@solongate/proxy 0.83.3 → 0.83.5

package/dist/self-update.d.ts

@@ -23,6 +23,19 @@ export declare function latestVersion(): Promise<string | null>;
 export declare function runUpdateCommand(): Promise<number>;
 /** The exact command that fixes a root-owned global prefix. */
 export declare function adminInstallCommand(): string;
+/** Are we root — i.e. did someone run this under sudo? */
+export declare function runningAsRoot(): boolean;
+export declare function globalInstallCheck(): Promise<{
+    writable: boolean | null;
+    dir: string | null;
+}>;
+/**
+ * The two commands that update SolonGate on a machine whose global npm folder
+ * belongs to root. `repair` is deliberately NOT under sudo: it writes the guard
+ * hooks into the invoking user's home, so as root it would arm root's home and
+ * leave the actual user unguarded.
+ */
+export declare function adminUpdateSteps(): string[];
 /**
  * Install the newest version NOW, whatever the auto-update setting says — the
  * dataroom's UPDATES row and `solongate update` both run through here.
@@ -36,7 +49,7 @@ export declare function updateNow(): Promise<{
  * Kept separate from `runUpdateCommand` so `solongate update` stays "update me
  * now" and never changes a setting as a side effect.
  */
-export declare function runAutoUpdateCommand(arg?: string): number;
+export declare function runAutoUpdateCommand(arg?: string): Promise<number>;
 /** What the dataroom shows about the updater. */
 export type UpdateStatus = {
     kind: 'idle';

package/dist/tui/index.js

@@ -530,8 +530,8 @@ var init_global_install = __esm({
 
 // src/tui/index.tsx
 import { appendFileSync, mkdirSync as mkdirSync7 } from "fs";
-import { homedir as homedir11 } from "os";
-import { join as join11 } from "path";
+import { homedir as homedir10 } from "os";
+import { join as join10 } from "path";
 import { render } from "ink";
 
 // src/tui/App.tsx
@@ -935,16 +935,6 @@ function setViewCredentials(creds) {
   viewOverride = creds;
   cached2 = null;
 }
-var GUEST_EMAIL_SUFFIX = "@anonymous.solongate.invalid";
-function isGuestAccount() {
-  try {
-    const active2 = loginCredentialFile().apiKey;
-    if (!active2) return false;
-    return listAccounts().some((a) => a.apiKey === active2 && (a.email ?? "").endsWith(GUEST_EMAIL_SUFFIX));
-  } catch {
-    return false;
-  }
-}
 function enforcingKey() {
   return loginCredentialFile().apiKey ?? null;
 }
@@ -1000,12 +990,6 @@ var ApiError = class extends Error {
     this.code = code;
   }
 };
-var GuestReadOnlyError = class extends Error {
-  constructor() {
-    super("Guest account: sign up at auth.solongate.com to change anything. Your project, its policy and everything recorded carry over.");
-    this.name = "GuestReadOnlyError";
-  }
-};
 var NotAuthenticatedError = class extends Error {
   constructor() {
     super("Not logged in. Run `solongate` and log in from the Accounts panel.");
@@ -1070,9 +1054,6 @@ function buildUrl(base, path, query) {
   return url.toString();
 }
 async function request(method, path, opts = {}) {
-  if (method !== "GET" && isGuestAccount()) {
-    throw new GuestReadOnlyError();
-  }
   const creds = resolveCredentials(opts.apiUrl);
   const url = buildUrl(creds.apiUrl, path, opts.query);
   const headers = {
@@ -2422,18 +2403,18 @@ function LivePanel({ active: active2 }) {
       }
     ) : null,
     activeAction ? /* @__PURE__ */ jsx2(Text2, { wrap: "truncate", backgroundColor: activeAction.level === "bad" ? "#3d1220" : "#123d1f", color: activeAction.level === "bad" ? "#ff6b6b" : "#7bd88f", bold: true, children: ` ${truncate(activeAction.text, innerW - 4)} ` }) : null,
-    /* @__PURE__ */ jsxs2(Box2, { height: 1 + chartH, children: [
-      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: leftW, marginRight: 2, children: [
+    /* @__PURE__ */ jsxs2(Box2, { height: 1 + chartH, overflow: "hidden", children: [
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: leftW, height: 1 + chartH, marginRight: 2, overflow: "hidden", children: [
         /* @__PURE__ */ jsx2(PaneTitle, { label: "TRAFFIC", extra: `${trafficLabel} \xB7 peak ${Math.max(0, ...traffic)} \xB7 red = denials`, width: leftW }),
         /* @__PURE__ */ jsx2(ColumnChart, { series: traffic, hot: trafficHot, height: chartH, width: leftW, color: theme.accent })
       ] }),
-      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: rightW, children: [
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: rightW, height: 1 + chartH, overflow: "hidden", children: [
         /* @__PURE__ */ jsx2(PaneTitle, { label: "API LATENCY", extra: `now ${latNow}ms \xB7 med ${latMed}ms \xB7 amber >${Math.round(latHotAt)}ms`, width: rightW }),
         /* @__PURE__ */ jsx2(ColumnChart, { series: lat, hot: lat.map((v) => v > latHotAt), height: chartH, width: rightW, color: "white", hotColor: "#ffb454" })
       ] })
     ] }),
-    /* @__PURE__ */ jsxs2(Box2, { height: colH, children: [
-      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, overflow: "hidden", children: [
+    /* @__PURE__ */ jsxs2(Box2, { height: colH, overflow: "hidden", children: [
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, height: colH, marginRight: 2, overflow: "hidden", children: [
         /* @__PURE__ */ jsx2(PaneTitle, { label: "LAYERS", extra: "l = inspect", width: colW }),
         /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
           /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "RATELIMIT ".padEnd(10) }),
@@ -2446,7 +2427,11 @@ function LivePanel({ active: active2 }) {
           /* @__PURE__ */ jsx2(Text2, { color: dl?.mode === "block" ? theme.ok : dl?.mode === "detect" ? theme.warn : theme.dim, children: (dl?.mode ?? "?").padEnd(7) }),
           /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: `${(dl?.patterns ?? []).length} builtin \xB7 ${(dl?.custom ?? []).length} custom` })
         ] }),
-        dlpBars.length ? dlpBars.map((d2) => /* @__PURE__ */ jsx2(HBar, { label: truncate(d2.pattern, 10), value: d2.count, max: maxDlpBar, width: Math.max(6, colW - 16), color: theme.bad }, d2.pattern)) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "          no dlp hits in last 7 days" }),
+        dlpBars.length ? dlpBars.map((d2) => /* @__PURE__ */ jsx2(HBar, { label: truncate(d2.pattern, 10), value: d2.count, max: maxDlpBar, width: Math.max(6, colW - 16), color: theme.bad }, d2.pattern)) : (
+          // 36 chars against a colW that is ~31 at cols=100: without truncate
+          // this wrapped onto a second line and pushed the column over colH.
+          /* @__PURE__ */ jsx2(Text2, { wrap: "truncate", color: theme.dim, children: "          no dlp hits in last 7 days" })
+        ),
         /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
           /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "GUARD".padEnd(10) }),
           ring ? /* @__PURE__ */ jsxs2(Text2, { color: theme.ok, children: [
@@ -2455,7 +2440,7 @@ function LivePanel({ active: active2 }) {
           ] }) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "no local ring in cwd" })
         ] })
       ] }),
-      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, overflow: "hidden", children: [
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, height: colH, marginRight: 2, overflow: "hidden", children: [
         /* @__PURE__ */ jsx2(PaneTitle, { label: "SESSIONS", extra: mode === "pick" ? "\u2191\u2193 pick \xB7 enter open" : `${combinedSess.length} \xB7 s = inspect`, width: colW }),
         pickable.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "scanning\u2026" }) : null,
         pickable.map((r, i) => {
@@ -2481,7 +2466,7 @@ function LivePanel({ active: active2 }) {
           ] }, r.id);
         })
       ] }),
-      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, overflow: "hidden", children: [
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, height: colH, overflow: "hidden", children: [
         /* @__PURE__ */ jsx2(PaneTitle, { label: "EVENT LOG", extra: "system heartbeat", width: colW }),
         log.slice(-(colH - 1)).map((l, i) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
           /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
@@ -4495,9 +4480,9 @@ function stopLogsServerDaemon() {
 
 // src/self-update.ts
 import { execFile, execFileSync as execFileSync2, spawn as spawn4 } from "child_process";
-import { mkdirSync as mkdirSync6, openSync as openSync3, readFileSync as readFileSync7, writeFileSync as writeFileSync7 } from "fs";
+import { access, mkdirSync as mkdirSync6, openSync as openSync3, readFileSync as readFileSync7, writeFileSync as writeFileSync7, constants as FS } from "fs";
 import { homedir as homedir9 } from "os";
-import { dirname as dirname3, join as join9 } from "path";
+import { dirname as dirname3, join as join9, sep } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 var PKG = "@solongate/proxy";
 var CHECK_EVERY_MS = 30 * 60 * 1e3;
@@ -4598,11 +4583,41 @@ ${output}
 function adminInstallCommand() {
   return process.platform === "win32" ? `npm i -g ${PKG}@latest  (in an Administrator terminal)` : `sudo npm i -g ${PKG}@latest`;
 }
+function ownNodeModules() {
+  let dir = dirname3(fileURLToPath3(import.meta.url));
+  for (let i = 0; i < 12; i++) {
+    const parent = dirname3(dir);
+    if (parent === dir) break;
+    if (dir.endsWith(`${sep}node_modules`)) return dir;
+    dir = parent;
+  }
+  return null;
+}
+var prefixCheck = null;
+function globalInstallCheck() {
+  prefixCheck ??= new Promise((resolve3) => {
+    try {
+      const dir = ownNodeModules();
+      if (!dir) return resolve3({ writable: null, dir: null });
+      access(dir, FS.W_OK, (e) => resolve3({ writable: !e, dir }));
+    } catch {
+      resolve3({ writable: null, dir: null });
+    }
+  });
+  return prefixCheck;
+}
+function adminUpdateSteps() {
+  return [`  ${adminInstallCommand()}`, `  solongate repair${process.platform === "win32" ? "" : "   (this one WITHOUT sudo)"}`];
+}
 async function updateNow() {
   const cur = currentVersion();
   const latest = await fetchLatest();
   if (!latest) return { status: "unreachable", version: cur };
   if (!newerThan(latest, cur)) return { status: "current", version: cur };
+  if ((await globalInstallCheck()).writable === false) {
+    writeState2({ ...readState2(), needsAdmin: latest });
+    return { status: "needs-admin", version: latest };
+  }
   const r = await runGlobalInstall(latest);
   if (r.ok) {
     writeState2({ ...readState2(), installed: latest, needsAdmin: void 0 });
@@ -4647,26 +4662,7 @@ async function tuiUpdateFlow(onStatus) {
 }
 
 // src/tui/panels/Settings.tsx
-import { readFileSync as readFileSync8, readdirSync as readdirSync2 } from "fs";
-import { homedir as homedir10 } from "os";
-import { join as join10 } from "path";
 import { Fragment as Fragment5, jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
-function guestAllowance() {
-  try {
-    const dir = join10(homedir10(), ".solongate");
-    for (const f of readdirSync2(dir)) {
-      if (!f.startsWith(".policy-cache-") || !f.endsWith(".json")) continue;
-      try {
-        const c2 = JSON.parse(readFileSync8(join10(dir, f), "utf-8"));
-        const q = c2?.security?.guestQuota;
-        if (q && typeof q.limit === "number") return { used: q.used ?? 0, limit: q.limit };
-      } catch {
-      }
-    }
-  } catch {
-  }
-  return null;
-}
 var EVENTS = ["denials", "allowed", "all"];
 var SPIN2 = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
 var SIGNALS2 = ["any", "deny", "dlp", "ratelimit"];
@@ -4703,6 +4699,17 @@ function SettingsPanel({
   const [diagBusy, setDiagBusy] = useState8(null);
   const [autoUp, setAutoUp] = useState8(() => autoUpdateEnabled());
   const [updBusy, setUpdBusy] = useState8(false);
+  const [canInstall, setCanInstall] = useState8(null);
+  useEffect7(() => {
+    let live2 = true;
+    globalInstallCheck().then((r) => {
+      if (live2) setCanInstall(r.writable);
+    }).catch(() => {
+    });
+    return () => {
+      live2 = false;
+    };
+  }, []);
   const [diag, setDiag] = useState8(null);
   const [diagStep, setDiagStep] = useState8(0);
   const DIAG_STEPS = {
@@ -4720,7 +4727,6 @@ function SettingsPanel({
     const step = setInterval(() => setDiagStep((s) => Math.min(s + 1, total - 1)), 220);
     return () => clearInterval(step);
   }, [diagBusy]);
-  void guestAllowance;
   const ver = currentVersion();
   useEffect7(() => {
     let live2 = true;
@@ -4982,15 +4988,27 @@ function SettingsPanel({
       if (updBusy) return;
       setUpdBusy(true);
       setMsg({ text: "updating\u2026", level: "ok" });
+      setDiag(null);
       void (async () => {
         try {
           const res = await updateNow();
           if (res.status === "updated") setMsg({ text: `\u2713 v${res.version} installed \xB7 restart (q, then solongate) to apply`, level: "ok" });
           else if (res.status === "current") setMsg({ text: `\u2713 already on the latest version (v${res.version})`, level: "ok" });
-          else if (res.status === "needs-admin") setMsg({ text: `\u2717 npm needs admin rights here \u2014 run: ${adminInstallCommand()}`, level: "bad" });
-          else if (res.status === "unreachable") setMsg({ text: "\u2717 could not reach the npm registry", level: "bad" });
+          else if (res.status === "needs-admin") {
+            setMsg({ text: `\u2717 v${res.version} needs admin rights \u2014 run the two commands below`, level: "bad" });
+            setDiag({
+              of: "cli-update",
+              lines: [
+                { text: "npm\u2019s global folder belongs to root on this machine (the usual macOS", level: "warn" },
+                { text: "setup), so SolonGate cannot install there by itself. In a terminal:", level: "warn" },
+                ...adminUpdateSteps().map((s) => ({ text: s.trim(), level: "ok" })),
+                { text: "run repair WITHOUT sudo, or the guard hooks land in root\u2019s home", level: "dim" }
+              ]
+            });
+          } else if (res.status === "unreachable") setMsg({ text: "\u2717 could not reach the npm registry", level: "bad" });
           else setMsg({ text: `\u2717 update to v${res.version} failed \u2014 see ~/.solongate/self-update.log`, level: "bad" });
           setLatest(await latestVersion());
+          setCanInstall((await globalInstallCheck()).writable);
         } finally {
           setUpdBusy(false);
         }
@@ -5004,7 +5022,7 @@ function SettingsPanel({
       setAutoUpdate(next);
       setAutoUp(next);
       setMsg(
-        next ? { text: "\u2713 auto-update on \u2014 new versions install in the background", level: "ok" } : { text: "\u2713 auto-update off \u2014 update from this row or with: solongate update", level: "ok" }
+        next ? canInstall === false ? { text: "\u2713 auto-update on \u2014 but npm needs sudo here, so it still cannot install on its own", level: "bad" } : { text: "\u2713 auto-update on \u2014 new versions install in the background", level: "ok" } : { text: "\u2713 auto-update off \u2014 update from this row or with: solongate update", level: "ok" }
       );
     } else if (r.kind === "ll-enabled") {
       if (!local) return;
@@ -5273,15 +5291,6 @@ function SettingsPanel({
           cursor(r),
           /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "+ add account (enter \u2014 device login in the browser)" })
         ] });
-      case "allowance": {
-        const left = Math.max(0, r.limit - r.used);
-        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
-          cursor(r),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "allowance".padEnd(11) }),
-          /* @__PURE__ */ jsx8(Text8, { color: left === 0 ? theme.bad : left <= 20 ? theme.warn : theme.ok, bold: true, children: `${r.used}/${r.limit} tool calls` }),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: left === 0 ? "   used up \u2014 every call is denied \xB7 create an account to carry on" : `   ${left} left on this guest account \xB7 create an account for no limit` })
-        ] });
-      }
       case "guard":
         return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
           cursor(r),
@@ -5322,7 +5331,10 @@ function SettingsPanel({
           cursor(r),
           /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "version".padEnd(11) }),
           /* @__PURE__ */ jsx8(Text8, { color: behind ? theme.warn : theme.ok, children: `v${ver}` }),
-          updBusy ? /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, children: `   ${spin} updating\u2026` }) : behind ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: `   v${latest} on npm \xB7 enter updates now` }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: latest ? "   latest \xB7 enter checks again" : "   enter checks npm and updates" })
+          updBusy ? /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, children: `   ${spin} updating\u2026` }) : behind && canInstall === false ? (
+            // Said before they press enter, not after a minute of npm noise.
+            /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: `   v${latest} on npm \xB7 needs sudo here \xB7 enter shows how` })
+          ) : behind ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: `   v${latest} on npm \xB7 enter updates now` }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: latest ? "   latest \xB7 enter checks again" : "   enter checks npm and updates" })
         ] });
       }
       case "auto-update":
@@ -5330,7 +5342,7 @@ function SettingsPanel({
           cursor(r),
           /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "auto".padEnd(11) }),
           onOff(autoUp),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: autoUpdateForcedByEnv() ? "   set by SOLONGATE_AUTO_UPDATE" : autoUp ? "   installs new versions in the background \xB7 enter toggles" : "   off: nothing installs on its own (npm -g may need sudo) \xB7 enter toggles" })
+          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: autoUpdateForcedByEnv() ? "   set by SOLONGATE_AUTO_UPDATE" : canInstall === false ? "   cannot work here: npm needs sudo, so updates stay manual \xB7 enter toggles" : autoUp ? "   installs new versions in the background \xB7 enter toggles" : "   off: nothing installs on its own (npm -g may need sudo) \xB7 enter toggles" })
         ] });
       case "ll-enabled":
         return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
@@ -5384,7 +5396,7 @@ function SettingsPanel({
         ] });
     }
   };
-  const sectionOf = (r) => r.kind === "acct" || r.kind === "acct-add" || r.kind === "allowance" ? "ACCOUNTS" : r.kind === "guard" || r.kind === "self" || r.kind === "doctor" || r.kind === "repair" ? "PROTECTION" : r.kind === "cli-update" || r.kind === "auto-update" ? "UPDATES" : r.kind === "ll-enabled" || r.kind === "ll-path" || r.kind === "ll-server" ? "LOCAL LOGS" : r.kind === "wh" || r.kind === "wh-add" ? "WEBHOOKS" : "ALERTS";
+  const sectionOf = (r) => r.kind === "acct" || r.kind === "acct-add" ? "ACCOUNTS" : r.kind === "guard" || r.kind === "self" || r.kind === "doctor" || r.kind === "repair" ? "PROTECTION" : r.kind === "cli-update" || r.kind === "auto-update" ? "UPDATES" : r.kind === "ll-enabled" || r.kind === "ll-path" || r.kind === "ll-server" ? "LOCAL LOGS" : r.kind === "wh" || r.kind === "wh-add" ? "WEBHOOKS" : "ALERTS";
   const SECTION_DESC = {
     ACCOUNTS: `on this device (${accounts.length}) \xB7 \u25CF viewing \xB7 ACTIVE = guard key \xB7 x removes`,
     PROTECTION: "guard hook: enter install/update \xB7 d remove \xB7 self-protection \xB7 doctor + repair",
@@ -5429,7 +5441,7 @@ function SettingsPanel({
         lineKey.push("");
       });
     }
-    if (diag && (r.kind === "doctor" && diag.of === "doctor" || r.kind === "repair" && diag.of === "repair")) {
+    if (diag && (r.kind === "doctor" && diag.of === "doctor" || r.kind === "repair" && diag.of === "repair" || r.kind === "cli-update" && diag.of === "cli-update")) {
       diag.lines.forEach((l, i) => {
         lineEls.push(
           /* @__PURE__ */ jsx8(
@@ -5554,23 +5566,7 @@ function App() {
   const acctIdx = Math.max(0, accounts.findIndex((a) => a.apiKey === viewKey));
   const cur = accounts[acctIdx];
   const rawEmail = cur?.email ?? "";
-  const isGuestAccount2 = rawEmail.endsWith("@anonymous.solongate.invalid");
-  const acctLabel2 = !cur ? "not logged in" : isGuestAccount2 ? "Anonymous" : rawEmail || cur.user || cur.project || `account \u2026${cur.apiKey.slice(-4)}`;
-  const [guestSpent, setGuestSpent] = useState9(false);
-  useEffect8(() => {
-    if (!isGuestAccount2) {
-      setGuestSpent(false);
-      return;
-    }
-    let alive = true;
-    api.auth.me().then((r) => {
-      if (alive) setGuestSpent(r.guest?.exhausted === true);
-    }).catch(() => {
-    });
-    return () => {
-      alive = false;
-    };
-  }, [isGuestAccount2, cur?.apiKey]);
+  const acctLabel2 = !cur ? "not logged in" : rawEmail || cur.user || cur.project || `account \u2026${cur.apiKey.slice(-4)}`;
   useEffect8(() => {
     if (!cur || cur.email) return;
     let alive = true;
@@ -5656,12 +5652,7 @@ function App() {
       /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
         /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "account: " }),
         /* @__PURE__ */ jsx9(Text9, { color: locked ? theme.warn : theme.accentBright, bold: true, children: acctLabel2 }),
-        locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Settings to unlock the dataroom" }) : guestSpent ? (
-          // Said on this line rather than on a new one: every panel budgets its
-          // height against a fixed shell, so one more line up here silently clips
-          // a row off whichever panel is open.
-          /* @__PURE__ */ jsx9(Text9, { color: theme.bad, bold: true, children: "  \xB7 allowance used up \xB7 every call denied \xB7 create an account to carry on" })
-        ) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Settings to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Settings to add another" }),
+        locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Settings to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Settings to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Settings to add another" }),
         update2.kind === "updating" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 updating to v${update2.version}\u2026` }) : update2.kind === "updated" ? /* @__PURE__ */ jsx9(Text9, { color: theme.ok, bold: true, children: `  \u2191 v${update2.version} installed \xB7 restart (q, then solongate) to apply` }) : update2.kind === "available" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 v${update2.version} out \xB7 Settings \u2192 UPDATES` }) : update2.kind === "needs-admin" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 v${update2.version} needs admin rights \xB7 Settings \u2192 UPDATES` }) : null
       ] }),
       /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexGrow: 1, children: [
@@ -5710,11 +5701,11 @@ async function launchTui() {
     return;
   }
   process.stdout.write("\x1B[?1049h\x1B[H");
-  const debugLog = join11(homedir11(), ".solongate", "dataroom-debug.log");
+  const debugLog = join10(homedir10(), ".solongate", "dataroom-debug.log");
   const saved = { log: console.log, warn: console.warn, error: console.error, info: console.info, debug: console.debug };
   const toFile = (level) => (...args) => {
     try {
-      mkdirSync7(join11(homedir11(), ".solongate"), { recursive: true });
+      mkdirSync7(join10(homedir10(), ".solongate"), { recursive: true });
       appendFileSync(debugLog, `${(/* @__PURE__ */ new Date()).toISOString()} [${level}] ${args.map((a) => typeof a === "string" ? a : JSON.stringify(a)).join(" ")}
 `);
     } catch {

package/hooks/guard.bundled.mjs

@@ -6536,7 +6536,7 @@ import { resolve, join, dirname, isAbsolute } from "node:path";
 import { homedir } from "node:os";
 import { gunzipSync } from "node:zlib";
 import { createHash } from "node:crypto";
-var HOOK_VERSION = 70;
+var HOOK_VERSION = 71;
 function localLogsOnly(security) {
   if (security && typeof security === "object") {
     const l = security.localLogs;
@@ -7951,53 +7951,10 @@ function rateLimitCheck(agentKey, limits) {
     return null;
   }
 }
-function quotaTally(used) {
-  const dir = resolve(homedir(), ".solongate");
-  const markFile = join(dir, ".quota-mark");
-  const tallyFile = join(dir, ".quota-tally");
-  let n = 0;
-  try {
-    let mark = null;
-    if (existsSync(markFile)) {
-      try {
-        mark = readFileSync(markFile, "utf-8").trim();
-      } catch {
-      }
-    }
-    if (mark !== String(used)) {
-      writeFileSync(markFile, String(used));
-      writeFileSync(tallyFile, "");
-    } else if (existsSync(tallyFile)) {
-      try {
-        n = statSync(tallyFile).size;
-      } catch {
-      }
-    }
-  } catch {
-  }
-  return {
-    n,
-    add() {
-      try {
-        appendFileSync(tallyFile, ".");
-      } catch {
-      }
-    }
-  };
-}
 function securityLayerCheck(toolName, args, cfg, agentKey) {
   if (!cfg)
     return null;
   try {
-    const q = cfg.guestQuota;
-    if (q) {
-      const tally = quotaTally(q.used ?? 0);
-      const spent = (q.used ?? 0) + tally.n;
-      if (q.exhausted || spent >= q.limit) {
-        return `Guest allowance used up (${q.limit} tool calls). Create an account at https://auth.solongate.com to carry on. Your project, its policy and everything recorded carry over, and this device keeps working. To stop guarding this machine instead: solongate, Settings, guard, then press d.`;
-      }
-      tally.add();
-    }
     if (cfg.dlpBlock) {
       const hit = dlpScan(args, cfg.dlpBlock);
       if (hit)

package/hooks/guard.mjs

@@ -32,7 +32,7 @@ import { createHash } from 'node:crypto';
 // the installed hook self-updates when the cloud version is higher (see
 // maybeSelfUpdate). This is what makes guard fixes propagate without a manual
 // reinstall — the same trust model as the OPA WASM this hook already runs.
-const HOOK_VERSION = 70;
+const HOOK_VERSION = 71;
 
 // True when local log storage is ON. In that mode logs are kept LOCAL ONLY and
 // nothing is sent to the cloud audit log.
@@ -1761,62 +1761,10 @@ function rateLimitCheck(agentKey, limits) {
   }
 }
 
-// The allowance figure the API sends is built from audit rows, and those are
-// written AFTER a call runs. Under a burst of parallel tool calls every hook
-// therefore reads the same pre-burst figure, and the allowance overshoots by
-// roughly a batch before the count catches up.
-//
-// The guard is the thing making the calls, so it can close that gap without
-// another round trip: it tallies what it has already let through since the
-// server's figure last moved, and adds it in. One byte is appended per call and
-// the file's LENGTH is the count, because many hooks run at once and a
-// read-modify-write would lose increments; an O_APPEND write of a single byte
-// does not interleave.
-function quotaTally(used) {
-  const dir = resolve(homedir(), '.solongate');
-  const markFile = join(dir, '.quota-mark');
-  const tallyFile = join(dir, '.quota-tally');
-  let n = 0;
-  try {
-    let mark = null;
-    if (existsSync(markFile)) { try { mark = readFileSync(markFile, 'utf-8').trim(); } catch {} }
-    // A figure that has moved means the audit rows caught up and absorbed the
-    // local tally, so it starts again from there.
-    if (mark !== String(used)) {
-      writeFileSync(markFile, String(used));
-      writeFileSync(tallyFile, '');
-    } else if (existsSync(tallyFile)) {
-      try { n = statSync(tallyFile).size; } catch {}
-    }
-  } catch { /* a missing tally only costs accuracy near the edge, never the gate */ }
-  return {
-    n,
-    add() { try { appendFileSync(tallyFile, '.'); } catch {} },
-  };
-}
-
 // Runs all enabled enforcement layers; returns a deny reason or null (allow).
 function securityLayerCheck(toolName, args, cfg, agentKey) {
   if (!cfg) return null;
   try {
-    // Guest allowance. A guest account is a trial, so past its allowance every
-    // call is denied without exception rather than quietly running unguarded:
-    // an agent that believes it is protected and is not is worse off than one
-    // that is stopped and told why. Checked first, so no other layer can let a
-    // call through after the allowance is gone.
-    const q = cfg.guestQuota;
-    if (q) {
-      // The server's figure plus what this device has run since, so a burst
-      // cannot spend past the allowance while the audit rows are still in flight.
-      const tally = quotaTally(q.used ?? 0);
-      const spent = (q.used ?? 0) + tally.n;
-      if (q.exhausted || spent >= q.limit) {
-        return `Guest allowance used up (${q.limit} tool calls). Create an account at https://auth.solongate.com to carry on. Your project, its policy and everything recorded carry over, and this device keeps working. To stop guarding this machine instead: solongate, Settings, guard, then press d.`;
-      }
-      // Counted here rather than after the verdict, because a call the policy
-      // goes on to deny is still recorded and still spends the allowance.
-      tally.add();
-    }
     if (cfg.dlpBlock) {
       const hit = dlpScan(args, cfg.dlpBlock);
       if (hit) return 'Security layer (DLP): blocked - arguments contain a ' + hit +

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.83.3",
+  "version": "0.83.5",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {