@solongate/proxy 0.82.10 → 0.82.11

package/dist/global-install.d.ts

@@ -5,9 +5,12 @@ export declare function globalPaths(): {
     sgDir: string;
     hooksDir: string;
     claudeDir: string;
+    geminiDir: string;
     settingsPath: string;
     backupPath: string;
     configPath: string;
+    geminiSettingsPath: string;
+    geminiBackupPath: string;
 };
 export declare function clearGuardUpdateCheck(): boolean;
 export declare function runGlobalRestore(): void;

package/dist/global-install.js

@@ -71,7 +71,8 @@ function protectedTargets() {
     join(p.hooksDir, "stop.mjs"),
     join(p.hooksDir, "shield.mjs"),
     p.configPath,
-    p.settingsPath
+    p.settingsPath,
+    p.geminiSettingsPath
   ];
 }
 function lockProtected() {
@@ -85,14 +86,21 @@ function globalPaths() {
   const sgDir = join(home, ".solongate");
   const hooksDir = join(sgDir, "hooks");
   const claudeDir = join(home, ".claude");
+  const geminiDir = join(home, ".gemini");
   return {
     home,
     sgDir,
     hooksDir,
     claudeDir,
+    geminiDir,
     settingsPath: join(claudeDir, "settings.json"),
     backupPath: join(claudeDir, "settings.solongate.bak"),
-    configPath: join(sgDir, "cloud-guard.json")
+    configPath: join(sgDir, "cloud-guard.json"),
+    // Gemini CLI reads hooks from ~/.gemini/settings.json (user-level). Only the
+    // guard is registered there (BeforeTool); Gemini's ALLOW-path audit is
+    // covered by the passive session-log collector (~/.gemini/tmp), not a hook.
+    geminiSettingsPath: join(geminiDir, "settings.json"),
+    geminiBackupPath: join(geminiDir, "settings.solongate.bak")
   };
 }
 function clearGuardUpdateCheck() {
@@ -110,6 +118,50 @@ function readGuard() {
   const bundled = join(HOOKS_DIR, "guard.bundled.mjs");
   return existsSync(bundled) ? readFileSync(bundled, "utf-8") : readHook("guard.mjs");
 }
+function geminiHookCommand(guardAbs) {
+  const nodeBin = process.execPath.replace(/\\/g, "/");
+  const call = process.platform === "win32" ? "& " : "";
+  return `${call}"${nodeBin}" "${guardAbs.replace(/\\/g, "/")}" gemini-cli "Gemini CLI"`;
+}
+function installGeminiGuard(p, guardAbs) {
+  mkdirSync(p.geminiDir, { recursive: true });
+  let existing = {};
+  if (existsSync(p.geminiSettingsPath)) {
+    const raw = readFileSync(p.geminiSettingsPath, "utf-8");
+    if (!existsSync(p.geminiBackupPath)) writeFileSync(p.geminiBackupPath, raw);
+    try {
+      existing = JSON.parse(raw);
+    } catch {
+      existing = {};
+    }
+  }
+  const existingHooks = existing.hooks && typeof existing.hooks === "object" ? existing.hooks : {};
+  const merged = {
+    ...existing,
+    hooks: {
+      ...existingHooks,
+      BeforeTool: [{ matcher: "", hooks: [{ type: "command", command: geminiHookCommand(guardAbs) }] }]
+    }
+  };
+  writeFileSync(p.geminiSettingsPath, JSON.stringify(merged, null, 2) + "\n");
+}
+function removeGeminiGuard(p) {
+  if (!existsSync(p.geminiSettingsPath)) return;
+  try {
+    const s = JSON.parse(readFileSync(p.geminiSettingsPath, "utf-8"));
+    const hooks = s.hooks && typeof s.hooks === "object" ? s.hooks : null;
+    if (!hooks || !Array.isArray(hooks.BeforeTool)) return;
+    const kept = hooks.BeforeTool.filter((entry) => {
+      const inner = Array.isArray(entry?.hooks) ? entry.hooks : [];
+      return !inner.some((h) => typeof h?.command === "string" && h.command.includes(".solongate"));
+    });
+    if (kept.length) hooks.BeforeTool = kept;
+    else delete hooks.BeforeTool;
+    if (Object.keys(hooks).length === 0) delete s.hooks;
+    writeFileSync(p.geminiSettingsPath, JSON.stringify(s, null, 2) + "\n");
+  } catch {
+  }
+}
 function ask(question) {
   const rl = createInterface({ input: process.stdin, output: process.stderr });
   return new Promise((res) => rl.question(question, (a) => {
@@ -121,6 +173,7 @@ function runGlobalRestore() {
   const p = globalPaths();
   unlockProtected();
   removeClaudeShim();
+  removeGeminiGuard(p);
   if (existsSync(p.backupPath)) {
     writeFileSync(p.settingsPath, readFileSync(p.backupPath, "utf-8"));
     console.log(`  Restored ${p.settingsPath} from backup.`);
@@ -179,6 +232,10 @@ function installGlobalQuiet() {
       }
     };
     writeFileSync(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
+    try {
+      installGeminiGuard(p, join(p.hooksDir, "guard.mjs").replace(/\\/g, "/"));
+    } catch {
+    }
     if (process.env["SOLONGATE_OS_LOCK"] === "1") lockProtected();
     return { ok: true, message: "guard installed (open a new session)" };
   } catch (e) {
@@ -218,6 +275,10 @@ function uninstallGlobalQuiet() {
     const p = globalPaths();
     unlockProtected();
     removeClaudeShim();
+    try {
+      removeGeminiGuard(p);
+    } catch {
+    }
     if (!existsSync(p.settingsPath)) return { ok: true, message: "guard removed (open a new session)" };
     const s = JSON.parse(readFileSync(p.settingsPath, "utf-8"));
     delete s.hooks;
@@ -356,6 +417,11 @@ async function runGlobalInstall(opts = {}) {
   };
   writeFileSync(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
   console.log(`  Registered global hooks \u2192 ${p.settingsPath}`);
+  try {
+    installGeminiGuard(p, guardAbs);
+    console.log(`  Registered Gemini CLI guard \u2192 ${p.geminiSettingsPath}`);
+  } catch {
+  }
   if (process.env["SOLONGATE_OS_LOCK"] === "1") {
     lockProtected();
     console.log("  Locked protection files (OS-level read-only/immutable).");

package/dist/index.js

@@ -10210,7 +10210,8 @@ function protectedTargets() {
     join11(p.hooksDir, "stop.mjs"),
     join11(p.hooksDir, "shield.mjs"),
     p.configPath,
-    p.settingsPath
+    p.settingsPath,
+    p.geminiSettingsPath
   ];
 }
 function lockProtected() {
@@ -10224,14 +10225,21 @@ function globalPaths() {
   const sgDir = join11(home, ".solongate");
   const hooksDir = join11(sgDir, "hooks");
   const claudeDir = join11(home, ".claude");
+  const geminiDir = join11(home, ".gemini");
   return {
     home,
     sgDir,
     hooksDir,
     claudeDir,
+    geminiDir,
     settingsPath: join11(claudeDir, "settings.json"),
     backupPath: join11(claudeDir, "settings.solongate.bak"),
-    configPath: join11(sgDir, "cloud-guard.json")
+    configPath: join11(sgDir, "cloud-guard.json"),
+    // Gemini CLI reads hooks from ~/.gemini/settings.json (user-level). Only the
+    // guard is registered there (BeforeTool); Gemini's ALLOW-path audit is
+    // covered by the passive session-log collector (~/.gemini/tmp), not a hook.
+    geminiSettingsPath: join11(geminiDir, "settings.json"),
+    geminiBackupPath: join11(geminiDir, "settings.solongate.bak")
   };
 }
 function readHook(filename) {
@@ -10241,6 +10249,50 @@ function readGuard() {
   const bundled = join11(HOOKS_DIR, "guard.bundled.mjs");
   return existsSync4(bundled) ? readFileSync9(bundled, "utf-8") : readHook("guard.mjs");
 }
+function geminiHookCommand(guardAbs) {
+  const nodeBin = process.execPath.replace(/\\/g, "/");
+  const call = process.platform === "win32" ? "& " : "";
+  return `${call}"${nodeBin}" "${guardAbs.replace(/\\/g, "/")}" gemini-cli "Gemini CLI"`;
+}
+function installGeminiGuard(p, guardAbs) {
+  mkdirSync8(p.geminiDir, { recursive: true });
+  let existing = {};
+  if (existsSync4(p.geminiSettingsPath)) {
+    const raw = readFileSync9(p.geminiSettingsPath, "utf-8");
+    if (!existsSync4(p.geminiBackupPath)) writeFileSync9(p.geminiBackupPath, raw);
+    try {
+      existing = JSON.parse(raw);
+    } catch {
+      existing = {};
+    }
+  }
+  const existingHooks = existing.hooks && typeof existing.hooks === "object" ? existing.hooks : {};
+  const merged = {
+    ...existing,
+    hooks: {
+      ...existingHooks,
+      BeforeTool: [{ matcher: "", hooks: [{ type: "command", command: geminiHookCommand(guardAbs) }] }]
+    }
+  };
+  writeFileSync9(p.geminiSettingsPath, JSON.stringify(merged, null, 2) + "\n");
+}
+function removeGeminiGuard(p) {
+  if (!existsSync4(p.geminiSettingsPath)) return;
+  try {
+    const s = JSON.parse(readFileSync9(p.geminiSettingsPath, "utf-8"));
+    const hooks = s.hooks && typeof s.hooks === "object" ? s.hooks : null;
+    if (!hooks || !Array.isArray(hooks.BeforeTool)) return;
+    const kept = hooks.BeforeTool.filter((entry) => {
+      const inner = Array.isArray(entry?.hooks) ? entry.hooks : [];
+      return !inner.some((h) => typeof h?.command === "string" && h.command.includes(".solongate"));
+    });
+    if (kept.length) hooks.BeforeTool = kept;
+    else delete hooks.BeforeTool;
+    if (Object.keys(hooks).length === 0) delete s.hooks;
+    writeFileSync9(p.geminiSettingsPath, JSON.stringify(s, null, 2) + "\n");
+  } catch {
+  }
+}
 function installGlobalQuiet() {
   try {
     const p = globalPaths();
@@ -10283,6 +10335,10 @@ function installGlobalQuiet() {
       }
     };
     writeFileSync9(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
+    try {
+      installGeminiGuard(p, join11(p.hooksDir, "guard.mjs").replace(/\\/g, "/"));
+    } catch {
+    }
     if (process.env["SOLONGATE_OS_LOCK"] === "1") lockProtected();
     return { ok: true, message: "guard installed (open a new session)" };
   } catch (e) {
@@ -10322,6 +10378,10 @@ function uninstallGlobalQuiet() {
     const p = globalPaths();
     unlockProtected();
     removeClaudeShim();
+    try {
+      removeGeminiGuard(p);
+    } catch {
+    }
     if (!existsSync4(p.settingsPath)) return { ok: true, message: "guard removed (open a new session)" };
     const s = JSON.parse(readFileSync9(p.settingsPath, "utf-8"));
     delete s.hooks;

package/dist/login.js

@@ -98,7 +98,8 @@ function protectedTargets() {
     join(p.hooksDir, "stop.mjs"),
     join(p.hooksDir, "shield.mjs"),
     p.configPath,
-    p.settingsPath
+    p.settingsPath,
+    p.geminiSettingsPath
   ];
 }
 function lockProtected() {
@@ -112,14 +113,21 @@ function globalPaths() {
   const sgDir = join(home, ".solongate");
   const hooksDir = join(sgDir, "hooks");
   const claudeDir = join(home, ".claude");
+  const geminiDir = join(home, ".gemini");
   return {
     home,
     sgDir,
     hooksDir,
     claudeDir,
+    geminiDir,
     settingsPath: join(claudeDir, "settings.json"),
     backupPath: join(claudeDir, "settings.solongate.bak"),
-    configPath: join(sgDir, "cloud-guard.json")
+    configPath: join(sgDir, "cloud-guard.json"),
+    // Gemini CLI reads hooks from ~/.gemini/settings.json (user-level). Only the
+    // guard is registered there (BeforeTool); Gemini's ALLOW-path audit is
+    // covered by the passive session-log collector (~/.gemini/tmp), not a hook.
+    geminiSettingsPath: join(geminiDir, "settings.json"),
+    geminiBackupPath: join(geminiDir, "settings.solongate.bak")
   };
 }
 function readHook(filename) {
@@ -129,6 +137,33 @@ function readGuard() {
   const bundled = join(HOOKS_DIR, "guard.bundled.mjs");
   return existsSync(bundled) ? readFileSync(bundled, "utf-8") : readHook("guard.mjs");
 }
+function geminiHookCommand(guardAbs) {
+  const nodeBin = process.execPath.replace(/\\/g, "/");
+  const call = process.platform === "win32" ? "& " : "";
+  return `${call}"${nodeBin}" "${guardAbs.replace(/\\/g, "/")}" gemini-cli "Gemini CLI"`;
+}
+function installGeminiGuard(p, guardAbs) {
+  mkdirSync(p.geminiDir, { recursive: true });
+  let existing = {};
+  if (existsSync(p.geminiSettingsPath)) {
+    const raw = readFileSync(p.geminiSettingsPath, "utf-8");
+    if (!existsSync(p.geminiBackupPath)) writeFileSync(p.geminiBackupPath, raw);
+    try {
+      existing = JSON.parse(raw);
+    } catch {
+      existing = {};
+    }
+  }
+  const existingHooks = existing.hooks && typeof existing.hooks === "object" ? existing.hooks : {};
+  const merged = {
+    ...existing,
+    hooks: {
+      ...existingHooks,
+      BeforeTool: [{ matcher: "", hooks: [{ type: "command", command: geminiHookCommand(guardAbs) }] }]
+    }
+  };
+  writeFileSync(p.geminiSettingsPath, JSON.stringify(merged, null, 2) + "\n");
+}
 function ask(question) {
   const rl = createInterface({ input: process.stdin, output: process.stderr });
   return new Promise((res) => rl.question(question, (a) => {
@@ -257,6 +292,11 @@ async function runGlobalInstall(opts = {}) {
   };
   writeFileSync(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
   console.log(`  Registered global hooks \u2192 ${p.settingsPath}`);
+  try {
+    installGeminiGuard(p, guardAbs);
+    console.log(`  Registered Gemini CLI guard \u2192 ${p.geminiSettingsPath}`);
+  } catch {
+  }
   if (process.env["SOLONGATE_OS_LOCK"] === "1") {
     lockProtected();
     console.log("  Locked protection files (OS-level read-only/immutable).");

package/dist/tui/index.js

@@ -3268,7 +3268,8 @@ function protectedTargets() {
     join6(p.hooksDir, "stop.mjs"),
     join6(p.hooksDir, "shield.mjs"),
     p.configPath,
-    p.settingsPath
+    p.settingsPath,
+    p.geminiSettingsPath
   ];
 }
 function lockProtected() {
@@ -3282,14 +3283,21 @@ function globalPaths() {
   const sgDir = join6(home, ".solongate");
   const hooksDir = join6(sgDir, "hooks");
   const claudeDir = join6(home, ".claude");
+  const geminiDir = join6(home, ".gemini");
   return {
     home,
     sgDir,
     hooksDir,
     claudeDir,
+    geminiDir,
     settingsPath: join6(claudeDir, "settings.json"),
     backupPath: join6(claudeDir, "settings.solongate.bak"),
-    configPath: join6(sgDir, "cloud-guard.json")
+    configPath: join6(sgDir, "cloud-guard.json"),
+    // Gemini CLI reads hooks from ~/.gemini/settings.json (user-level). Only the
+    // guard is registered there (BeforeTool); Gemini's ALLOW-path audit is
+    // covered by the passive session-log collector (~/.gemini/tmp), not a hook.
+    geminiSettingsPath: join6(geminiDir, "settings.json"),
+    geminiBackupPath: join6(geminiDir, "settings.solongate.bak")
   };
 }
 function readHook(filename) {
@@ -3299,6 +3307,50 @@ function readGuard() {
   const bundled = join6(HOOKS_DIR, "guard.bundled.mjs");
   return existsSync2(bundled) ? readFileSync4(bundled, "utf-8") : readHook("guard.mjs");
 }
+function geminiHookCommand(guardAbs) {
+  const nodeBin = process.execPath.replace(/\\/g, "/");
+  const call = process.platform === "win32" ? "& " : "";
+  return `${call}"${nodeBin}" "${guardAbs.replace(/\\/g, "/")}" gemini-cli "Gemini CLI"`;
+}
+function installGeminiGuard(p, guardAbs) {
+  mkdirSync4(p.geminiDir, { recursive: true });
+  let existing = {};
+  if (existsSync2(p.geminiSettingsPath)) {
+    const raw = readFileSync4(p.geminiSettingsPath, "utf-8");
+    if (!existsSync2(p.geminiBackupPath)) writeFileSync5(p.geminiBackupPath, raw);
+    try {
+      existing = JSON.parse(raw);
+    } catch {
+      existing = {};
+    }
+  }
+  const existingHooks = existing.hooks && typeof existing.hooks === "object" ? existing.hooks : {};
+  const merged = {
+    ...existing,
+    hooks: {
+      ...existingHooks,
+      BeforeTool: [{ matcher: "", hooks: [{ type: "command", command: geminiHookCommand(guardAbs) }] }]
+    }
+  };
+  writeFileSync5(p.geminiSettingsPath, JSON.stringify(merged, null, 2) + "\n");
+}
+function removeGeminiGuard(p) {
+  if (!existsSync2(p.geminiSettingsPath)) return;
+  try {
+    const s = JSON.parse(readFileSync4(p.geminiSettingsPath, "utf-8"));
+    const hooks = s.hooks && typeof s.hooks === "object" ? s.hooks : null;
+    if (!hooks || !Array.isArray(hooks.BeforeTool)) return;
+    const kept = hooks.BeforeTool.filter((entry) => {
+      const inner = Array.isArray(entry?.hooks) ? entry.hooks : [];
+      return !inner.some((h) => typeof h?.command === "string" && h.command.includes(".solongate"));
+    });
+    if (kept.length) hooks.BeforeTool = kept;
+    else delete hooks.BeforeTool;
+    if (Object.keys(hooks).length === 0) delete s.hooks;
+    writeFileSync5(p.geminiSettingsPath, JSON.stringify(s, null, 2) + "\n");
+  } catch {
+  }
+}
 function installGlobalQuiet() {
   try {
     const p = globalPaths();
@@ -3341,6 +3393,10 @@ function installGlobalQuiet() {
       }
     };
     writeFileSync5(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
+    try {
+      installGeminiGuard(p, join6(p.hooksDir, "guard.mjs").replace(/\\/g, "/"));
+    } catch {
+    }
     if (process.env["SOLONGATE_OS_LOCK"] === "1") lockProtected();
     return { ok: true, message: "guard installed (open a new session)" };
   } catch (e) {
@@ -3380,6 +3436,10 @@ function uninstallGlobalQuiet() {
     const p = globalPaths();
     unlockProtected();
     removeClaudeShim();
+    try {
+      removeGeminiGuard(p);
+    } catch {
+    }
     if (!existsSync2(p.settingsPath)) return { ok: true, message: "guard removed (open a new session)" };
     const s = JSON.parse(readFileSync4(p.settingsPath, "utf-8"));
     delete s.hooks;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.82.10",
+  "version": "0.82.11",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {