@solongate/proxy 0.82.17 → 0.82.19

package/dist/index.js

@@ -13964,6 +13964,9 @@ var init_pull_push = __esm({
 
 // src/index.ts
 init_config();
+import { readFileSync as readFileSync15 } from "fs";
+import { fileURLToPath as fileURLToPath4 } from "url";
+import { dirname as dirname4, join as join17 } from "path";
 
 // src/proxy.ts
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
@@ -16987,7 +16990,8 @@ ${msg.content.text}`;
 // src/index.ts
 init_cli_utils();
 var CLI_SUBCOMMANDS = /* @__PURE__ */ new Set(["shield", "create", "inject", "pull", "push", "list", "ls", "logs-server", "local-logs", "policy", "ratelimit", "dlp", "stats", "audit", "agents", "agent", "doctor", "watch", "keys", "mcp", "alerts", "webhooks", "dataroom"]);
-var IS_HUMAN_CLI = process.argv.length <= 2 || CLI_SUBCOMMANDS.has(process.argv[2] ?? "");
+var CLI_INFO_ARGS = /* @__PURE__ */ new Set(["login", "help", "--help", "-h", "--version", "-v", "version"]);
+var IS_HUMAN_CLI = process.argv.length <= 2 || CLI_SUBCOMMANDS.has(process.argv[2] ?? "") || CLI_INFO_ARGS.has(process.argv[2] ?? "");
 if (!IS_HUMAN_CLI) {
   console.log = (...args) => {
     process.stderr.write(`[SolonGate] ${args.map(String).join(" ")}
@@ -17002,24 +17006,76 @@ if (!IS_HUMAN_CLI) {
 `);
   };
 }
+var PKG_VERSION = (() => {
+  try {
+    const p = join17(dirname4(fileURLToPath4(import.meta.url)), "..", "package.json");
+    return JSON.parse(readFileSync15(p, "utf-8")).version || "unknown";
+  } catch {
+    return "unknown";
+  }
+})();
 function printWelcome() {
   console.log("");
-  console.log(`  ${c.bold}${c.blue4}SolonGate${c.reset} ${c.dim}\u2014 secure gateway for your AI agents${c.reset}`);
+  console.log(`  ${c.bold}${c.blue4}SolonGate${c.reset} ${c.dim}secure gateway for your AI agents${c.reset}`);
   console.log("");
   console.log("  Get started with one command:");
   console.log("");
-  console.log(`    ${c.cyan}solongate${c.reset}`);
+  console.log(`    ${c.cyan}solongate${c.reset}             ${c.dim}open the dataroom (login, policies, audit, settings)${c.reset}`);
+  console.log(`    ${c.cyan}solongate --help${c.reset}      ${c.dim}list every command${c.reset}`);
   console.log("");
-  console.log(`  ${c.dim}This opens the dataroom; log in from the Accounts panel to pair this${c.reset}`);
-  console.log(`  ${c.dim}device and protect every Claude Code session with your cloud policy.${c.reset}`);
+  console.log(`  ${c.dim}Open the dataroom, log in from the Accounts panel to pair this${c.reset}`);
+  console.log(`  ${c.dim}device, then the guard protects every AI session with your policy.${c.reset}`);
   console.log(`  ${c.dim}Manage it at ${c.reset}${c.cyan}https://dashboard.solongate.com${c.reset}`);
   console.log("");
-  console.log(`  ${c.dim}Using local log storage? Show it live in the dashboard with${c.reset}`);
-  console.log(`    ${c.cyan}solongate logs-server${c.reset}`);
+}
+function printHelp3() {
+  const row = (name, desc) => console.log(`    ${c.cyan}${name.padEnd(13)}${c.reset}${c.dim}${desc}${c.reset}`);
+  console.log("");
+  console.log(`  ${c.bold}${c.blue4}SolonGate${c.reset} ${c.dim}secure gateway for your AI agents${c.reset}`);
+  console.log("");
+  console.log(`  ${c.dim}Usage:${c.reset} ${c.cyan}solongate${c.reset} ${c.dim}[command]${c.reset}`);
+  console.log(`  ${c.dim}With no command, opens the dataroom: accounts, policies, rate limits,${c.reset}`);
+  console.log(`  ${c.dim}DLP, audit and settings in one terminal UI.${c.reset}`);
+  console.log("");
+  console.log(`  ${c.bold}Setup & status${c.reset}`);
+  row("doctor", "health check: login, active policy, guard, local logs");
+  row("create", "scaffold a guarded MCP server in the current folder");
+  row("logs-server", "serve local audit logs to the dashboard");
+  console.log("");
+  console.log(`  ${c.bold}Security config${c.reset}`);
+  row("policy", "view and manage policies");
+  row("ratelimit", "view and manage rate limits");
+  row("dlp", "view and manage DLP (secret) rules");
+  row("alerts", "view and manage alerts");
+  row("webhooks", "view and manage webhooks");
+  console.log("");
+  console.log(`  ${c.bold}Monitoring${c.reset}`);
+  row("audit", "browse the audit log of tool-call decisions");
+  row("stats", "usage statistics");
+  row("watch", "live-tail tool calls as they happen");
+  row("agents", "list agents and sessions");
+  console.log("");
+  console.log(`  ${c.bold}Advanced${c.reset}`);
+  row("keys", "manage API keys");
+  row("mcp", "manage MCP servers");
+  row("shield", "wrap a command with LLM-path secret redaction: shield -- <cmd>");
+  row("pull", "pull a cloud policy to a local file");
+  row("push", "push a local policy file to the cloud");
+  row("list", "list cloud policies");
+  console.log("");
+  console.log(`  ${c.dim}Dashboard: ${c.reset}${c.cyan}https://dashboard.solongate.com${c.reset}`);
   console.log("");
 }
 async function main4() {
   const subcommand = process.argv[2];
+  if (subcommand === "--help" || subcommand === "-h" || subcommand === "help") {
+    printHelp3();
+    return;
+  }
+  if (subcommand === "--version" || subcommand === "-v" || subcommand === "version") {
+    console.log(PKG_VERSION);
+    return;
+  }
   if (IS_HUMAN_CLI) {
     const tuiBound = subcommand === "dataroom" || process.argv.length <= 2 && process.stdout.isTTY && process.stdin.isTTY;
     if (!tuiBound) {
@@ -17054,7 +17110,7 @@ async function main4() {
   if (subcommand === "login") {
     console.log("");
     console.log(`  ${c.dim}\`solongate login\` was removed.${c.reset} Run ${c.cyan}solongate${c.reset} and add your`);
-    console.log(`  account from the Accounts panel \u2014 the guard installs and updates from there.`);
+    console.log(`  account from the Accounts panel. The guard installs and updates from there.`);
     console.log("");
     return;
   }

package/hooks/guard.bundled.mjs

@@ -6536,7 +6536,7 @@ import { resolve, join, dirname, isAbsolute } from "node:path";
 import { homedir } from "node:os";
 import { gunzipSync } from "node:zlib";
 import { createHash } from "node:crypto";
-var HOOK_VERSION = 45;
+var HOOK_VERSION = 46;
 function localLogsOnly(security) {
   if (security && typeof security === "object") {
     const l = security.localLogs;
@@ -6789,6 +6789,7 @@ if (REFRESH_MODE) {
 }
 var SG_DONE = Symbol("sg-done");
 var _sgDone = false;
+var _decisionEmitted = false;
 function sgFinish(code) {
   if (!_sgDone) {
     _sgDone = true;
@@ -6798,34 +6799,46 @@ function sgFinish(code) {
 }
 function blockTool(reason) {
   if (AGENT_TYPE === "antigravity") {
-    process.stdout.write(JSON.stringify({
-      allow_tool: false,
-      deny_reason: `[SolonGate] ${reason}`
-    }));
+    if (!_decisionEmitted) {
+      _decisionEmitted = true;
+      process.stdout.write(JSON.stringify({
+        allow_tool: false,
+        deny_reason: `[SolonGate] ${reason}`
+      }));
+    }
     sgFinish(0);
   } else {
     const msg = reason || "[SolonGate] Blocked by policy";
-    process.stdout.write(JSON.stringify({
-      hookSpecificOutput: {
-        hookEventName: "PreToolUse",
-        permissionDecision: "deny",
-        permissionDecisionReason: msg
-      }
-    }));
-    process.stderr.write(msg + "\n");
+    if (!_decisionEmitted) {
+      _decisionEmitted = true;
+      process.stdout.write(JSON.stringify({
+        hookSpecificOutput: {
+          hookEventName: "PreToolUse",
+          permissionDecision: "deny",
+          permissionDecisionReason: msg
+        }
+      }));
+      process.stderr.write(msg + "\n");
+    }
     sgFinish(2);
   }
 }
 function allowTool() {
   if (AGENT_TYPE === "antigravity") {
-    process.stdout.write(JSON.stringify({ allow_tool: true }));
+    if (!_decisionEmitted) {
+      _decisionEmitted = true;
+      process.stdout.write(JSON.stringify({ allow_tool: true }));
+    }
   }
   sgFinish(0);
 }
 function rewriteTool(updatedInput) {
-  process.stdout.write(JSON.stringify({
-    hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "allow", updatedInput }
-  }));
+  if (!_decisionEmitted) {
+    _decisionEmitted = true;
+    process.stdout.write(JSON.stringify({
+      hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "allow", updatedInput }
+    }));
+  }
   sgFinish(0);
 }
 function writeDenyFlag(toolName) {
@@ -7966,11 +7979,17 @@ if (!REFRESH_MODE) {
           }
           await maybeSelfUpdate();
           if (AGENT_TYPE === "antigravity") {
-            process.stdout.write(JSON.stringify({ allow_tool: false, deny_reason: ghostHit }));
+            if (!_decisionEmitted) {
+              _decisionEmitted = true;
+              process.stdout.write(JSON.stringify({ allow_tool: false, deny_reason: ghostHit }));
+            }
             sgFinish(0);
           }
-          process.stdout.write(JSON.stringify({ hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "deny", permissionDecisionReason: ghostHit } }));
-          process.stderr.write(ghostHit + "\n");
+          if (!_decisionEmitted) {
+            _decisionEmitted = true;
+            process.stdout.write(JSON.stringify({ hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "deny", permissionDecisionReason: ghostHit } }));
+            process.stderr.write(ghostHit + "\n");
+          }
           sgFinish(2);
         }
         if (AGENT_TYPE !== "antigravity" && toolName === "Bash") {

package/hooks/guard.mjs

@@ -32,7 +32,7 @@ import { createHash } from 'node:crypto';
 // the installed hook self-updates when the cloud version is higher (see
 // maybeSelfUpdate). This is what makes guard fixes propagate without a manual
 // reinstall — the same trust model as the OPA WASM this hook already runs.
-const HOOK_VERSION = 45;
+const HOOK_VERSION = 46;
 
 // True when local log storage is ON. In that mode logs are kept LOCAL ONLY and
 // nothing is sent to the cloud audit log.
@@ -365,6 +365,14 @@ if (REFRESH_MODE) { try { setTimeout(() => { try { process.exit(process.exitCode
 // the threadpool has drained, so exit() is safe.
 const SG_DONE = Symbol('sg-done');
 let _sgDone = false;
+// The decision JSON must be written to stdout AT MOST ONCE. The handler can reach
+// a terminal allowTool() even after a block already emitted its deny (the SG_DONE
+// unwind is swallowed on some paths), which for Claude Code was harmless
+// (allowTool writes nothing there) but for Antigravity appended a second
+// {"allow_tool":true} right after {"allow_tool":false} — agy then parsed the
+// trailing allow (or failed on the double object) and ran the blocked tool. This
+// latch guarantees the FIRST decision is the only one on stdout.
+let _decisionEmitted = false;
 // Terminate WITHOUT ever calling process.exit() on the hot path. On Windows + Node
 // 24, process.exit() called in (or right after) the same tick a cloud fetch()
 // settled aborts with `Assertion failed: !(handle->flags & UV_HANDLE_CLOSING),
@@ -384,10 +392,13 @@ function sgFinish(code) {
 
 function blockTool(reason) {
   if (AGENT_TYPE === 'antigravity') {
-    process.stdout.write(JSON.stringify({
-      allow_tool: false,
-      deny_reason: `[SolonGate] ${reason}`,
-    }));
+    if (!_decisionEmitted) {
+      _decisionEmitted = true;
+      process.stdout.write(JSON.stringify({
+        allow_tool: false,
+        deny_reason: `[SolonGate] ${reason}`,
+      }));
+    }
     sgFinish(0);
   } else {
     // Claude Code — emit the JSON PreToolUse deny on stdout AND exit 2 (reason on
@@ -400,21 +411,27 @@ function blockTool(reason) {
     // propagate reliably; Claude Code parses the JSON instead). Reason is never
     // empty — an empty deny becomes an is_error tool_result the API rejects.
     const msg = reason || '[SolonGate] Blocked by policy';
-    process.stdout.write(JSON.stringify({
-      hookSpecificOutput: {
-        hookEventName: 'PreToolUse',
-        permissionDecision: 'deny',
-        permissionDecisionReason: msg,
-      },
-    }));
-    process.stderr.write(msg + '\n');
+    if (!_decisionEmitted) {
+      _decisionEmitted = true;
+      process.stdout.write(JSON.stringify({
+        hookSpecificOutput: {
+          hookEventName: 'PreToolUse',
+          permissionDecision: 'deny',
+          permissionDecisionReason: msg,
+        },
+      }));
+      process.stderr.write(msg + '\n');
+    }
     sgFinish(2);
   }
 }
 
 function allowTool() {
   if (AGENT_TYPE === 'antigravity') {
-    process.stdout.write(JSON.stringify({ allow_tool: true }));
+    if (!_decisionEmitted) {
+      _decisionEmitted = true;
+      process.stdout.write(JSON.stringify({ allow_tool: true }));
+    }
   }
   sgFinish(0);
 }
@@ -423,9 +440,12 @@ function allowTool() {
 // ghost layer to rewrite a listing command so hidden entries are filtered out of
 // its output — the agent never sees them. Claude Code only.
 function rewriteTool(updatedInput) {
-  process.stdout.write(JSON.stringify({
-    hookSpecificOutput: { hookEventName: 'PreToolUse', permissionDecision: 'allow', updatedInput },
-  }));
+  if (!_decisionEmitted) {
+    _decisionEmitted = true;
+    process.stdout.write(JSON.stringify({
+      hookSpecificOutput: { hookEventName: 'PreToolUse', permissionDecision: 'allow', updatedInput },
+    }));
+  }
   sgFinish(0);
 }
 
@@ -1821,13 +1841,16 @@ if (!REFRESH_MODE) { try { input += readFileSync(0, 'utf-8'); } catch {} }
           });
         } catch {}
         await maybeSelfUpdate();
-        if (AGENT_TYPE === 'antigravity') { process.stdout.write(JSON.stringify({ allow_tool: false, deny_reason: ghostHit })); sgFinish(0); }
+        if (AGENT_TYPE === 'antigravity') { if (!_decisionEmitted) { _decisionEmitted = true; process.stdout.write(JSON.stringify({ allow_tool: false, deny_reason: ghostHit })); } sgFinish(0); }
         // Claude Code: JSON deny on stdout + exit 2 (reason on stderr). Exit 2 is
         // the only block enforced in auto-accept mode (see blockTool); the JSON is
         // the Windows fallback. ghostHit is a bare "No such file or directory", so
         // the stderr text keeps the stealth (looks like the path simply isn't there).
-        process.stdout.write(JSON.stringify({ hookSpecificOutput: { hookEventName: 'PreToolUse', permissionDecision: 'deny', permissionDecisionReason: ghostHit } }));
-        process.stderr.write(ghostHit + '\n');
+        if (!_decisionEmitted) {
+          _decisionEmitted = true;
+          process.stdout.write(JSON.stringify({ hookSpecificOutput: { hookEventName: 'PreToolUse', permissionDecision: 'deny', permissionDecisionReason: ghostHit } }));
+          process.stderr.write(ghostHit + '\n');
+        }
         sgFinish(2);
       }
       // No direct hit: if this is a listing command, rewrite it so hidden

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.82.17",
+  "version": "0.82.19",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {