@solongate/proxy 0.83.1 → 0.83.2

package/hooks/guard.bundled.mjs

@@ -6536,7 +6536,7 @@ import { resolve, join, dirname, isAbsolute } from "node:path";
 import { homedir } from "node:os";
 import { gunzipSync } from "node:zlib";
 import { createHash } from "node:crypto";
-var HOOK_VERSION = 69;
+var HOOK_VERSION = 70;
 function localLogsOnly(security) {
   if (security && typeof security === "object") {
     const l = security.localLogs;
@@ -7951,13 +7951,52 @@ function rateLimitCheck(agentKey, limits) {
     return null;
   }
 }
+function quotaTally(used) {
+  const dir = resolve(homedir(), ".solongate");
+  const markFile = join(dir, ".quota-mark");
+  const tallyFile = join(dir, ".quota-tally");
+  let n = 0;
+  try {
+    let mark = null;
+    if (existsSync(markFile)) {
+      try {
+        mark = readFileSync(markFile, "utf-8").trim();
+      } catch {
+      }
+    }
+    if (mark !== String(used)) {
+      writeFileSync(markFile, String(used));
+      writeFileSync(tallyFile, "");
+    } else if (existsSync(tallyFile)) {
+      try {
+        n = statSync(tallyFile).size;
+      } catch {
+      }
+    }
+  } catch {
+  }
+  return {
+    n,
+    add() {
+      try {
+        appendFileSync(tallyFile, ".");
+      } catch {
+      }
+    }
+  };
+}
 function securityLayerCheck(toolName, args, cfg, agentKey) {
   if (!cfg)
     return null;
   try {
     const q = cfg.guestQuota;
-    if (q && q.exhausted) {
-      return `Guest allowance used up (${q.limit} tool calls). Create an account at https://auth.solongate.com to carry on. Your project, its policy and everything recorded carry over, and this device keeps working. To stop guarding this machine instead: solongate, Settings, guard, then press d.`;
+    if (q) {
+      const tally = quotaTally(q.used ?? 0);
+      const spent = (q.used ?? 0) + tally.n;
+      if (q.exhausted || spent >= q.limit) {
+        return `Guest allowance used up (${q.limit} tool calls). Create an account at https://auth.solongate.com to carry on. Your project, its policy and everything recorded carry over, and this device keeps working. To stop guarding this machine instead: solongate, Settings, guard, then press d.`;
+      }
+      tally.add();
     }
     if (cfg.dlpBlock) {
       const hit = dlpScan(args, cfg.dlpBlock);

package/hooks/guard.mjs

@@ -32,7 +32,7 @@ import { createHash } from 'node:crypto';
 // the installed hook self-updates when the cloud version is higher (see
 // maybeSelfUpdate). This is what makes guard fixes propagate without a manual
 // reinstall — the same trust model as the OPA WASM this hook already runs.
-const HOOK_VERSION = 69;
+const HOOK_VERSION = 70;
 
 // True when local log storage is ON. In that mode logs are kept LOCAL ONLY and
 // nothing is sent to the cloud audit log.
@@ -1761,6 +1761,40 @@ function rateLimitCheck(agentKey, limits) {
   }
 }
 
+// The allowance figure the API sends is built from audit rows, and those are
+// written AFTER a call runs. Under a burst of parallel tool calls every hook
+// therefore reads the same pre-burst figure, and the allowance overshoots by
+// roughly a batch before the count catches up.
+//
+// The guard is the thing making the calls, so it can close that gap without
+// another round trip: it tallies what it has already let through since the
+// server's figure last moved, and adds it in. One byte is appended per call and
+// the file's LENGTH is the count, because many hooks run at once and a
+// read-modify-write would lose increments; an O_APPEND write of a single byte
+// does not interleave.
+function quotaTally(used) {
+  const dir = resolve(homedir(), '.solongate');
+  const markFile = join(dir, '.quota-mark');
+  const tallyFile = join(dir, '.quota-tally');
+  let n = 0;
+  try {
+    let mark = null;
+    if (existsSync(markFile)) { try { mark = readFileSync(markFile, 'utf-8').trim(); } catch {} }
+    // A figure that has moved means the audit rows caught up and absorbed the
+    // local tally, so it starts again from there.
+    if (mark !== String(used)) {
+      writeFileSync(markFile, String(used));
+      writeFileSync(tallyFile, '');
+    } else if (existsSync(tallyFile)) {
+      try { n = statSync(tallyFile).size; } catch {}
+    }
+  } catch { /* a missing tally only costs accuracy near the edge, never the gate */ }
+  return {
+    n,
+    add() { try { appendFileSync(tallyFile, '.'); } catch {} },
+  };
+}
+
 // Runs all enabled enforcement layers; returns a deny reason or null (allow).
 function securityLayerCheck(toolName, args, cfg, agentKey) {
   if (!cfg) return null;
@@ -1771,8 +1805,17 @@ function securityLayerCheck(toolName, args, cfg, agentKey) {
     // that is stopped and told why. Checked first, so no other layer can let a
     // call through after the allowance is gone.
     const q = cfg.guestQuota;
-    if (q && q.exhausted) {
-      return `Guest allowance used up (${q.limit} tool calls). Create an account at https://auth.solongate.com to carry on. Your project, its policy and everything recorded carry over, and this device keeps working. To stop guarding this machine instead: solongate, Settings, guard, then press d.`;
+    if (q) {
+      // The server's figure plus what this device has run since, so a burst
+      // cannot spend past the allowance while the audit rows are still in flight.
+      const tally = quotaTally(q.used ?? 0);
+      const spent = (q.used ?? 0) + tally.n;
+      if (q.exhausted || spent >= q.limit) {
+        return `Guest allowance used up (${q.limit} tool calls). Create an account at https://auth.solongate.com to carry on. Your project, its policy and everything recorded carry over, and this device keeps working. To stop guarding this machine instead: solongate, Settings, guard, then press d.`;
+      }
+      // Counted here rather than after the verdict, because a call the policy
+      // goes on to deny is still recorded and still spends the allowance.
+      tally.add();
     }
     if (cfg.dlpBlock) {
       const hit = dlpScan(args, cfg.dlpBlock);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.83.1",
+  "version": "0.83.2",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {