@solongate/proxy 0.83.13 → 0.83.15

package/dist/index.js

@@ -7581,7 +7581,7 @@ function StreamLine({ e, loc, selected, date }) {
       hhmmss(e.at),
       " "
     ] }),
-    /* @__PURE__ */ jsx(Text, { color: loc ? theme.ok : "white", children: loc ? "LOC" : "CLD" }),
+    /* @__PURE__ */ jsx(Text, { color: loc ? theme.ok : "white", children: loc ? "HERE" : "AWAY" }),
     /* @__PURE__ */ jsx(Text, { color: theme.dim, children: "] " }),
     /* @__PURE__ */ jsx(Text, { color: decisionColor(e.decision), bold: e.decision !== "ALLOW", children: e.decision.padEnd(6) }),
     /* @__PURE__ */ jsx(Text, { color: theme.accent, children: truncate2(e.tool, 12).padEnd(13) }),
@@ -9175,7 +9175,7 @@ function LivePanel({ active: active2 }) {
         /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", bold: true, children: " ENTRY " }),
         /* @__PURE__ */ jsx2(Text2, { color: decisionColor(e.decision), bold: true, children: "  " + e.decision }),
         /* @__PURE__ */ jsx2(Text2, { color: theme.accent, bold: true, children: "  " + e.tool }),
-        /* @__PURE__ */ jsx2(Text2, { color: isLoc(e) ? theme.ok : "white", children: "  " + (isLoc(e) ? "LOC" : "CLD") }),
+        /* @__PURE__ */ jsx2(Text2, { color: isLoc(e) ? theme.ok : "white", children: "  " + (isLoc(e) ? "HERE" : "AWAY") }),
         e.dlp ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "  DLP!" }) : null,
         e.burst ? /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "  BURST" }) : null,
         /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  \u2190 back" })
@@ -9500,14 +9500,14 @@ function LivePanel({ active: active2 }) {
         filter === "all" ? /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
           spin,
           " awaiting traffic\u2026"
-        ] }) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: `${spin} no ${filter === "local" ? "LOC (this machine)" : "CLD (other devices)"} calls in the buffer \xB7 f switches source` })
+        ] }) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: `${spin} no ${filter === "local" ? "HERE (this machine)" : "AWAY (other devices)"} calls in the buffer \xB7 f switches origin` })
       ) : null,
       windowed.map((e, i) => /* @__PURE__ */ jsx2(StreamLine, { e, loc: isLoc(e), selected: clampedScroll + i === selClamped }, e.id))
     ] }),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", bold: true, children: " LIVE " }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "white", children: ` local ${localOn ? "on" : "off"} \xB7 ${localBuf.length} loc/${cloudBuf.length} cld \xB7 source ${filter === "all" ? "all" : filter === "local" ? "LOC only" : "CLD only"} \xB7 top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} ` }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", children: ` \u2191\u2193 select \xB7 enter full entry \xB7 f source \xB7 / search \xB7 space copy \xB7 ? all keys \xB7 esc menu \xB7 q quit ` })
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "white", children: ` local-log ${localOn ? "on" : "off"} \xB7 ${localBuf.length} here/${cloudBuf.length} away \xB7 origin ${filter === "all" ? "all" : filter === "local" ? "HERE only" : "AWAY only"} \xB7 top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} ` }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", children: ` \u2191\u2193 select \xB7 enter full entry \xB7 f origin \xB7 / search \xB7 space copy \xB7 ? all keys \xB7 esc menu \xB7 q quit ` })
     ] })
   ] });
 }
@@ -9548,7 +9548,7 @@ var init_Live = __esm({
           ["w", "whitelist the selected DENY (adds ALLOW rule)"],
           ["b", "block the selected ALLOW (adds DENY rule)"],
           ["d / x / r", "filter: denies / dlp hits / rate-limit bursts"],
-          ["f", "source: all \u2192 LOC (this machine) \u2192 CLD (other devices)"],
+          ["f", "origin: all \u2192 HERE (this machine) \u2192 AWAY (other devices)"],
           ["/", "live search (tool, agent, command\u2026) \xB7 enter done"],
           ["s", "session picker"],
           ["l", "layers detail (rate limit \xB7 dlp \xB7 ghost \xB7 guard)"],
@@ -11187,7 +11187,7 @@ function AuditPanel({ active: active2, focused }) {
         /* @__PURE__ */ jsx7(Text7, { backgroundColor: BG2, color: "white", bold: true, children: " ENTRY " }),
         /* @__PURE__ */ jsx7(Text7, { color: decisionColor(e.decision), bold: true, children: "  " + e.decision }),
         /* @__PURE__ */ jsx7(Text7, { color: theme.accent, bold: true, children: "  " + e.tool }),
-        /* @__PURE__ */ jsx7(Text7, { color: loc ? theme.ok : "white", children: "  " + (loc ? "LOC" : "CLD") }),
+        /* @__PURE__ */ jsx7(Text7, { color: loc ? theme.ok : "white", children: "  " + (loc ? "HERE" : "AWAY") }),
         e.dlp.length ? /* @__PURE__ */ jsx7(Text7, { color: theme.bad, children: "  DLP!" }) : null,
         e.burst ? /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: "  BURST" }) : null,
         /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "  \u2190 back" })

package/dist/tui/components.d.ts

@@ -11,7 +11,11 @@ export declare function PaneTitle({ label, extra, width }: {
 }): JSX.Element;
 /**
  * One tool-stream row, shared verbatim by Live (rolling buffer) and Audit (full
- * history). `loc` tags LOC vs CLD; `selected` highlights + shows the ▸ cursor.
+ * history). `loc` tags where the call HAPPENED — HERE (this machine) vs AWAY
+ * (another paired device). Deliberately not LOC/CLD: `local` already names the
+ * local-log STORAGE setting shown in the same panel, and one word meaning two
+ * things two lines apart had people reading a cloud-stored call as on-disk.
+ * `selected` highlights + shows the ▸ cursor.
  * Columns are fixed-width and NEVER conditional so scrolling can't reshuffle the
  * line and glitch the frame.
  */

package/dist/tui/index.js

@@ -745,7 +745,7 @@ function StreamLine({ e, loc, selected, date }) {
       hhmmss(e.at),
       " "
     ] }),
-    /* @__PURE__ */ jsx(Text, { color: loc ? theme.ok : "white", children: loc ? "LOC" : "CLD" }),
+    /* @__PURE__ */ jsx(Text, { color: loc ? theme.ok : "white", children: loc ? "HERE" : "AWAY" }),
     /* @__PURE__ */ jsx(Text, { color: theme.dim, children: "] " }),
     /* @__PURE__ */ jsx(Text, { color: decisionColor(e.decision), bold: e.decision !== "ALLOW", children: e.decision.padEnd(6) }),
     /* @__PURE__ */ jsx(Text, { color: theme.accent, children: truncate(e.tool, 12).padEnd(13) }),
@@ -1682,7 +1682,7 @@ var LIVE_HELP = [
       ["w", "whitelist the selected DENY (adds ALLOW rule)"],
       ["b", "block the selected ALLOW (adds DENY rule)"],
       ["d / x / r", "filter: denies / dlp hits / rate-limit bursts"],
-      ["f", "source: all \u2192 LOC (this machine) \u2192 CLD (other devices)"],
+      ["f", "origin: all \u2192 HERE (this machine) \u2192 AWAY (other devices)"],
       ["/", "live search (tool, agent, command\u2026) \xB7 enter done"],
       ["s", "session picker"],
       ["l", "layers detail (rate limit \xB7 dlp \xB7 ghost \xB7 guard)"],
@@ -2283,7 +2283,7 @@ function LivePanel({ active: active2 }) {
         /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", bold: true, children: " ENTRY " }),
         /* @__PURE__ */ jsx2(Text2, { color: decisionColor(e.decision), bold: true, children: "  " + e.decision }),
         /* @__PURE__ */ jsx2(Text2, { color: theme.accent, bold: true, children: "  " + e.tool }),
-        /* @__PURE__ */ jsx2(Text2, { color: isLoc(e) ? theme.ok : "white", children: "  " + (isLoc(e) ? "LOC" : "CLD") }),
+        /* @__PURE__ */ jsx2(Text2, { color: isLoc(e) ? theme.ok : "white", children: "  " + (isLoc(e) ? "HERE" : "AWAY") }),
         e.dlp ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "  DLP!" }) : null,
         e.burst ? /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "  BURST" }) : null,
         /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  \u2190 back" })
@@ -2608,14 +2608,14 @@ function LivePanel({ active: active2 }) {
         filter === "all" ? /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
           spin,
           " awaiting traffic\u2026"
-        ] }) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: `${spin} no ${filter === "local" ? "LOC (this machine)" : "CLD (other devices)"} calls in the buffer \xB7 f switches source` })
+        ] }) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: `${spin} no ${filter === "local" ? "HERE (this machine)" : "AWAY (other devices)"} calls in the buffer \xB7 f switches origin` })
       ) : null,
       windowed.map((e, i) => /* @__PURE__ */ jsx2(StreamLine, { e, loc: isLoc(e), selected: clampedScroll + i === selClamped }, e.id))
     ] }),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", bold: true, children: " LIVE " }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "white", children: ` local ${localOn ? "on" : "off"} \xB7 ${localBuf.length} loc/${cloudBuf.length} cld \xB7 source ${filter === "all" ? "all" : filter === "local" ? "LOC only" : "CLD only"} \xB7 top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} ` }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", children: ` \u2191\u2193 select \xB7 enter full entry \xB7 f source \xB7 / search \xB7 space copy \xB7 ? all keys \xB7 esc menu \xB7 q quit ` })
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "white", children: ` local-log ${localOn ? "on" : "off"} \xB7 ${localBuf.length} here/${cloudBuf.length} away \xB7 origin ${filter === "all" ? "all" : filter === "local" ? "HERE only" : "AWAY only"} \xB7 top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} ` }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", children: ` \u2191\u2193 select \xB7 enter full entry \xB7 f origin \xB7 / search \xB7 space copy \xB7 ? all keys \xB7 esc menu \xB7 q quit ` })
     ] })
   ] });
 }
@@ -4262,7 +4262,7 @@ function AuditPanel({ active: active2, focused }) {
         /* @__PURE__ */ jsx7(Text7, { backgroundColor: BG2, color: "white", bold: true, children: " ENTRY " }),
         /* @__PURE__ */ jsx7(Text7, { color: decisionColor(e.decision), bold: true, children: "  " + e.decision }),
         /* @__PURE__ */ jsx7(Text7, { color: theme.accent, bold: true, children: "  " + e.tool }),
-        /* @__PURE__ */ jsx7(Text7, { color: loc ? theme.ok : "white", children: "  " + (loc ? "LOC" : "CLD") }),
+        /* @__PURE__ */ jsx7(Text7, { color: loc ? theme.ok : "white", children: "  " + (loc ? "HERE" : "AWAY") }),
         e.dlp.length ? /* @__PURE__ */ jsx7(Text7, { color: theme.bad, children: "  DLP!" }) : null,
         e.burst ? /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: "  BURST" }) : null,
         /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "  \u2190 back" })

package/hooks/guard.bundled.mjs

@@ -6536,7 +6536,7 @@ import { resolve, join, dirname, isAbsolute } from "node:path";
 import { homedir } from "node:os";
 import { gunzipSync } from "node:zlib";
 import { createHash } from "node:crypto";
-var HOOK_VERSION = 76;
+var HOOK_VERSION = 77;
 function localLogsOnly(security) {
   if (security !== void 0) {
     const l = security && security.localLogs;
@@ -6714,6 +6714,30 @@ function installedHookVersion(fileName) {
     return 0;
   }
 }
+function registeredClients() {
+  const home = resolve(homedir());
+  const has = (p, needle) => {
+    try {
+      const s = safeReadFileSync(p);
+      if (!s)
+        return false;
+      return needle ? s.includes(needle) : true;
+    } catch {
+      return false;
+    }
+  };
+  const out = [];
+  if (has(join(home, ".claude", "settings.json"), ".solongate"))
+    out.push("claude-code");
+  if (has(join(home, ".gemini", "config", "hooks.json"), ".solongate"))
+    out.push("antigravity");
+  if (has(join(process.env.CODEX_HOME ? resolve(process.env.CODEX_HOME) : join(home, ".codex"), "hooks.json"), ".solongate"))
+    out.push("codex");
+  const xdg = process.env.XDG_CONFIG_HOME ? resolve(process.env.XDG_CONFIG_HOME) : join(home, ".config");
+  if (has(join(xdg, "opencode", "plugins", "solongate.js"), "tool.execute.before"))
+    out.push("opencode");
+  return out;
+}
 var CLOUD_HOOK_VERSIONS = null;
 function hooksBehindCloud() {
   const v = CLOUD_HOOK_VERSIONS;
@@ -6808,7 +6832,10 @@ async function refreshPolicyCache() {
     } catch {
     }
     try {
-      const res = await fetch(API_URL + "/api/v1/policies/active?agent_id=" + encodeURIComponent(AGENT_ID || "") + "&hv=" + HOOK_VERSION, { headers: AUTH_HEADERS, signal: AbortSignal.timeout(8e3) });
+      const res = await fetch(
+        API_URL + "/api/v1/policies/active?agent_id=" + encodeURIComponent(AGENT_ID || "") + "&hv=" + HOOK_VERSION + "&clients=" + encodeURIComponent(registeredClients().join(",")),
+        { headers: AUTH_HEADERS, signal: AbortSignal.timeout(8e3) }
+      );
       if (res.ok) {
         const body = await res.json();
         if (typeof body?.self_protection_enabled === "boolean")

package/hooks/guard.mjs

@@ -32,7 +32,7 @@ import { createHash } from 'node:crypto';
 // the installed hook self-updates when the cloud version is higher (see
 // maybeSelfUpdate). This is what makes guard fixes propagate without a manual
 // reinstall — the same trust model as the OPA WASM this hook already runs.
-const HOOK_VERSION = 76;
+const HOOK_VERSION = 77;
 
 // True when local log storage is ON. In that mode logs are kept LOCAL ONLY and
 // nothing is sent to the cloud audit log — local and cloud are one or the
@@ -313,6 +313,36 @@ function installedHookVersion(fileName) {
   } catch { return 0; }
 }
 
+/**
+ * Which clients the guard is REGISTERED for on this machine.
+ *
+ * The dashboard used to infer this from "whose guard has called in", which
+ * answers a different question than `repair` and `doctor` do — a client that is
+ * installed but has not been opened in days reads as unguarded, and the three
+ * surfaces contradicted each other while using identical wording. The machine
+ * is the only thing that can see its own files, so it reports them.
+ *
+ * Cheap on purpose: four existence/substring checks against files this hook
+ * already treats as tamper targets, run on a poll that is throttled to 10s.
+ */
+function registeredClients() {
+  const home = resolve(homedir());
+  const has = (p, needle) => {
+    try {
+      const s = safeReadFileSync(p);
+      if (!s) return false;
+      return needle ? s.includes(needle) : true;
+    } catch { return false; }
+  };
+  const out = [];
+  if (has(join(home, '.claude', 'settings.json'), '.solongate')) out.push('claude-code');
+  if (has(join(home, '.gemini', 'config', 'hooks.json'), '.solongate')) out.push('antigravity');
+  if (has(join(process.env.CODEX_HOME ? resolve(process.env.CODEX_HOME) : join(home, '.codex'), 'hooks.json'), '.solongate')) out.push('codex');
+  const xdg = process.env.XDG_CONFIG_HOME ? resolve(process.env.XDG_CONFIG_HOME) : join(home, '.config');
+  if (has(join(xdg, 'opencode', 'plugins', 'solongate.js'), 'tool.execute.before')) out.push('opencode');
+  return out;
+}
+
 // Latest hook versions the cloud reports on /policies/active (hook_versions).
 // Captured during the policy fetch of THIS run (or its short-lived cache); lets
 // maybeSelfUpdate() know it is behind and bypass the 6h stamp entirely.
@@ -425,7 +455,12 @@ async function refreshPolicyCache() {
       }
     } catch {}
     try {
-      const res = await fetch(API_URL + '/api/v1/policies/active?agent_id=' + encodeURIComponent(AGENT_ID || '') + '&hv=' + HOOK_VERSION, { headers: AUTH_HEADERS, signal: AbortSignal.timeout(8000) });
+      const res = await fetch(
+        API_URL + '/api/v1/policies/active?agent_id=' + encodeURIComponent(AGENT_ID || '')
+          + '&hv=' + HOOK_VERSION
+          + '&clients=' + encodeURIComponent(registeredClients().join(',')),
+        { headers: AUTH_HEADERS, signal: AbortSignal.timeout(8000) },
+      );
       if (res.ok) {
         const body = await res.json();
         if (typeof body?.self_protection_enabled === 'boolean') selfProtect = body.self_protection_enabled;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.83.13",
+  "version": "0.83.15",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {