@solongate/proxy 0.82.89 → 0.82.90

package/dist/api-client/client.d.ts

@@ -28,6 +28,8 @@ export declare const GUEST_EMAIL_SUFFIX = "@anonymous.solongate.invalid";
  * way the dashboard does rather than half-working here.
  */
 export declare function isGuestAccount(): boolean;
+/** The key this device enforces with, or null when it is not paired. */
+export declare function enforcingKey(): string | null;
 /** True when the given key is the ACTIVE one the guard hooks use. */
 export declare function isActiveAccount(apiKey: string): boolean;
 /**

package/dist/commands/index.js

@@ -1182,6 +1182,7 @@ import { join as join4 } from "path";
 // src/tui/local-log.ts
 import { closeSync, existsSync as existsSync3, openSync, readdirSync, readFileSync as readFileSync4, readSync, statSync, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir3 } from "os";
+import { createHash } from "crypto";
 import { isAbsolute, join as join3 } from "path";
 var DEFAULT_LOCAL_LOG = join3(homedir3(), ".solongate", "local-logs", "solongate-audit.jsonl");
 function localLogFile() {

package/dist/index.js

@@ -7404,6 +7404,7 @@ var init_components = __esm({
 // src/tui/local-log.ts
 import { closeSync, existsSync as existsSync4, openSync as openSync3, readdirSync, readFileSync as readFileSync8, readSync, statSync, writeFileSync as writeFileSync6 } from "fs";
 import { homedir as homedir6 } from "os";
+import { createHash as createHash2 } from "crypto";
 import { isAbsolute, join as join8 } from "path";
 function localLogFile() {
   try {
@@ -7435,6 +7436,30 @@ function localLogFile() {
   }
   return DEFAULT_LOCAL_LOG;
 }
+function ensureLocalLogOwner(activeApiKey) {
+  try {
+    const marker = join8(homedir6(), ".solongate", "local-logs", ".owner");
+    const want = activeApiKey ? createHash2("sha256").update(activeApiKey).digest("hex").slice(0, 16) : "";
+    let have = "";
+    try {
+      have = readFileSync8(marker, "utf-8").trim();
+    } catch {
+    }
+    if (have === want) return false;
+    const cleared = have !== "" && localLogExists();
+    if (cleared) clearLocalLog();
+    try {
+      writeFileSync6(marker, want);
+    } catch {
+    }
+    return cleared;
+  } catch {
+    return false;
+  }
+}
+function localLogExists() {
+  return existsSync4(localLogFile());
+}
 function tailLines(file, maxBytes = 131072) {
   try {
     const size = statSync(file).size;
@@ -7526,6 +7551,7 @@ __export(client_exports, {
   GuestReadOnlyError: () => GuestReadOnlyError,
   NotAuthenticatedError: () => NotAuthenticatedError,
   clearActiveCredential: () => clearActiveCredential,
+  enforcingKey: () => enforcingKey,
   isActiveAccount: () => isActiveAccount,
   isAuthenticated: () => isAuthenticated,
   isGuestAccount: () => isGuestAccount,
@@ -7597,6 +7623,9 @@ function isGuestAccount() {
     return false;
   }
 }
+function enforcingKey() {
+  return loginCredentialFile().apiKey ?? null;
+}
 function isActiveAccount(apiKey) {
   return loginCredentialFile().apiKey === apiKey;
 }
@@ -12238,6 +12267,12 @@ function App() {
     setViewKey(next?.apiKey);
     setViewNonce((n) => n + 1);
   };
+  useEffect8(() => {
+    try {
+      ensureLocalLogOwner(enforcingKey());
+    } catch {
+    }
+  }, [accounts.length]);
   const locked = accounts.length === 0;
   const effectiveSection = locked ? SETTINGS_SECTION : section;
   useInput8((input, key) => {
@@ -12329,6 +12364,7 @@ var init_App = __esm({
     init_nav();
     init_client();
     init_api_client();
+    init_local_log();
     init_self_update();
     SECTIONS = [
       { label: "Live", Panel: LiveHint },

package/dist/tui/index.js

@@ -738,6 +738,7 @@ import { join as join5 } from "path";
 // src/tui/local-log.ts
 import { closeSync, existsSync, openSync, readdirSync, readFileSync as readFileSync2, readSync, statSync, writeFileSync } from "fs";
 import { homedir as homedir2 } from "os";
+import { createHash } from "crypto";
 import { isAbsolute, join as join2 } from "path";
 var DEFAULT_LOCAL_LOG = join2(homedir2(), ".solongate", "local-logs", "solongate-audit.jsonl");
 function localLogFile() {
@@ -771,6 +772,30 @@ function localLogFile() {
   return DEFAULT_LOCAL_LOG;
 }
 var LOCAL_LOG = localLogFile();
+function ensureLocalLogOwner(activeApiKey) {
+  try {
+    const marker = join2(homedir2(), ".solongate", "local-logs", ".owner");
+    const want = activeApiKey ? createHash("sha256").update(activeApiKey).digest("hex").slice(0, 16) : "";
+    let have = "";
+    try {
+      have = readFileSync2(marker, "utf-8").trim();
+    } catch {
+    }
+    if (have === want) return false;
+    const cleared = have !== "" && localLogExists();
+    if (cleared) clearLocalLog();
+    try {
+      writeFileSync(marker, want);
+    } catch {
+    }
+    return cleared;
+  } catch {
+    return false;
+  }
+}
+function localLogExists() {
+  return existsSync(localLogFile());
+}
 function tailLines(file, maxBytes = 131072) {
   try {
     const size = statSync(file).size;
@@ -914,6 +939,9 @@ function isGuestAccount() {
     return false;
   }
 }
+function enforcingKey() {
+  return loginCredentialFile().apiKey ?? null;
+}
 function isActiveAccount(apiKey) {
   return loginCredentialFile().apiKey === apiKey;
 }
@@ -5411,6 +5439,12 @@ function App() {
     setViewKey(next?.apiKey);
     setViewNonce((n) => n + 1);
   };
+  useEffect8(() => {
+    try {
+      ensureLocalLogOwner(enforcingKey());
+    } catch {
+    }
+  }, [accounts.length]);
   const locked = accounts.length === 0;
   const effectiveSection = locked ? SETTINGS_SECTION : section;
   useInput8((input, key) => {

package/dist/tui/local-log.d.ts

@@ -23,6 +23,18 @@ export declare function localLogFile(): string;
 export declare const LOCAL_LOG: string;
 /** True when the resolved file exists — viewers use it to say "no entries yet"
  *  instead of pointing at a path that was never written. */
+/**
+ * Make sure the local log belongs to the account now in use.
+ *
+ * The file is one per machine and no entry records which account produced it,
+ * so after pairing a different account the previous one's calls were still
+ * sitting in Live. Clearing on an in-app account switch was not enough: the
+ * account can change by pairing a new device, by signing out, or from the
+ * dashboard. A marker beside the log records whose it is (a hash, never the
+ * key itself); when that stops matching, the file is not ours and is started
+ * over. Returns true when it cleared.
+ */
+export declare function ensureLocalLogOwner(activeApiKey: string | null | undefined): boolean;
 export declare function localLogExists(): boolean;
 /** Read the last `maxBytes` of a file as complete lines (first partial dropped). */
 export declare function tailLines(file: string, maxBytes?: number): string[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.82.89",
+  "version": "0.82.90",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {