@solongate/proxy 0.83.0 → 0.83.2

package/dist/api-client/auth.d.ts

@@ -8,5 +8,13 @@ export interface Me {
         name?: string;
         slug?: string;
     } | null;
+    /**
+     * Present only for a guest account, and carrying only whether the allowance is
+     * spent. The size of it and how much is left are the operator's numbers and
+     * are not sent here.
+     */
+    guest?: {
+        exhausted?: boolean;
+    } | null;
 }
 export declare function me(): Promise<Me>;

package/dist/index.js

@@ -12288,6 +12288,21 @@ function App() {
   const rawEmail = cur?.email ?? "";
   const isGuestAccount2 = rawEmail.endsWith("@anonymous.solongate.invalid");
   const acctLabel2 = !cur ? "not logged in" : isGuestAccount2 ? "Anonymous" : rawEmail || cur.user || cur.project || `account \u2026${cur.apiKey.slice(-4)}`;
+  const [guestSpent, setGuestSpent] = useState9(false);
+  useEffect8(() => {
+    if (!isGuestAccount2) {
+      setGuestSpent(false);
+      return;
+    }
+    let alive = true;
+    api.auth.me().then((r) => {
+      if (alive) setGuestSpent(r.guest?.exhausted === true);
+    }).catch(() => {
+    });
+    return () => {
+      alive = false;
+    };
+  }, [isGuestAccount2, cur?.apiKey]);
   useEffect8(() => {
     if (!cur || cur.email) return;
     let alive = true;
@@ -12373,8 +12388,13 @@ function App() {
       /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
         /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "account: " }),
         /* @__PURE__ */ jsx9(Text9, { color: locked ? theme.warn : theme.accentBright, bold: true, children: acctLabel2 }),
-        locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Settings to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Settings to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Settings to add another" }),
-        update2.kind === "updating" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 updating to v${update2.version}\u2026` }) : update2.kind === "updated" ? /* @__PURE__ */ jsx9(Text9, { color: theme.ok, bold: true, children: `  \u2191 v${update2.version} installed \u2014 restart (q, then solongate) to apply` }) : null
+        locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Settings to unlock the dataroom" }) : guestSpent ? (
+          // Said on this line rather than on a new one: every panel budgets its
+          // height against a fixed shell, so one more line up here silently clips
+          // a row off whichever panel is open.
+          /* @__PURE__ */ jsx9(Text9, { color: theme.bad, bold: true, children: "  \xB7 allowance used up \xB7 every call denied \xB7 create an account to carry on" })
+        ) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Settings to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Settings to add another" }),
+        update2.kind === "updating" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 updating to v${update2.version}\u2026` }) : update2.kind === "updated" ? /* @__PURE__ */ jsx9(Text9, { color: theme.ok, bold: true, children: `  \u2191 v${update2.version} installed \xB7 restart (q, then solongate) to apply` }) : null
       ] }),
       /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexGrow: 1, children: [
         /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", flexShrink: 0, width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {

package/dist/tui/index.js

@@ -5460,6 +5460,21 @@ function App() {
   const rawEmail = cur?.email ?? "";
   const isGuestAccount2 = rawEmail.endsWith("@anonymous.solongate.invalid");
   const acctLabel2 = !cur ? "not logged in" : isGuestAccount2 ? "Anonymous" : rawEmail || cur.user || cur.project || `account \u2026${cur.apiKey.slice(-4)}`;
+  const [guestSpent, setGuestSpent] = useState9(false);
+  useEffect8(() => {
+    if (!isGuestAccount2) {
+      setGuestSpent(false);
+      return;
+    }
+    let alive = true;
+    api.auth.me().then((r) => {
+      if (alive) setGuestSpent(r.guest?.exhausted === true);
+    }).catch(() => {
+    });
+    return () => {
+      alive = false;
+    };
+  }, [isGuestAccount2, cur?.apiKey]);
   useEffect8(() => {
     if (!cur || cur.email) return;
     let alive = true;
@@ -5545,8 +5560,13 @@ function App() {
       /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
         /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "account: " }),
         /* @__PURE__ */ jsx9(Text9, { color: locked ? theme.warn : theme.accentBright, bold: true, children: acctLabel2 }),
-        locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Settings to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Settings to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Settings to add another" }),
-        update2.kind === "updating" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 updating to v${update2.version}\u2026` }) : update2.kind === "updated" ? /* @__PURE__ */ jsx9(Text9, { color: theme.ok, bold: true, children: `  \u2191 v${update2.version} installed \u2014 restart (q, then solongate) to apply` }) : null
+        locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Settings to unlock the dataroom" }) : guestSpent ? (
+          // Said on this line rather than on a new one: every panel budgets its
+          // height against a fixed shell, so one more line up here silently clips
+          // a row off whichever panel is open.
+          /* @__PURE__ */ jsx9(Text9, { color: theme.bad, bold: true, children: "  \xB7 allowance used up \xB7 every call denied \xB7 create an account to carry on" })
+        ) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Settings to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Settings to add another" }),
+        update2.kind === "updating" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 updating to v${update2.version}\u2026` }) : update2.kind === "updated" ? /* @__PURE__ */ jsx9(Text9, { color: theme.ok, bold: true, children: `  \u2191 v${update2.version} installed \xB7 restart (q, then solongate) to apply` }) : null
       ] }),
       /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexGrow: 1, children: [
         /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", flexShrink: 0, width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {

package/hooks/guard.bundled.mjs

@@ -6536,7 +6536,7 @@ import { resolve, join, dirname, isAbsolute } from "node:path";
 import { homedir } from "node:os";
 import { gunzipSync } from "node:zlib";
 import { createHash } from "node:crypto";
-var HOOK_VERSION = 69;
+var HOOK_VERSION = 70;
 function localLogsOnly(security) {
   if (security && typeof security === "object") {
     const l = security.localLogs;
@@ -7951,13 +7951,52 @@ function rateLimitCheck(agentKey, limits) {
     return null;
   }
 }
+function quotaTally(used) {
+  const dir = resolve(homedir(), ".solongate");
+  const markFile = join(dir, ".quota-mark");
+  const tallyFile = join(dir, ".quota-tally");
+  let n = 0;
+  try {
+    let mark = null;
+    if (existsSync(markFile)) {
+      try {
+        mark = readFileSync(markFile, "utf-8").trim();
+      } catch {
+      }
+    }
+    if (mark !== String(used)) {
+      writeFileSync(markFile, String(used));
+      writeFileSync(tallyFile, "");
+    } else if (existsSync(tallyFile)) {
+      try {
+        n = statSync(tallyFile).size;
+      } catch {
+      }
+    }
+  } catch {
+  }
+  return {
+    n,
+    add() {
+      try {
+        appendFileSync(tallyFile, ".");
+      } catch {
+      }
+    }
+  };
+}
 function securityLayerCheck(toolName, args, cfg, agentKey) {
   if (!cfg)
     return null;
   try {
     const q = cfg.guestQuota;
-    if (q && q.exhausted) {
-      return `Guest allowance used up (${q.limit} tool calls). Create an account at https://auth.solongate.com to carry on. Your project, its policy and everything recorded carry over, and this device keeps working. To stop guarding this machine instead: solongate, Settings, guard, then press d.`;
+    if (q) {
+      const tally = quotaTally(q.used ?? 0);
+      const spent = (q.used ?? 0) + tally.n;
+      if (q.exhausted || spent >= q.limit) {
+        return `Guest allowance used up (${q.limit} tool calls). Create an account at https://auth.solongate.com to carry on. Your project, its policy and everything recorded carry over, and this device keeps working. To stop guarding this machine instead: solongate, Settings, guard, then press d.`;
+      }
+      tally.add();
     }
     if (cfg.dlpBlock) {
       const hit = dlpScan(args, cfg.dlpBlock);

package/hooks/guard.mjs

@@ -32,7 +32,7 @@ import { createHash } from 'node:crypto';
 // the installed hook self-updates when the cloud version is higher (see
 // maybeSelfUpdate). This is what makes guard fixes propagate without a manual
 // reinstall — the same trust model as the OPA WASM this hook already runs.
-const HOOK_VERSION = 69;
+const HOOK_VERSION = 70;
 
 // True when local log storage is ON. In that mode logs are kept LOCAL ONLY and
 // nothing is sent to the cloud audit log.
@@ -1761,6 +1761,40 @@ function rateLimitCheck(agentKey, limits) {
   }
 }
 
+// The allowance figure the API sends is built from audit rows, and those are
+// written AFTER a call runs. Under a burst of parallel tool calls every hook
+// therefore reads the same pre-burst figure, and the allowance overshoots by
+// roughly a batch before the count catches up.
+//
+// The guard is the thing making the calls, so it can close that gap without
+// another round trip: it tallies what it has already let through since the
+// server's figure last moved, and adds it in. One byte is appended per call and
+// the file's LENGTH is the count, because many hooks run at once and a
+// read-modify-write would lose increments; an O_APPEND write of a single byte
+// does not interleave.
+function quotaTally(used) {
+  const dir = resolve(homedir(), '.solongate');
+  const markFile = join(dir, '.quota-mark');
+  const tallyFile = join(dir, '.quota-tally');
+  let n = 0;
+  try {
+    let mark = null;
+    if (existsSync(markFile)) { try { mark = readFileSync(markFile, 'utf-8').trim(); } catch {} }
+    // A figure that has moved means the audit rows caught up and absorbed the
+    // local tally, so it starts again from there.
+    if (mark !== String(used)) {
+      writeFileSync(markFile, String(used));
+      writeFileSync(tallyFile, '');
+    } else if (existsSync(tallyFile)) {
+      try { n = statSync(tallyFile).size; } catch {}
+    }
+  } catch { /* a missing tally only costs accuracy near the edge, never the gate */ }
+  return {
+    n,
+    add() { try { appendFileSync(tallyFile, '.'); } catch {} },
+  };
+}
+
 // Runs all enabled enforcement layers; returns a deny reason or null (allow).
 function securityLayerCheck(toolName, args, cfg, agentKey) {
   if (!cfg) return null;
@@ -1771,8 +1805,17 @@ function securityLayerCheck(toolName, args, cfg, agentKey) {
     // that is stopped and told why. Checked first, so no other layer can let a
     // call through after the allowance is gone.
     const q = cfg.guestQuota;
-    if (q && q.exhausted) {
-      return `Guest allowance used up (${q.limit} tool calls). Create an account at https://auth.solongate.com to carry on. Your project, its policy and everything recorded carry over, and this device keeps working. To stop guarding this machine instead: solongate, Settings, guard, then press d.`;
+    if (q) {
+      // The server's figure plus what this device has run since, so a burst
+      // cannot spend past the allowance while the audit rows are still in flight.
+      const tally = quotaTally(q.used ?? 0);
+      const spent = (q.used ?? 0) + tally.n;
+      if (q.exhausted || spent >= q.limit) {
+        return `Guest allowance used up (${q.limit} tool calls). Create an account at https://auth.solongate.com to carry on. Your project, its policy and everything recorded carry over, and this device keeps working. To stop guarding this machine instead: solongate, Settings, guard, then press d.`;
+      }
+      // Counted here rather than after the verdict, because a call the policy
+      // goes on to deny is still recorded and still spends the allowance.
+      tally.add();
     }
     if (cfg.dlpBlock) {
       const hit = dlpScan(args, cfg.dlpBlock);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.83.0",
+  "version": "0.83.2",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {