries are filtered out of its output (Claude Code only).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.83",
+  "version": "0.81.85",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {