@solongate/proxy 0.83.14 → 0.83.16

package/dist/commands/index.js

@@ -10,7 +10,7 @@ import { resolve as resolve2, join as join2 } from "path";
 import { homedir as homedir2 } from "os";
 
 // src/global-install.ts
-import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync, chmodSync } from "fs";
+import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync, rmdirSync, readdirSync, statSync, chmodSync } from "fs";
 import { resolve, join, dirname } from "path";
 import { homedir } from "os";
 import { fileURLToPath } from "url";
@@ -1185,12 +1185,12 @@ async function runAgent(argv) {
 }
 
 // src/commands/doctor.ts
-import { existsSync as existsSync4, readFileSync as readFileSync5, statSync as statSync2 } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync5, statSync as statSync3 } from "fs";
 import { homedir as homedir4 } from "os";
 import { join as join4 } from "path";
 
 // src/tui/local-log.ts
-import { closeSync, existsSync as existsSync3, openSync, readdirSync, readFileSync as readFileSync4, readSync, statSync, writeFileSync as writeFileSync3 } from "fs";
+import { closeSync, existsSync as existsSync3, openSync, readdirSync as readdirSync2, readFileSync as readFileSync4, readSync, statSync as statSync2, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir3 } from "os";
 import { createHash } from "crypto";
 import { isAbsolute, join as join3 } from "path";
@@ -1198,11 +1198,11 @@ var DEFAULT_LOCAL_LOG = join3(homedir3(), ".solongate", "local-logs", "solongate
 function localLogFile() {
   try {
     const sgDir = join3(homedir3(), ".solongate");
-    const caches = readdirSync(sgDir).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json")).map((f) => {
+    const caches = readdirSync2(sgDir).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json")).map((f) => {
       const p = join3(sgDir, f);
       let mtime = 0;
       try {
-        mtime = statSync(p).mtimeMs;
+        mtime = statSync2(p).mtimeMs;
       } catch {
       }
       return { p, mtime };
@@ -1316,7 +1316,7 @@ async function collectChecks() {
   }
   const LOCAL_LOG2 = localLogFile();
   if (existsSync4(LOCAL_LOG2)) {
-    const st = statSync2(LOCAL_LOG2);
+    const st = statSync3(LOCAL_LOG2);
     const ageMin = (Date.now() - st.mtimeMs) / 6e4;
     checks.push({ name: "local logs", ok: true, detail: `on \xB7 ${(st.size / 1024).toFixed(0)}KB \xB7 last write ${ageMin < 1 ? "just now" : Math.round(ageMin) + "m ago"}` });
   } else {
@@ -1346,12 +1346,12 @@ async function run6(argv) {
 }
 
 // src/commands/watch.ts
-import { closeSync as closeSync2, existsSync as existsSync5, openSync as openSync2, readSync as readSync2, statSync as statSync3 } from "fs";
+import { closeSync as closeSync2, existsSync as existsSync5, openSync as openSync2, readSync as readSync2, statSync as statSync4 } from "fs";
 var trunc = (s, n) => s.length <= n ? s : s.slice(0, n - 1) + "\u2026";
 var time = (ms) => new Date(ms).toTimeString().slice(0, 8);
 function tailLocal(file, maxBytes = 131072) {
   try {
-    const size = statSync3(file).size;
+    const size = statSync4(file).size;
     const start = Math.max(0, size - maxBytes);
     const fd = openSync2(file, "r");
     const buf = Buffer.alloc(size - start);

package/dist/global-install.d.ts

@@ -55,6 +55,7 @@ export declare function isOpencodeGuardInstalled(): boolean;
 /** True when OpenCode looks present on this device, so callers can decide
  *  whether the OpenCode line is worth showing at all. */
 export declare function opencodeDetected(): boolean;
+export declare function sweepStrayScratchDirs(root?: string, maxDepth?: number, budget?: number): number;
 export declare function runGlobalRestore(): void;
 /**
  * TUI-safe (re)install — the dataroom's one-key "install / update guard" action.

package/dist/global-install.js

@@ -1,5 +1,5 @@
 // src/global-install.ts
-import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync, chmodSync } from "fs";
+import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync, rmdirSync, readdirSync, statSync, chmodSync } from "fs";
 import { resolve, join, dirname } from "path";
 import { homedir } from "os";
 import { fileURLToPath } from "url";
@@ -395,6 +395,57 @@ function opencodeDetected() {
     return false;
   }
 }
+var SCRATCH_FILES = /* @__PURE__ */ new Set([".eval-ring.jsonl", ".last-eval", ".last-deny", ".last-tool-call", ".debug-guard-log"]);
+function sweepStrayScratchDirs(root = homedir(), maxDepth = 6, budget = 4e4) {
+  let removed = 0;
+  let visited = 0;
+  const skip = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", ".next", "build"]);
+  const store = join(homedir(), ".solongate");
+  const walk = (dir, depth) => {
+    if (depth > maxDepth || visited++ > budget) return;
+    let entries;
+    try {
+      entries = readdirSync(dir);
+    } catch {
+      return;
+    }
+    for (const name of entries) {
+      if (skip.has(name)) continue;
+      const full = join(dir, name);
+      if (full === store) continue;
+      let isDir = false;
+      try {
+        isDir = statSync(full).isDirectory();
+      } catch {
+        continue;
+      }
+      if (!isDir) continue;
+      if (name === ".solongate") {
+        try {
+          const left = [];
+          for (const f of readdirSync(full)) {
+            if (SCRATCH_FILES.has(f)) {
+              try {
+                rmSync(join(full, f), { force: true });
+              } catch {
+                left.push(f);
+              }
+            } else left.push(f);
+          }
+          if (left.length === 0) {
+            rmdirSync(full);
+            removed++;
+          }
+        } catch {
+        }
+        continue;
+      }
+      walk(full, depth + 1);
+    }
+  };
+  walk(root, 0);
+  return removed;
+}
 function ask(question) {
   const rl = createInterface({ input: process.stdin, output: process.stderr });
   return new Promise((res) => rl.question(question, (a) => {
@@ -454,6 +505,11 @@ function repairQuiet() {
     line("OpenCode hooks", isOpencodeGuardInstalled(), "guard registered", "NOT registered")
   ];
   const notes = [];
+  try {
+    const swept = sweepStrayScratchDirs();
+    if (swept > 0) notes.push(`Removed ${swept} leftover .solongate scratch folder(s) from earlier versions; per-call flags now live under ~/.solongate/projects.`);
+  } catch {
+  }
   const cx = codexHooksStatus();
   if (cx.registered && !cx.trusted) {
     notes.push("Codex only: run `/hooks` inside Codex once and trust the SolonGate hooks (Codex skips any hook it has not been told to trust).");
@@ -807,6 +863,7 @@ export {
   runGlobalInstall,
   runGlobalRestore,
   runRepair,
+  sweepStrayScratchDirs,
   uninstallGlobalQuiet,
   unlockProtected,
   writeProtectedFile

package/dist/index.js

@@ -3043,12 +3043,12 @@ ${ctx.indent}`;
       for (const {
         format,
         test,
-        resolve: resolve6
+        resolve: resolve7
       } of tags) {
         if (test) {
           const match = str.match(test);
           if (match) {
-            let res = resolve6.apply(null, match);
+            let res = resolve7.apply(null, match);
             if (!(res instanceof Scalar)) res = new Scalar(res);
             if (format) res.format = format;
             return res;
@@ -6209,11 +6209,12 @@ __export(global_install_exports, {
   runGlobalInstall: () => runGlobalInstall,
   runGlobalRestore: () => runGlobalRestore,
   runRepair: () => runRepair,
+  sweepStrayScratchDirs: () => sweepStrayScratchDirs,
   uninstallGlobalQuiet: () => uninstallGlobalQuiet,
   unlockProtected: () => unlockProtected,
   writeProtectedFile: () => writeProtectedFile
 });
-import { readFileSync as readFileSync4, writeFileSync as writeFileSync3, existsSync as existsSync3, mkdirSync as mkdirSync3, rmSync as rmSync2, chmodSync } from "fs";
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync3, existsSync as existsSync3, mkdirSync as mkdirSync3, rmSync as rmSync2, rmdirSync, readdirSync, statSync, chmodSync } from "fs";
 import { resolve as resolve3, join as join4, dirname } from "path";
 import { homedir as homedir2 } from "os";
 import { fileURLToPath } from "url";
@@ -6604,6 +6605,56 @@ function opencodeDetected() {
     return false;
   }
 }
+function sweepStrayScratchDirs(root = homedir2(), maxDepth = 6, budget = 4e4) {
+  let removed = 0;
+  let visited = 0;
+  const skip = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", ".next", "build"]);
+  const store = join4(homedir2(), ".solongate");
+  const walk = (dir, depth) => {
+    if (depth > maxDepth || visited++ > budget) return;
+    let entries;
+    try {
+      entries = readdirSync(dir);
+    } catch {
+      return;
+    }
+    for (const name of entries) {
+      if (skip.has(name)) continue;
+      const full = join4(dir, name);
+      if (full === store) continue;
+      let isDir = false;
+      try {
+        isDir = statSync(full).isDirectory();
+      } catch {
+        continue;
+      }
+      if (!isDir) continue;
+      if (name === ".solongate") {
+        try {
+          const left = [];
+          for (const f of readdirSync(full)) {
+            if (SCRATCH_FILES.has(f)) {
+              try {
+                rmSync2(join4(full, f), { force: true });
+              } catch {
+                left.push(f);
+              }
+            } else left.push(f);
+          }
+          if (left.length === 0) {
+            rmdirSync(full);
+            removed++;
+          }
+        } catch {
+        }
+        continue;
+      }
+      walk(full, depth + 1);
+    }
+  };
+  walk(root, 0);
+  return removed;
+}
 function ask(question) {
   const rl = createInterface({ input: process.stdin, output: process.stderr });
   return new Promise((res) => rl.question(question, (a) => {
@@ -6663,6 +6714,11 @@ function repairQuiet() {
     line("OpenCode hooks", isOpencodeGuardInstalled(), "guard registered", "NOT registered")
   ];
   const notes = [];
+  try {
+    const swept = sweepStrayScratchDirs();
+    if (swept > 0) notes.push(`Removed ${swept} leftover .solongate scratch folder(s) from earlier versions; per-call flags now live under ~/.solongate/projects.`);
+  } catch {
+  }
   const cx = codexHooksStatus();
   if (cx.registered && !cx.trusted) {
     notes.push("Codex only: run `/hooks` inside Codex once and trust the SolonGate hooks (Codex skips any hook it has not been told to trust).");
@@ -6994,7 +7050,7 @@ async function runGlobalInstall(opts = {}) {
 async function installGlobalWithKey(apiKey, apiUrl) {
   await runGlobalInstall({ apiKey, apiUrl });
 }
-var __dirname, HOOKS_DIR, ANTIGRAVITY_GROUP, CODEX_EVENTS, CODEX_TIMEOUT_SEC, SHIM_BEGIN, SHIM_END;
+var __dirname, HOOKS_DIR, ANTIGRAVITY_GROUP, CODEX_EVENTS, CODEX_TIMEOUT_SEC, SCRATCH_FILES, SHIM_BEGIN, SHIM_END;
 var init_global_install = __esm({
   "src/global-install.ts"() {
     "use strict";
@@ -7003,6 +7059,7 @@ var init_global_install = __esm({
     ANTIGRAVITY_GROUP = "solongate-guard";
     CODEX_EVENTS = ["PreToolUse", "PostToolUse", "Stop"];
     CODEX_TIMEOUT_SEC = 30;
+    SCRATCH_FILES = /* @__PURE__ */ new Set([".eval-ring.jsonl", ".last-eval", ".last-deny", ".last-tool-call", ".debug-guard-log"]);
     SHIM_BEGIN = "# >>> SolonGate shield (auto secret redaction) >>>";
     SHIM_END = "# <<< SolonGate shield <<<";
   }
@@ -7183,7 +7240,7 @@ async function runUpdateCommand() {
   return 0;
 }
 function runGlobalInstall2(version) {
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     try {
       mkdirSync4(join5(homedir3(), ".solongate"), { recursive: true });
       execFile(
@@ -7199,11 +7256,11 @@ ${output}
 `, { flag: "a" });
           } catch {
           }
-          resolve6({ ok: !err2, needsAdmin: !!err2 && NEEDS_ADMIN_RE.test(output) });
+          resolve7({ ok: !err2, needsAdmin: !!err2 && NEEDS_ADMIN_RE.test(output) });
         }
       );
     } catch {
-      resolve6({ ok: false, needsAdmin: false });
+      resolve7({ ok: false, needsAdmin: false });
     }
   });
 }
@@ -7224,13 +7281,13 @@ function ownNodeModules() {
   return null;
 }
 function globalInstallCheck() {
-  prefixCheck ??= new Promise((resolve6) => {
+  prefixCheck ??= new Promise((resolve7) => {
     try {
       const dir = ownNodeModules();
-      if (!dir) return resolve6({ writable: null, dir: null });
-      access(dir, FS.W_OK, (e) => resolve6({ writable: !e, dir }));
+      if (!dir) return resolve7({ writable: null, dir: null });
+      access(dir, FS.W_OK, (e) => resolve7({ writable: !e, dir }));
     } catch {
-      resolve6({ writable: null, dir: null });
+      resolve7({ writable: null, dir: null });
     }
   });
   return prefixCheck;
@@ -7581,7 +7638,7 @@ function StreamLine({ e, loc, selected, date }) {
       hhmmss(e.at),
       " "
     ] }),
-    /* @__PURE__ */ jsx(Text, { color: loc ? theme.ok : "white", children: loc ? "LOC" : "CLD" }),
+    /* @__PURE__ */ jsx(Text, { color: loc ? theme.ok : "white", children: loc ? "HERE" : "AWAY" }),
     /* @__PURE__ */ jsx(Text, { color: theme.dim, children: "] " }),
     /* @__PURE__ */ jsx(Text, { color: decisionColor(e.decision), bold: e.decision !== "ALLOW", children: e.decision.padEnd(6) }),
     /* @__PURE__ */ jsx(Text, { color: theme.accent, children: truncate2(e.tool, 12).padEnd(13) }),
@@ -7647,7 +7704,7 @@ var init_components = __esm({
 });
 
 // src/tui/local-log.ts
-import { closeSync, existsSync as existsSync4, openSync as openSync3, readdirSync, readFileSync as readFileSync8, readSync, statSync, writeFileSync as writeFileSync6 } from "fs";
+import { closeSync, existsSync as existsSync4, openSync as openSync3, readdirSync as readdirSync2, readFileSync as readFileSync8, readSync, statSync as statSync2, writeFileSync as writeFileSync6 } from "fs";
 import { homedir as homedir6 } from "os";
 import { createHash as createHash2 } from "crypto";
 import { isAbsolute, join as join8 } from "path";
@@ -7676,11 +7733,11 @@ function localLogsSetting() {
 }
 function policyCachesNewestFirst() {
   const sgDir = join8(homedir6(), ".solongate");
-  return readdirSync(sgDir).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json")).map((f) => {
+  return readdirSync2(sgDir).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json")).map((f) => {
     const p = join8(sgDir, f);
     let mtime = 0;
     try {
-      mtime = statSync(p).mtimeMs;
+      mtime = statSync2(p).mtimeMs;
     } catch {
     }
     return { p, mtime };
@@ -7689,11 +7746,11 @@ function policyCachesNewestFirst() {
 function localLogFile() {
   try {
     const sgDir = join8(homedir6(), ".solongate");
-    const caches = readdirSync(sgDir).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json")).map((f) => {
+    const caches = readdirSync2(sgDir).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json")).map((f) => {
       const p = join8(sgDir, f);
       let mtime = 0;
       try {
-        mtime = statSync(p).mtimeMs;
+        mtime = statSync2(p).mtimeMs;
       } catch {
       }
       return { p, mtime };
@@ -7737,7 +7794,7 @@ function ensureLocalLogOwner(activeApiKey) {
 }
 function tailLines(file, maxBytes = 131072) {
   try {
-    const size = statSync(file).size;
+    const size = statSync2(file).size;
     const start = Math.max(0, size - maxBytes);
     const fd = openSync3(file, "r");
     const buf = Buffer.alloc(size - start);
@@ -8536,7 +8593,7 @@ import { Box as Box2, Text as Text2, useInput } from "ink";
 import TextInput from "ink-text-input";
 import { mkdirSync as mkdirSync7, writeFileSync as writeFileSync8 } from "fs";
 import { homedir as homedir8 } from "os";
-import { join as join10 } from "path";
+import { join as join10, resolve as resolve5 } from "path";
 import { useCallback as useCallback2, useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
 import { Fragment as Fragment2, jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
 function extractTarget(detail) {
@@ -9175,7 +9232,7 @@ function LivePanel({ active: active2 }) {
         /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", bold: true, children: " ENTRY " }),
         /* @__PURE__ */ jsx2(Text2, { color: decisionColor(e.decision), bold: true, children: "  " + e.decision }),
         /* @__PURE__ */ jsx2(Text2, { color: theme.accent, bold: true, children: "  " + e.tool }),
-        /* @__PURE__ */ jsx2(Text2, { color: isLoc(e) ? theme.ok : "white", children: "  " + (isLoc(e) ? "LOC" : "CLD") }),
+        /* @__PURE__ */ jsx2(Text2, { color: isLoc(e) ? theme.ok : "white", children: "  " + (isLoc(e) ? "HERE" : "AWAY") }),
         e.dlp ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "  DLP!" }) : null,
         e.burst ? /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "  BURST" }) : null,
         /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  \u2190 back" })
@@ -9500,18 +9557,18 @@ function LivePanel({ active: active2 }) {
         filter === "all" ? /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
           spin,
           " awaiting traffic\u2026"
-        ] }) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: `${spin} no ${filter === "local" ? "LOC (this machine)" : "CLD (other devices)"} calls in the buffer \xB7 f switches source` })
+        ] }) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: `${spin} no ${filter === "local" ? "HERE (this machine)" : "AWAY (other devices)"} calls in the buffer \xB7 f switches origin` })
       ) : null,
       windowed.map((e, i) => /* @__PURE__ */ jsx2(StreamLine, { e, loc: isLoc(e), selected: clampedScroll + i === selClamped }, e.id))
     ] }),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", bold: true, children: " LIVE " }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "white", children: ` local ${localOn ? "on" : "off"} \xB7 ${localBuf.length} loc/${cloudBuf.length} cld \xB7 source ${filter === "all" ? "all" : filter === "local" ? "LOC only" : "CLD only"} \xB7 top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} ` }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", children: ` \u2191\u2193 select \xB7 enter full entry \xB7 f source \xB7 / search \xB7 space copy \xB7 ? all keys \xB7 esc menu \xB7 q quit ` })
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "white", children: ` local-log ${localOn ? "on" : "off"} \xB7 ${localBuf.length} here/${cloudBuf.length} away \xB7 origin ${filter === "all" ? "all" : filter === "local" ? "HERE only" : "AWAY only"} \xB7 top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} ` }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", children: ` \u2191\u2193 select \xB7 enter full entry \xB7 f origin \xB7 / search \xB7 space copy \xB7 ? all keys \xB7 esc menu \xB7 q quit ` })
     ] })
   ] });
 }
-var CONFIG, SPIN, BG, DIM_FLOOR, RING, fmtUp, FILTERS, sessStatus, STATUS_STYLE, LIVE_HELP;
+var CONFIG, SPIN, BG, DIM_FLOOR, projectKey, RING, fmtUp, FILTERS, sessStatus, STATUS_STYLE, LIVE_HELP;
 var init_Live = __esm({
   "src/tui/panels/Live.tsx"() {
     "use strict";
@@ -9526,7 +9583,15 @@ var init_Live = __esm({
     SPIN = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
     BG = "#12234f";
     DIM_FLOOR = "#233457";
-    RING = join10(process.cwd(), ".solongate", ".eval-ring.jsonl");
+    projectKey = (dir) => {
+      let h = 2166136261;
+      for (let i = 0; i < dir.length; i++) {
+        h ^= dir.charCodeAt(i);
+        h = h + ((h << 1) + (h << 4) + (h << 7) + (h << 8) + (h << 24)) >>> 0;
+      }
+      return h.toString(16);
+    };
+    RING = join10(homedir8(), ".solongate", "projects", projectKey(resolve5(process.cwd())), ".eval-ring.jsonl");
     fmtUp = (ms) => {
       const s = Math.floor(ms / 1e3);
       const p = (n) => String(n).padStart(2, "0");
@@ -9548,7 +9613,7 @@ var init_Live = __esm({
           ["w", "whitelist the selected DENY (adds ALLOW rule)"],
           ["b", "block the selected ALLOW (adds DENY rule)"],
           ["d / x / r", "filter: denies / dlp hits / rate-limit bursts"],
-          ["f", "source: all \u2192 LOC (this machine) \u2192 CLD (other devices)"],
+          ["f", "origin: all \u2192 HERE (this machine) \u2192 AWAY (other devices)"],
           ["/", "live search (tool, agent, command\u2026) \xB7 enter done"],
           ["s", "session picker"],
           ["l", "layers detail (rate limit \xB7 dlp \xB7 ghost \xB7 guard)"],
@@ -11187,7 +11252,7 @@ function AuditPanel({ active: active2, focused }) {
         /* @__PURE__ */ jsx7(Text7, { backgroundColor: BG2, color: "white", bold: true, children: " ENTRY " }),
         /* @__PURE__ */ jsx7(Text7, { color: decisionColor(e.decision), bold: true, children: "  " + e.decision }),
         /* @__PURE__ */ jsx7(Text7, { color: theme.accent, bold: true, children: "  " + e.tool }),
-        /* @__PURE__ */ jsx7(Text7, { color: loc ? theme.ok : "white", children: "  " + (loc ? "LOC" : "CLD") }),
+        /* @__PURE__ */ jsx7(Text7, { color: loc ? theme.ok : "white", children: "  " + (loc ? "HERE" : "AWAY") }),
         e.dlp.length ? /* @__PURE__ */ jsx7(Text7, { color: theme.bad, children: "  DLP!" }) : null,
         e.burst ? /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: "  BURST" }) : null,
         /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "  \u2190 back" })
@@ -11563,7 +11628,7 @@ var init_args = __esm({
 });
 
 // src/commands/doctor.ts
-import { existsSync as existsSync6, readFileSync as readFileSync10, statSync as statSync2 } from "fs";
+import { existsSync as existsSync6, readFileSync as readFileSync10, statSync as statSync3 } from "fs";
 import { homedir as homedir10 } from "os";
 import { join as join12 } from "path";
 async function collectChecks() {
@@ -11654,7 +11719,7 @@ async function collectChecks() {
   }
   const LOCAL_LOG2 = localLogFile();
   if (existsSync6(LOCAL_LOG2)) {
-    const st = statSync2(LOCAL_LOG2);
+    const st = statSync3(LOCAL_LOG2);
     const ageMin = (Date.now() - st.mtimeMs) / 6e4;
     checks.push({ name: "local logs", ok: true, detail: `on \xB7 ${(st.size / 1024).toFixed(0)}KB \xB7 last write ${ageMin < 1 ? "just now" : Math.round(ageMin) + "m ago"}` });
   } else {
@@ -13397,10 +13462,10 @@ var init_agents2 = __esm({
 });
 
 // src/commands/watch.ts
-import { closeSync as closeSync2, existsSync as existsSync7, openSync as openSync4, readSync as readSync2, statSync as statSync3 } from "fs";
+import { closeSync as closeSync2, existsSync as existsSync7, openSync as openSync4, readSync as readSync2, statSync as statSync4 } from "fs";
 function tailLocal(file, maxBytes = 131072) {
   try {
-    const size = statSync3(file).size;
+    const size = statSync4(file).size;
     const start = Math.max(0, size - maxBytes);
     const fd = openSync4(file, "r");
     const buf = Buffer.alloc(size - start);
@@ -13708,10 +13773,10 @@ __export(logs_server_exports, {
   runLogsServer: () => runLogsServer
 });
 import { createServer } from "http";
-import { readFileSync as readFileSync12, statSync as statSync4 } from "fs";
-import { resolve as resolve5, join as join14, isAbsolute as isAbsolute2 } from "path";
+import { readFileSync as readFileSync12, statSync as statSync5 } from "fs";
+import { resolve as resolve6, join as join14, isAbsolute as isAbsolute2 } from "path";
 import { homedir as homedir12 } from "os";
-import { readdirSync as readdirSync2 } from "fs";
+import { readdirSync as readdirSync3 } from "fs";
 function allowedOrigins() {
   const base = [
     "https://dashboard.solongate.com",
@@ -13727,12 +13792,12 @@ function resolveLocalLogDir(rawPath) {
   const dir = String(rawPath || "").trim().replace(/[\\/]+$/, "");
   if (!dir) return null;
   if (isAbsolute2(dir)) return dir;
-  return resolve5(homedir12(), ".solongate", "local-logs");
+  return resolve6(homedir12(), ".solongate", "local-logs");
 }
 async function findLogDir() {
-  const base = resolve5(homedir12(), ".solongate");
+  const base = resolve6(homedir12(), ".solongate");
   try {
-    const files = readdirSync2(base).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json"));
+    const files = readdirSync3(base).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json"));
     for (const f of files) {
       try {
         const c2 = JSON.parse(readFileSync12(join14(base, f), "utf-8"));
@@ -13775,7 +13840,7 @@ function fileInfo(dir) {
   if (!dir) return { file: null, exists: false, size: 0, mtimeMs: 0 };
   const file = join14(dir, LOG_FILENAME);
   try {
-    const st = statSync4(file);
+    const st = statSync5(file);
     return { file, exists: true, size: st.size, mtimeMs: st.mtimeMs };
   } catch {
     return { file, exists: false, size: 0, mtimeMs: 0 };
@@ -16687,7 +16752,7 @@ var Mutex = class {
       this.locked = true;
       return;
     }
-    return new Promise((resolve6, reject) => {
+    return new Promise((resolve7, reject) => {
       const timer = setTimeout(() => {
         const idx = this.queue.indexOf(onReady);
         if (idx !== -1) this.queue.splice(idx, 1);
@@ -16695,7 +16760,7 @@ var Mutex = class {
       }, timeoutMs);
       const onReady = () => {
         clearTimeout(timer);
-        resolve6();
+        resolve7();
       };
       this.queue.push(onReady);
     });

package/dist/tui/components.d.ts

@@ -11,7 +11,11 @@ export declare function PaneTitle({ label, extra, width }: {
 }): JSX.Element;
 /**
  * One tool-stream row, shared verbatim by Live (rolling buffer) and Audit (full
- * history). `loc` tags LOC vs CLD; `selected` highlights + shows the ▸ cursor.
+ * history). `loc` tags where the call HAPPENED — HERE (this machine) vs AWAY
+ * (another paired device). Deliberately not LOC/CLD: `local` already names the
+ * local-log STORAGE setting shown in the same panel, and one word meaning two
+ * things two lines apart had people reading a cloud-stored call as on-disk.
+ * `selected` highlights + shows the ▸ cursor.
  * Columns are fixed-width and NEVER conditional so scrolling can't reshuffle the
  * line and glitch the frame.
  */

package/dist/tui/index.js

@@ -9,7 +9,7 @@ var __export = (target, all) => {
 };
 
 // src/global-install.ts
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync2, existsSync as existsSync2, mkdirSync, rmSync, chmodSync } from "fs";
+import { readFileSync as readFileSync3, writeFileSync as writeFileSync2, existsSync as existsSync2, mkdirSync, rmSync, rmdirSync, readdirSync as readdirSync2, statSync as statSync2, chmodSync } from "fs";
 import { resolve, join as join3, dirname } from "path";
 import { homedir as homedir3 } from "os";
 import { fileURLToPath } from "url";
@@ -392,6 +392,56 @@ function opencodeDetected() {
     return false;
   }
 }
+function sweepStrayScratchDirs(root = homedir3(), maxDepth = 6, budget = 4e4) {
+  let removed = 0;
+  let visited = 0;
+  const skip = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", ".next", "build"]);
+  const store = join3(homedir3(), ".solongate");
+  const walk = (dir, depth) => {
+    if (depth > maxDepth || visited++ > budget) return;
+    let entries;
+    try {
+      entries = readdirSync2(dir);
+    } catch {
+      return;
+    }
+    for (const name of entries) {
+      if (skip.has(name)) continue;
+      const full = join3(dir, name);
+      if (full === store) continue;
+      let isDir = false;
+      try {
+        isDir = statSync2(full).isDirectory();
+      } catch {
+        continue;
+      }
+      if (!isDir) continue;
+      if (name === ".solongate") {
+        try {
+          const left = [];
+          for (const f of readdirSync2(full)) {
+            if (SCRATCH_FILES.has(f)) {
+              try {
+                rmSync(join3(full, f), { force: true });
+              } catch {
+                left.push(f);
+              }
+            } else left.push(f);
+          }
+          if (left.length === 0) {
+            rmdirSync(full);
+            removed++;
+          }
+        } catch {
+        }
+        continue;
+      }
+      walk(full, depth + 1);
+    }
+  };
+  walk(root, 0);
+  return removed;
+}
 function repairQuiet() {
   const p = globalPaths();
   const has = (f) => existsSync2(f);
@@ -415,6 +465,11 @@ function repairQuiet() {
     line("OpenCode hooks", isOpencodeGuardInstalled(), "guard registered", "NOT registered")
   ];
   const notes = [];
+  try {
+    const swept = sweepStrayScratchDirs();
+    if (swept > 0) notes.push(`Removed ${swept} leftover .solongate scratch folder(s) from earlier versions; per-call flags now live under ~/.solongate/projects.`);
+  } catch {
+  }
   const cx = codexHooksStatus();
   if (cx.registered && !cx.trusted) {
     notes.push("Codex only: run `/hooks` inside Codex once and trust the SolonGate hooks (Codex skips any hook it has not been told to trust).");
@@ -579,7 +634,7 @@ function removeClaudeShim() {
     }
   }
 }
-var __dirname, HOOKS_DIR, ANTIGRAVITY_GROUP, CODEX_EVENTS, CODEX_TIMEOUT_SEC, SHIM_BEGIN, SHIM_END;
+var __dirname, HOOKS_DIR, ANTIGRAVITY_GROUP, CODEX_EVENTS, CODEX_TIMEOUT_SEC, SCRATCH_FILES, SHIM_BEGIN, SHIM_END;
 var init_global_install = __esm({
   "src/global-install.ts"() {
     "use strict";
@@ -588,6 +643,7 @@ var init_global_install = __esm({
     ANTIGRAVITY_GROUP = "solongate-guard";
     CODEX_EVENTS = ["PreToolUse", "PostToolUse", "Stop"];
     CODEX_TIMEOUT_SEC = 30;
+    SCRATCH_FILES = /* @__PURE__ */ new Set([".eval-ring.jsonl", ".last-eval", ".last-deny", ".last-tool-call", ".debug-guard-log"]);
     SHIM_BEGIN = "# >>> SolonGate shield (auto secret redaction) >>>";
     SHIM_END = "# <<< SolonGate shield <<<";
   }
@@ -745,7 +801,7 @@ function StreamLine({ e, loc, selected, date }) {
       hhmmss(e.at),
       " "
     ] }),
-    /* @__PURE__ */ jsx(Text, { color: loc ? theme.ok : "white", children: loc ? "LOC" : "CLD" }),
+    /* @__PURE__ */ jsx(Text, { color: loc ? theme.ok : "white", children: loc ? "HERE" : "AWAY" }),
     /* @__PURE__ */ jsx(Text, { color: theme.dim, children: "] " }),
     /* @__PURE__ */ jsx(Text, { color: decisionColor(e.decision), bold: e.decision !== "ALLOW", children: e.decision.padEnd(6) }),
     /* @__PURE__ */ jsx(Text, { color: theme.accent, children: truncate(e.tool, 12).padEnd(13) }),
@@ -798,7 +854,7 @@ import { Box as Box2, Text as Text2, useInput } from "ink";
 import TextInput from "ink-text-input";
 import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync4 } from "fs";
 import { homedir as homedir5 } from "os";
-import { join as join5 } from "path";
+import { join as join5, resolve as resolve3 } from "path";
 
 // src/tui/local-log.ts
 import { closeSync, existsSync, openSync, readdirSync, readFileSync as readFileSync2, readSync, statSync, writeFileSync } from "fs";
@@ -1594,7 +1650,15 @@ var CONFIG = loadConfig();
 var SPIN = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
 var BG = "#12234f";
 var DIM_FLOOR = "#233457";
-var RING = join5(process.cwd(), ".solongate", ".eval-ring.jsonl");
+var projectKey = (dir) => {
+  let h = 2166136261;
+  for (let i = 0; i < dir.length; i++) {
+    h ^= dir.charCodeAt(i);
+    h = h + ((h << 1) + (h << 4) + (h << 7) + (h << 8) + (h << 24)) >>> 0;
+  }
+  return h.toString(16);
+};
+var RING = join5(homedir5(), ".solongate", "projects", projectKey(resolve3(process.cwd())), ".eval-ring.jsonl");
 var fmtUp = (ms) => {
   const s = Math.floor(ms / 1e3);
   const p = (n) => String(n).padStart(2, "0");
@@ -1682,7 +1746,7 @@ var LIVE_HELP = [
       ["w", "whitelist the selected DENY (adds ALLOW rule)"],
       ["b", "block the selected ALLOW (adds DENY rule)"],
       ["d / x / r", "filter: denies / dlp hits / rate-limit bursts"],
-      ["f", "source: all \u2192 LOC (this machine) \u2192 CLD (other devices)"],
+      ["f", "origin: all \u2192 HERE (this machine) \u2192 AWAY (other devices)"],
       ["/", "live search (tool, agent, command\u2026) \xB7 enter done"],
       ["s", "session picker"],
       ["l", "layers detail (rate limit \xB7 dlp \xB7 ghost \xB7 guard)"],
@@ -2283,7 +2347,7 @@ function LivePanel({ active: active2 }) {
         /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", bold: true, children: " ENTRY " }),
         /* @__PURE__ */ jsx2(Text2, { color: decisionColor(e.decision), bold: true, children: "  " + e.decision }),
         /* @__PURE__ */ jsx2(Text2, { color: theme.accent, bold: true, children: "  " + e.tool }),
-        /* @__PURE__ */ jsx2(Text2, { color: isLoc(e) ? theme.ok : "white", children: "  " + (isLoc(e) ? "LOC" : "CLD") }),
+        /* @__PURE__ */ jsx2(Text2, { color: isLoc(e) ? theme.ok : "white", children: "  " + (isLoc(e) ? "HERE" : "AWAY") }),
         e.dlp ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "  DLP!" }) : null,
         e.burst ? /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "  BURST" }) : null,
         /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  \u2190 back" })
@@ -2608,14 +2672,14 @@ function LivePanel({ active: active2 }) {
         filter === "all" ? /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
           spin,
           " awaiting traffic\u2026"
-        ] }) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: `${spin} no ${filter === "local" ? "LOC (this machine)" : "CLD (other devices)"} calls in the buffer \xB7 f switches source` })
+        ] }) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: `${spin} no ${filter === "local" ? "HERE (this machine)" : "AWAY (other devices)"} calls in the buffer \xB7 f switches origin` })
       ) : null,
       windowed.map((e, i) => /* @__PURE__ */ jsx2(StreamLine, { e, loc: isLoc(e), selected: clampedScroll + i === selClamped }, e.id))
     ] }),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", bold: true, children: " LIVE " }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "white", children: ` local ${localOn ? "on" : "off"} \xB7 ${localBuf.length} loc/${cloudBuf.length} cld \xB7 source ${filter === "all" ? "all" : filter === "local" ? "LOC only" : "CLD only"} \xB7 top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} ` }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", children: ` \u2191\u2193 select \xB7 enter full entry \xB7 f source \xB7 / search \xB7 space copy \xB7 ? all keys \xB7 esc menu \xB7 q quit ` })
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "white", children: ` local-log ${localOn ? "on" : "off"} \xB7 ${localBuf.length} here/${cloudBuf.length} away \xB7 origin ${filter === "all" ? "all" : filter === "local" ? "HERE only" : "AWAY only"} \xB7 top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} ` }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", children: ` \u2191\u2193 select \xB7 enter full entry \xB7 f origin \xB7 / search \xB7 space copy \xB7 ? all keys \xB7 esc menu \xB7 q quit ` })
     ] })
   ] });
 }
@@ -4262,7 +4326,7 @@ function AuditPanel({ active: active2, focused }) {
         /* @__PURE__ */ jsx7(Text7, { backgroundColor: BG2, color: "white", bold: true, children: " ENTRY " }),
         /* @__PURE__ */ jsx7(Text7, { color: decisionColor(e.decision), bold: true, children: "  " + e.decision }),
         /* @__PURE__ */ jsx7(Text7, { color: theme.accent, bold: true, children: "  " + e.tool }),
-        /* @__PURE__ */ jsx7(Text7, { color: loc ? theme.ok : "white", children: "  " + (loc ? "LOC" : "CLD") }),
+        /* @__PURE__ */ jsx7(Text7, { color: loc ? theme.ok : "white", children: "  " + (loc ? "HERE" : "AWAY") }),
         e.dlp.length ? /* @__PURE__ */ jsx7(Text7, { color: theme.bad, children: "  DLP!" }) : null,
         e.burst ? /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: "  BURST" }) : null,
         /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "  \u2190 back" })
@@ -4431,7 +4495,7 @@ import { useEffect as useEffect7, useRef as useRef3, useState as useState8 } fro
 init_global_install();
 
 // src/commands/doctor.ts
-import { existsSync as existsSync4, readFileSync as readFileSync5, statSync as statSync2 } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync5, statSync as statSync3 } from "fs";
 import { homedir as homedir7 } from "os";
 import { join as join7 } from "path";
 init_global_install();
@@ -4523,7 +4587,7 @@ async function collectChecks() {
   }
   const LOCAL_LOG2 = localLogFile();
   if (existsSync4(LOCAL_LOG2)) {
-    const st = statSync2(LOCAL_LOG2);
+    const st = statSync3(LOCAL_LOG2);
     const ageMin = (Date.now() - st.mtimeMs) / 6e4;
     checks.push({ name: "local logs", ok: true, detail: `on \xB7 ${(st.size / 1024).toFixed(0)}KB \xB7 last write ${ageMin < 1 ? "just now" : Math.round(ageMin) + "m ago"}` });
   } else {
@@ -4688,7 +4752,7 @@ async function fetchLatest() {
   }
 }
 function runGlobalInstall(version) {
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     try {
       mkdirSync6(join9(homedir9(), ".solongate"), { recursive: true });
       execFile(
@@ -4704,11 +4768,11 @@ ${output}
 `, { flag: "a" });
           } catch {
           }
-          resolve3({ ok: !err2, needsAdmin: !!err2 && NEEDS_ADMIN_RE.test(output) });
+          resolve4({ ok: !err2, needsAdmin: !!err2 && NEEDS_ADMIN_RE.test(output) });
         }
       );
     } catch {
-      resolve3({ ok: false, needsAdmin: false });
+      resolve4({ ok: false, needsAdmin: false });
     }
   });
 }
@@ -4727,13 +4791,13 @@ function ownNodeModules() {
 }
 var prefixCheck = null;
 function globalInstallCheck() {
-  prefixCheck ??= new Promise((resolve3) => {
+  prefixCheck ??= new Promise((resolve4) => {
     try {
       const dir = ownNodeModules();
-      if (!dir) return resolve3({ writable: null, dir: null });
-      access(dir, FS.W_OK, (e) => resolve3({ writable: !e, dir }));
+      if (!dir) return resolve4({ writable: null, dir: null });
+      access(dir, FS.W_OK, (e) => resolve4({ writable: !e, dir }));
     } catch {
-      resolve3({ writable: null, dir: null });
+      resolve4({ writable: null, dir: null });
     }
   });
   return prefixCheck;

package/hooks/audit.mjs

@@ -8,10 +8,39 @@ import { readFileSync, existsSync, writeFileSync, mkdirSync, appendFileSync } fr
 import { resolve, join, isAbsolute } from 'node:path';
 import { homedir } from 'node:os';
 
+// ── Per-project scratch, kept OUT of the project ─────────────────────────────
+// The guard and the audit hook pass a few small flags to each other (the eval
+// ring, the last-eval measurement, the deny flag, the tool-call marker). These
+// used to be written to `./.solongate/` — relative to whatever directory the
+// agent happened to run in — which scattered a dot-folder through every folder
+// an agent ever touched, config directories included, and put it inside repos
+// that had no ignore rule for it. It also read as "local logging is on" to
+// anyone who found one, which is a different setting entirely.
+//
+// They now live under the user's own ~/.solongate, in a directory named by a
+// hash of the project path, so the per-project separation the dataroom relies
+// on survives while nothing is written where the user works. The hash is
+// duplicated in guard.mjs, audit.mjs and the dataroom: all three must agree for
+// a call's flags to be found, so keep them identical if any one is touched.
+function projectKey(dir) {
+  let h = 0x811c9dc5;
+  const s = String(dir || '');
+  for (let i = 0; i < s.length; i++) {
+    h ^= s.charCodeAt(i);
+    h = (h + ((h << 1) + (h << 4) + (h << 7) + (h << 8) + (h << 24))) >>> 0;
+  }
+  return h.toString(16);
+}
+
+function projectFlagDir() {
+  return join(resolve(homedir(), '.solongate'), 'projects', projectKey(resolve(process.cwd())));
+}
+
+
 // Bump on every audit hook change. The cloud serves the newest version; the guard
 // hook installs it on its next run (no re-login needed). See guard.mjs
 // fetchAndInstallHook / maybeSelfUpdate.
-const HOOK_VERSION = 26;
+const HOOK_VERSION = 27;
 
 function loadEnvKey(dir) {
   try {
@@ -52,7 +81,7 @@ function readLastEvalMs(toolName, sessionId) {
   // .last-eval flag would be overwritten / half-read under that concurrency). A
   // lone sequential call has only itself in the window → it reports its own time.
   try {
-    const ring = resolve('.solongate', '.eval-ring.jsonl');
+    const ring = join(projectFlagDir(), '.eval-ring.jsonl');
     if (existsSync(ring)) {
       const now = Date.now();
       const recent = [];
@@ -69,7 +98,7 @@ function readLastEvalMs(toolName, sessionId) {
   } catch {}
   // Fallback: the single-value flag (original behavior).
   try {
-    const p = resolve('.solongate', '.last-eval');
+    const p = join(projectFlagDir(), '.last-eval');
     if (!existsSync(p)) return null;
     const c = JSON.parse(readFileSync(p, 'utf-8'));
     if (!c || typeof c.ms !== 'number' || typeof c.ts !== 'number') return null;
@@ -587,7 +616,7 @@ try { input += readFileSync(0, 'utf-8'); } catch {}
     // for a flag written by an older guard (no id, no fp).
     let guardDenied = false;
     try {
-      const denyFlagPath = resolve('.solongate', '.last-deny');
+      const denyFlagPath = join(projectFlagDir(), '.last-deny');
       if (existsSync(denyFlagPath)) {
         const flag = JSON.parse(readFileSync(denyFlagPath, 'utf-8'));
         const fresh = flag.ts && Date.now() - flag.ts < 10000 && flag.tool === toolName;
@@ -697,7 +726,7 @@ try { input += readFileSync(0, 'utf-8'); } catch {}
 
     // Write flag so stop.mjs knows tool calls happened (skip text-only ALLOW)
     try {
-      const flagDir = resolve('.solongate');
+      const flagDir = projectFlagDir();
       mkdirSync(flagDir, { recursive: true });
       writeFileSync(join(flagDir, '.last-tool-call'), Date.now().toString());
     } catch {}

package/hooks/guard.bundled.mjs

@@ -6530,13 +6530,55 @@ var init_src = __esm({
 });
 
 // hooks/guard.mjs
-import { readFileSync, existsSync, statSync, readdirSync, writeFileSync, mkdirSync, chmodSync, renameSync, appendFileSync, rmSync, openSync, readSync, closeSync } from "node:fs";
+import { readFileSync, existsSync, statSync, readdirSync, writeFileSync, mkdirSync, chmodSync, renameSync, appendFileSync, rmSync, rmdirSync, openSync, readSync, closeSync } from "node:fs";
 import { spawn } from "node:child_process";
 import { resolve, join, dirname, isAbsolute } from "node:path";
 import { homedir } from "node:os";
 import { gunzipSync } from "node:zlib";
 import { createHash } from "node:crypto";
-var HOOK_VERSION = 77;
+function projectKey(dir) {
+  let h = 2166136261;
+  const s = String(dir || "");
+  for (let i = 0; i < s.length; i++) {
+    h ^= s.charCodeAt(i);
+    h = h + ((h << 1) + (h << 4) + (h << 7) + (h << 8) + (h << 24)) >>> 0;
+  }
+  return h.toString(16);
+}
+function projectFlagDir() {
+  return join(resolve(homedir(), ".solongate"), "projects", projectKey(resolve(process.cwd())));
+}
+var _legacySwept = false;
+function sweepLegacyFlagDir() {
+  if (_legacySwept)
+    return;
+  _legacySwept = true;
+  try {
+    const dir = resolve(process.cwd(), ".solongate");
+    if (!existsSync(dir))
+      return;
+    const ours = /* @__PURE__ */ new Set([".eval-ring.jsonl", ".last-eval", ".last-deny", ".last-tool-call", ".debug-guard-log"]);
+    const left = [];
+    for (const f of readdirSync(dir)) {
+      if (ours.has(f)) {
+        try {
+          rmSync(join(dir, f), { force: true });
+        } catch {
+          left.push(f);
+        }
+      } else
+        left.push(f);
+    }
+    if (left.length === 0) {
+      try {
+        rmdirSync(dir);
+      } catch {
+      }
+    }
+  } catch {
+  }
+}
+var HOOK_VERSION = 78;
 function localLogsOnly(security) {
   if (security !== void 0) {
     const l = security && security.localLogs;
@@ -7052,7 +7094,7 @@ function callFingerprint(s) {
 }
 function writeDenyFlag(toolName) {
   try {
-    const flagDir = resolve(".solongate");
+    const flagDir = projectFlagDir();
     mkdirSync(flagDir, { recursive: true });
     writeFileSync(join(flagDir, ".last-tool-call"), Date.now().toString());
     writeFileSync(join(flagDir, ".last-deny"), JSON.stringify({
@@ -8653,8 +8695,9 @@ if (!REFRESH_MODE) {
         process.stderr.write(`[SolonGate ROUTE] ${opaRoute.toUpperCase()} (${reason ? "block" : "allow"})
 `);
       try {
-        const _fd = resolve(".solongate");
+        const _fd = projectFlagDir();
         mkdirSync(_fd, { recursive: true });
+        sweepLegacyFlagDir();
         const _rec = { ms: Date.now() - _evalStart, ts: Date.now(), tool: toolName, session: call.sessionId };
         writeFileSync(join(_fd, ".last-eval"), JSON.stringify(_rec));
         try {

package/hooks/guard.mjs

@@ -21,18 +21,67 @@
  * Logs DENY decisions to SolonGate Cloud. ALLOWs are logged by audit.mjs.
  * Auto-installed by: npx @solongate/proxy init --global
  */
-import { readFileSync, existsSync, statSync, readdirSync, writeFileSync, mkdirSync, chmodSync, renameSync, appendFileSync, rmSync, openSync, readSync, closeSync } from 'node:fs';
+import { readFileSync, existsSync, statSync, readdirSync, writeFileSync, mkdirSync, chmodSync, renameSync, appendFileSync, rmSync, rmdirSync, openSync, readSync, closeSync } from 'node:fs';
 import { spawn } from 'node:child_process';
 import { resolve, join, dirname, isAbsolute } from 'node:path';
 import { homedir } from 'node:os';
 import { gunzipSync } from 'node:zlib';
+
+// ── Per-project scratch, kept OUT of the project ─────────────────────────────
+// The guard and the audit hook pass a few small flags to each other (the eval
+// ring, the last-eval measurement, the deny flag, the tool-call marker). These
+// used to be written to `./.solongate/` — relative to whatever directory the
+// agent happened to run in — which scattered a dot-folder through every folder
+// an agent ever touched, config directories included, and put it inside repos
+// that had no ignore rule for it. It also read as "local logging is on" to
+// anyone who found one, which is a different setting entirely.
+//
+// They now live under the user's own ~/.solongate, in a directory named by a
+// hash of the project path, so the per-project separation the dataroom relies
+// on survives while nothing is written where the user works. The hash is
+// duplicated in guard.mjs, audit.mjs and the dataroom: all three must agree for
+// a call's flags to be found, so keep them identical if any one is touched.
+function projectKey(dir) {
+  let h = 0x811c9dc5;
+  const s = String(dir || '');
+  for (let i = 0; i < s.length; i++) {
+    h ^= s.charCodeAt(i);
+    h = (h + ((h << 1) + (h << 4) + (h << 7) + (h << 8) + (h << 24))) >>> 0;
+  }
+  return h.toString(16);
+}
+
+function projectFlagDir() {
+  return join(resolve(homedir(), '.solongate'), 'projects', projectKey(resolve(process.cwd())));
+}
+
+// Remove the dot-folder older versions left in this working directory. Only our
+// own files go, and the directory only if that empties it — a folder someone
+// else put there, or one with anything unexpected in it, is left alone.
+let _legacySwept = false;
+function sweepLegacyFlagDir() {
+  if (_legacySwept) return;
+  _legacySwept = true;
+  try {
+    const dir = resolve(process.cwd(), '.solongate');
+    if (!existsSync(dir)) return;
+    const ours = new Set(['.eval-ring.jsonl', '.last-eval', '.last-deny', '.last-tool-call', '.debug-guard-log']);
+    const left = [];
+    for (const f of readdirSync(dir)) {
+      if (ours.has(f)) { try { rmSync(join(dir, f), { force: true }); } catch { left.push(f); } }
+      else left.push(f);
+    }
+    if (left.length === 0) { try { rmdirSync(dir); } catch { /* not empty after all */ } }
+  } catch { /* never let cleanup disturb a tool call */ }
+}
+
 import { createHash } from 'node:crypto';
 
 // Bump on every guard.mjs change. The cloud serves the newest bundle + version;
 // the installed hook self-updates when the cloud version is higher (see
 // maybeSelfUpdate). This is what makes guard fixes propagate without a manual
 // reinstall — the same trust model as the OPA WASM this hook already runs.
-const HOOK_VERSION = 77;
+const HOOK_VERSION = 78;
 
 // True when local log storage is ON. In that mode logs are kept LOCAL ONLY and
 // nothing is sent to the cloud audit log — local and cloud are one or the
@@ -780,7 +829,7 @@ function callFingerprint(s) {
 // Write flag file so stop.mjs knows a tool call (DENY) happened and doesn't log extra ALLOW
 function writeDenyFlag(toolName) {
   try {
-    const flagDir = resolve('.solongate');
+    const flagDir = projectFlagDir();
     mkdirSync(flagDir, { recursive: true });
     writeFileSync(join(flagDir, '.last-tool-call'), Date.now().toString());
     // Deny-specific flag: audit.mjs (PostToolUse) reads it to avoid logging a
@@ -2737,7 +2786,8 @@ if (!REFRESH_MODE) { try { input += readFileSync(0, 'utf-8'); } catch {} }
     // Keyed by tool + session so the audit hook can match THIS invocation even
     // when the tool itself runs for minutes (a bare timestamp TTL lost those).
     try {
-      const _fd = resolve('.solongate'); mkdirSync(_fd, { recursive: true });
+      const _fd = projectFlagDir(); mkdirSync(_fd, { recursive: true });
+      sweepLegacyFlagDir(); // every call, not just denials
       const _rec = { ms: Date.now() - _evalStart, ts: Date.now(), tool: toolName, session: call.sessionId };
       writeFileSync(join(_fd, '.last-eval'), JSON.stringify(_rec));
       // Also append to a short ring. When many tool calls run in PARALLEL they all

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.83.14",
+  "version": "0.83.16",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {