@solongate/proxy 0.82.87 → 0.82.88

package/dist/api-client/client.d.ts

@@ -18,6 +18,16 @@ export declare function saveAccount(acc: SavedAccount): void;
 /** Remove a saved account from this device (does NOT revoke the cloud key). */
 export declare function removeAccount(apiKey: string): void;
 export declare function setViewCredentials(creds: Credentials | null): void;
+/** The unroutable address a guest ("Skip for now") account is stored under. */
+export declare const GUEST_EMAIL_SUFFIX = "@anonymous.solongate.invalid";
+/**
+ * True when the account this device is enforcing with is a guest one.
+ *
+ * A guest has no dashboard rights beyond reading, and the CLI is the same
+ * account reached a different way, so the management commands answer the same
+ * way the dashboard does rather than half-working here.
+ */
+export declare function isGuestAccount(): boolean;
 /** True when the given key is the ACTIVE one the guard hooks use. */
 export declare function isActiveAccount(apiKey: string): boolean;
 /**

package/dist/index.js

@@ -7518,6 +7518,24 @@ var init_local_log = __esm({
 });
 
 // src/api-client/client.ts
+var client_exports = {};
+__export(client_exports, {
+  ApiError: () => ApiError,
+  DEFAULT_API_URL: () => DEFAULT_API_URL2,
+  GUEST_EMAIL_SUFFIX: () => GUEST_EMAIL_SUFFIX,
+  NotAuthenticatedError: () => NotAuthenticatedError,
+  clearActiveCredential: () => clearActiveCredential,
+  isActiveAccount: () => isActiveAccount,
+  isAuthenticated: () => isAuthenticated,
+  isGuestAccount: () => isGuestAccount,
+  listAccounts: () => listAccounts,
+  removeAccount: () => removeAccount,
+  request: () => request,
+  resolveCredentials: () => resolveCredentials,
+  saveAccount: () => saveAccount,
+  setActiveAccount: () => setActiveAccount,
+  setViewCredentials: () => setViewCredentials
+});
 import { readFileSync as readFileSync9, writeFileSync as writeFileSync7, mkdirSync as mkdirSync6, existsSync as existsSync5 } from "fs";
 import { resolve as resolve4, join as join9 } from "path";
 import { homedir as homedir7 } from "os";
@@ -7569,6 +7587,15 @@ function setViewCredentials(creds) {
   viewOverride = creds;
   cached2 = null;
 }
+function isGuestAccount() {
+  try {
+    const active2 = loginCredentialFile().apiKey;
+    if (!active2) return false;
+    return listAccounts().some((a) => a.apiKey === active2 && (a.email ?? "").endsWith(GUEST_EMAIL_SUFFIX));
+  } catch {
+    return false;
+  }
+}
 function isActiveAccount(apiKey) {
   return loginCredentialFile().apiKey === apiKey;
 }
@@ -7723,7 +7750,7 @@ async function request(method, path, opts = {}) {
   }
   return json;
 }
-var DEFAULT_API_URL2, accountsFile, viewOverride, ApiError, NotAuthenticatedError, cached2;
+var DEFAULT_API_URL2, accountsFile, viewOverride, GUEST_EMAIL_SUFFIX, ApiError, NotAuthenticatedError, cached2;
 var init_client = __esm({
   "src/api-client/client.ts"() {
     "use strict";
@@ -7731,6 +7758,7 @@ var init_client = __esm({
     DEFAULT_API_URL2 = "https://api.solongate.com";
     accountsFile = () => join9(homedir7(), ".solongate", "accounts.json");
     viewOverride = null;
+    GUEST_EMAIL_SUFFIX = "@anonymous.solongate.invalid";
     ApiError = class extends Error {
       status;
       code;
@@ -12161,9 +12189,9 @@ function App() {
   const acctIdx = Math.max(0, accounts.findIndex((a) => a.apiKey === viewKey));
   const cur = accounts[acctIdx];
   const rawEmail = cur?.email ?? "";
-  const isGuestAccount = rawEmail.endsWith("@anonymous.solongate.invalid");
+  const isGuestAccount2 = rawEmail.endsWith("@anonymous.solongate.invalid");
   const hasKey = isAuthenticated();
-  const acctLabel2 = !cur ? "not logged in" : !hasKey ? "signed out" : isGuestAccount ? "Anonymous" : rawEmail || cur.user || cur.project || `account \u2026${cur.apiKey.slice(-4)}`;
+  const acctLabel2 = !cur ? "not logged in" : !hasKey ? "signed out" : isGuestAccount2 ? "Anonymous" : rawEmail || cur.user || cur.project || `account \u2026${cur.apiKey.slice(-4)}`;
   useEffect8(() => {
     if (!cur || cur.email) return;
     let alive = true;
@@ -17003,6 +17031,13 @@ async function main() {
   }
   const MGMT_COMMANDS = /* @__PURE__ */ new Set(["policy", "ratelimit", "dlp", "stats", "audit", "sessions", "session", "doctor", "watch", "alerts", "webhooks"]);
   if (MGMT_COMMANDS.has(subcommand ?? "")) {
+    const { isGuestAccount: isGuestAccount2 } = await Promise.resolve().then(() => (init_client(), client_exports));
+    if (subcommand !== "doctor" && isGuestAccount2()) {
+      process.stderr.write(
+        "\n  This is a guest account, which can look but not change.\n  Create an account to use the management commands:\n    https://auth.solongate.com\n\n  Your project, its policy and everything already recorded carry over,\n  and this device keeps working without being paired again.\n\n"
+      );
+      process.exit(1);
+    }
     const { runCommand: runCommand2 } = await Promise.resolve().then(() => (init_commands(), commands_exports));
     const code = await runCommand2(subcommand, process.argv.slice(3));
     process.exit(code);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.82.87",
+  "version": "0.82.88",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {