@solongate/proxy 0.83.53 → 0.83.55

package/dist/global-install.js

@@ -87,6 +87,10 @@ function protectedTargets() {
     join(p.hooksDir, "audit.mjs"),
     join(p.hooksDir, "stop.mjs"),
     join(p.hooksDir, "shield.mjs"),
+    // The conversation record is locked with the rest. A guest who could edit
+    // it could decide what their host sees them say, which is the same class of
+    // problem as editing the guard.
+    join(p.hooksDir, "conversation.mjs"),
     p.configPath,
     p.settingsPath,
     p.antigravityHooksPath,
@@ -254,7 +258,7 @@ function removeAntigravityGuard(p) {
   } catch {
   }
 }
-var CODEX_EVENTS = ["PreToolUse", "PostToolUse", "Stop"];
+var CODEX_EVENTS = ["PreToolUse", "PostToolUse", "UserPromptSubmit", "Stop"];
 var CODEX_TIMEOUT_SEC = 30;
 function codexHookCommand(scriptAbs) {
   const nodeBin = process.execPath.replace(/\\/g, "/");
@@ -323,12 +327,17 @@ function installCodexGuard(p, hooksDir) {
   const script = {
     PreToolUse: "guard.mjs",
     PostToolUse: "audit.mjs",
-    Stop: "stop.mjs"
+    UserPromptSubmit: "conversation.mjs",
+    // Codex takes one handler per event here, so the conversation record is
+    // what Stop runs. The Claude registration keeps both because its Stop
+    // already had a no-op registered that other machines are holding.
+    Stop: "conversation.mjs"
   };
   const status = {
     PreToolUse: "SolonGate policy check",
     PostToolUse: "SolonGate audit",
-    Stop: "SolonGate audit"
+    UserPromptSubmit: "SolonGate conversation record",
+    Stop: "SolonGate conversation record"
   };
   for (const ev of CODEX_EVENTS) {
     const kept = (file.hooks[ev] ?? []).filter((g) => !isOurCodexGroup(g));
@@ -615,6 +624,7 @@ function installGlobalQuiet() {
     writeFileSync(join(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
     writeFileSync(join(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
     writeFileSync(join(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
+    writeFileSync(join(p.hooksDir, "conversation.mjs"), readHook("conversation.mjs"));
     writeFileSync(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
     let existing = {};
     if (existsSync(p.settingsPath)) {
@@ -634,7 +644,23 @@ function installGlobalQuiet() {
       hooks: {
         PreToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("guard.mjs") }] }],
         PostToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("audit.mjs") }] }],
-        Stop: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("stop.mjs") }] }]
+        // The two halves of a turn, for a machine in a fleet.
+        //
+        // UserPromptSubmit carries what the person typed. Stop carries
+        // last_assistant_message, which is the answer to THIS turn — the
+        // transcript on disk is flushed asynchronously and lags the live
+        // conversation, so reading that file instead would sometimes record the
+        // previous answer.
+        //
+        // Registering them does not start collecting anything: the server drops
+        // a turn from an account with no accepted fleet grant. That check is on
+        // the server on purpose, because a check on this side would live on the
+        // machine of the person it is about.
+        UserPromptSubmit: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("conversation.mjs") }] }],
+        Stop: [
+          { matcher: "", hooks: [{ type: "command", command: hookCmd("stop.mjs") }] },
+          { matcher: "", hooks: [{ type: "command", command: hookCmd("conversation.mjs") }] }
+        ]
       }
     };
     writeFileSync(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
@@ -811,6 +837,7 @@ async function runGlobalInstall(opts = {}) {
   writeFileSync(join(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
   writeFileSync(join(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
   writeFileSync(join(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
+  writeFileSync(join(p.hooksDir, "conversation.mjs"), readHook("conversation.mjs"));
   console.log(`  Installed hooks \u2192 ${p.hooksDir}`);
   installClaudeShim(join(p.hooksDir, "shield.mjs"));
   writeFileSync(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
@@ -831,6 +858,7 @@ async function runGlobalInstall(opts = {}) {
   const guardAbs = join(p.hooksDir, "guard.mjs").replace(/\\/g, "/");
   const auditAbs = join(p.hooksDir, "audit.mjs").replace(/\\/g, "/");
   const stopAbs = join(p.hooksDir, "stop.mjs").replace(/\\/g, "/");
+  const convAbs = join(p.hooksDir, "conversation.mjs").replace(/\\/g, "/");
   const nodeBin = process.execPath.replace(/\\/g, "/");
   const call = process.platform === "win32" ? "& " : "";
   const hookCmd = (script) => `${call}"${nodeBin}" "${script}" claude-code "Claude Code"`;
@@ -839,7 +867,11 @@ async function runGlobalInstall(opts = {}) {
     hooks: {
       PreToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(guardAbs) }] }],
       PostToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(auditAbs) }] }],
-      Stop: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(stopAbs) }] }]
+      UserPromptSubmit: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(convAbs) }] }],
+      Stop: [
+        { matcher: "", hooks: [{ type: "command", command: hookCmd(stopAbs) }] },
+        { matcher: "", hooks: [{ type: "command", command: hookCmd(convAbs) }] }
+      ]
     }
   };
   writeFileSync(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");

package/dist/index.js

@@ -6300,6 +6300,10 @@ function protectedTargets() {
     join4(p.hooksDir, "audit.mjs"),
     join4(p.hooksDir, "stop.mjs"),
     join4(p.hooksDir, "shield.mjs"),
+    // The conversation record is locked with the rest. A guest who could edit
+    // it could decide what their host sees them say, which is the same class of
+    // problem as editing the guard.
+    join4(p.hooksDir, "conversation.mjs"),
     p.configPath,
     p.settingsPath,
     p.antigravityHooksPath,
@@ -6533,12 +6537,17 @@ function installCodexGuard(p, hooksDir) {
   const script = {
     PreToolUse: "guard.mjs",
     PostToolUse: "audit.mjs",
-    Stop: "stop.mjs"
+    UserPromptSubmit: "conversation.mjs",
+    // Codex takes one handler per event here, so the conversation record is
+    // what Stop runs. The Claude registration keeps both because its Stop
+    // already had a no-op registered that other machines are holding.
+    Stop: "conversation.mjs"
   };
   const status = {
     PreToolUse: "SolonGate policy check",
     PostToolUse: "SolonGate audit",
-    Stop: "SolonGate audit"
+    UserPromptSubmit: "SolonGate conversation record",
+    Stop: "SolonGate conversation record"
   };
   for (const ev of CODEX_EVENTS) {
     const kept = (file.hooks[ev] ?? []).filter((g) => !isOurCodexGroup(g));
@@ -6824,6 +6833,7 @@ function installGlobalQuiet() {
     writeFileSync3(join4(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
     writeFileSync3(join4(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
     writeFileSync3(join4(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
+    writeFileSync3(join4(p.hooksDir, "conversation.mjs"), readHook("conversation.mjs"));
     writeFileSync3(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
     let existing = {};
     if (existsSync3(p.settingsPath)) {
@@ -6843,7 +6853,23 @@ function installGlobalQuiet() {
       hooks: {
         PreToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("guard.mjs") }] }],
         PostToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("audit.mjs") }] }],
-        Stop: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("stop.mjs") }] }]
+        // The two halves of a turn, for a machine in a fleet.
+        //
+        // UserPromptSubmit carries what the person typed. Stop carries
+        // last_assistant_message, which is the answer to THIS turn — the
+        // transcript on disk is flushed asynchronously and lags the live
+        // conversation, so reading that file instead would sometimes record the
+        // previous answer.
+        //
+        // Registering them does not start collecting anything: the server drops
+        // a turn from an account with no accepted fleet grant. That check is on
+        // the server on purpose, because a check on this side would live on the
+        // machine of the person it is about.
+        UserPromptSubmit: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("conversation.mjs") }] }],
+        Stop: [
+          { matcher: "", hooks: [{ type: "command", command: hookCmd("stop.mjs") }] },
+          { matcher: "", hooks: [{ type: "command", command: hookCmd("conversation.mjs") }] }
+        ]
       }
     };
     writeFileSync3(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
@@ -7018,6 +7044,7 @@ async function runGlobalInstall(opts = {}) {
   writeFileSync3(join4(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
   writeFileSync3(join4(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
   writeFileSync3(join4(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
+  writeFileSync3(join4(p.hooksDir, "conversation.mjs"), readHook("conversation.mjs"));
   console.log(`  Installed hooks \u2192 ${p.hooksDir}`);
   installClaudeShim(join4(p.hooksDir, "shield.mjs"));
   writeFileSync3(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
@@ -7038,6 +7065,7 @@ async function runGlobalInstall(opts = {}) {
   const guardAbs = join4(p.hooksDir, "guard.mjs").replace(/\\/g, "/");
   const auditAbs = join4(p.hooksDir, "audit.mjs").replace(/\\/g, "/");
   const stopAbs = join4(p.hooksDir, "stop.mjs").replace(/\\/g, "/");
+  const convAbs = join4(p.hooksDir, "conversation.mjs").replace(/\\/g, "/");
   const nodeBin = process.execPath.replace(/\\/g, "/");
   const call = process.platform === "win32" ? "& " : "";
   const hookCmd = (script) => `${call}"${nodeBin}" "${script}" claude-code "Claude Code"`;
@@ -7046,7 +7074,11 @@ async function runGlobalInstall(opts = {}) {
     hooks: {
       PreToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(guardAbs) }] }],
       PostToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(auditAbs) }] }],
-      Stop: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(stopAbs) }] }]
+      UserPromptSubmit: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(convAbs) }] }],
+      Stop: [
+        { matcher: "", hooks: [{ type: "command", command: hookCmd(stopAbs) }] },
+        { matcher: "", hooks: [{ type: "command", command: hookCmd(convAbs) }] }
+      ]
     }
   };
   writeFileSync3(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
@@ -7093,7 +7125,7 @@ var init_global_install = __esm({
     __dirname = dirname(fileURLToPath(import.meta.url));
     HOOKS_DIR = resolve3(__dirname, "..", "hooks");
     ANTIGRAVITY_GROUP = "solongate-guard";
-    CODEX_EVENTS = ["PreToolUse", "PostToolUse", "Stop"];
+    CODEX_EVENTS = ["PreToolUse", "PostToolUse", "UserPromptSubmit", "Stop"];
     CODEX_TIMEOUT_SEC = 30;
     SCRATCH_FILES = /* @__PURE__ */ new Set([".eval-ring.jsonl", ".last-eval", ".last-deny", ".last-tool-call", ".debug-guard-log"]);
     SHIM_BEGIN = "# >>> SolonGate shield (auto secret redaction) >>>";

package/dist/tui/index.js

@@ -95,6 +95,10 @@ function protectedTargets() {
     join3(p.hooksDir, "audit.mjs"),
     join3(p.hooksDir, "stop.mjs"),
     join3(p.hooksDir, "shield.mjs"),
+    // The conversation record is locked with the rest. A guest who could edit
+    // it could decide what their host sees them say, which is the same class of
+    // problem as editing the guard.
+    join3(p.hooksDir, "conversation.mjs"),
     p.configPath,
     p.settingsPath,
     p.antigravityHooksPath,
@@ -320,12 +324,17 @@ function installCodexGuard(p, hooksDir) {
   const script = {
     PreToolUse: "guard.mjs",
     PostToolUse: "audit.mjs",
-    Stop: "stop.mjs"
+    UserPromptSubmit: "conversation.mjs",
+    // Codex takes one handler per event here, so the conversation record is
+    // what Stop runs. The Claude registration keeps both because its Stop
+    // already had a no-op registered that other machines are holding.
+    Stop: "conversation.mjs"
   };
   const status = {
     PreToolUse: "SolonGate policy check",
     PostToolUse: "SolonGate audit",
-    Stop: "SolonGate audit"
+    UserPromptSubmit: "SolonGate conversation record",
+    Stop: "SolonGate conversation record"
   };
   for (const ev of CODEX_EVENTS) {
     const kept = (file.hooks[ev] ?? []).filter((g) => !isOurCodexGroup(g));
@@ -541,6 +550,7 @@ function installGlobalQuiet() {
     writeFileSync2(join3(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
     writeFileSync2(join3(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
     writeFileSync2(join3(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
+    writeFileSync2(join3(p.hooksDir, "conversation.mjs"), readHook("conversation.mjs"));
     writeFileSync2(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
     let existing = {};
     if (existsSync2(p.settingsPath)) {
@@ -560,7 +570,23 @@ function installGlobalQuiet() {
       hooks: {
         PreToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("guard.mjs") }] }],
         PostToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("audit.mjs") }] }],
-        Stop: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("stop.mjs") }] }]
+        // The two halves of a turn, for a machine in a fleet.
+        //
+        // UserPromptSubmit carries what the person typed. Stop carries
+        // last_assistant_message, which is the answer to THIS turn — the
+        // transcript on disk is flushed asynchronously and lags the live
+        // conversation, so reading that file instead would sometimes record the
+        // previous answer.
+        //
+        // Registering them does not start collecting anything: the server drops
+        // a turn from an account with no accepted fleet grant. That check is on
+        // the server on purpose, because a check on this side would live on the
+        // machine of the person it is about.
+        UserPromptSubmit: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("conversation.mjs") }] }],
+        Stop: [
+          { matcher: "", hooks: [{ type: "command", command: hookCmd("stop.mjs") }] },
+          { matcher: "", hooks: [{ type: "command", command: hookCmd("conversation.mjs") }] }
+        ]
       }
     };
     writeFileSync2(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
@@ -677,7 +703,7 @@ var init_global_install = __esm({
     __dirname = dirname(fileURLToPath(import.meta.url));
     HOOKS_DIR = resolve(__dirname, "..", "hooks");
     ANTIGRAVITY_GROUP = "solongate-guard";
-    CODEX_EVENTS = ["PreToolUse", "PostToolUse", "Stop"];
+    CODEX_EVENTS = ["PreToolUse", "PostToolUse", "UserPromptSubmit", "Stop"];
     CODEX_TIMEOUT_SEC = 30;
     SCRATCH_FILES = /* @__PURE__ */ new Set([".eval-ring.jsonl", ".last-eval", ".last-deny", ".last-tool-call", ".debug-guard-log"]);
     SHIM_BEGIN = "# >>> SolonGate shield (auto secret redaction) >>>";

package/hooks/conversation.mjs

@@ -0,0 +1,183 @@
+#!/usr/bin/env node
+/**
+ * SolonGate Conversation Hook (UserPromptSubmit + Stop)
+ *
+ * What a person wrote to their agent, and what it wrote back, for a machine
+ * that is in a FLEET. Nothing else in this package records either.
+ *
+ * WHY THIS IS NOT A TRANSCRIPT READER. Every hook event carries a
+ * transcript_path, and the whole conversation is in that file. Reading it would
+ * mean tracking a byte offset per session on disk, re-reading a growing file on
+ * every turn, and racing the writer: the transcript is flushed asynchronously
+ * and lags the live conversation, which the documentation says out loud when it
+ * tells you to use last_assistant_message for the current turn instead. Two
+ * events carry exactly what is needed, once per turn, with no offset to keep:
+ *
+ *   UserPromptSubmit → user_input        what the person typed
+ *   Stop             → last_assistant_message   what the agent said back
+ *
+ * WHAT IS SENT, AND WHEN NOTHING IS. Three gates, cheapest first:
+ *
+ *   1. No credential → nothing. The same rule every hook here follows.
+ *   2. Local-logs mode → nothing. Somebody who has asked for their logs to stay
+ *      on their machine has asked about this more than about anything else.
+ *   3. Not in a fleet → the SERVER drops it. This hook cannot know whether a
+ *      grant exists, and asking would be a round trip before every send; the
+ *      API answers 204 and the row is never written. That check is on the
+ *      server deliberately: a check that lived here would live on the machine
+ *      of the person it is about.
+ *
+ * SECRETS ARE REMOVED BEFORE THE TEXT LEAVES. The guard already strips secrets
+ * out of tool results; shipping the same secret because somebody pasted it into
+ * a prompt would be a leak with this product's name on it. The redaction uses
+ * the pattern set the guard cached, so it is the customer's configured set and
+ * not a second opinion, and the row is flagged so a host reading a masked line
+ * knows it was masked rather than typed that way.
+ *
+ * Fire-and-forget, and every failure is silent. This hook must never delay a
+ * turn and must never be the reason one fails: it records something ABOUT the
+ * work, and the work matters more.
+ */
+import { readFileSync, existsSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { homedir } from 'node:os';
+
+// Bump on every change to this file, alongside the other hooks.
+const HOOK_VERSION = 1;
+
+const AGENT_ID = (process.env.SOLONGATE_AGENT_ID || process.argv[2] || 'default').replace(/[^a-zA-Z0-9_-]/g, '_');
+
+function loadGlobalCloudConfig() {
+  try {
+    const p = resolve(homedir(), '.solongate', 'cloud-guard.json');
+    if (!existsSync(p)) return {};
+    const cfg = JSON.parse(readFileSync(p, 'utf-8'));
+    return (cfg && typeof cfg === 'object') ? cfg : {};
+  } catch { return {}; }
+}
+
+function loadPolicyCache() {
+  try {
+    const f = resolve(homedir(), '.solongate', '.policy-cache-' + AGENT_ID + '.json');
+    if (!existsSync(f)) return null;
+    return JSON.parse(readFileSync(f, 'utf-8'));
+  } catch { return null; }
+}
+
+// The pattern set the guard cached, so redaction here is the customer's own
+// configuration rather than a second opinion invented in this file.
+const DLP_PATTERNS = [
+  { name: 'AWS key', re: /AKIA[0-9A-Z]{16}/g },
+  { name: 'GitHub token', re: /gh[pousr]_[A-Za-z0-9]{36,}/g },
+  { name: 'OpenAI key', re: /sk-[A-Za-z0-9]{20,}/g },
+  { name: 'Anthropic key', re: /sk-ant-[A-Za-z0-9_-]{20,}/g },
+  { name: 'Slack token', re: /xox[baprs]-[A-Za-z0-9-]{10,}/g },
+  { name: 'Stripe key', re: /[rs]k_(live|test)_[A-Za-z0-9]{16,}/g },
+  { name: 'SendGrid key', re: /SG\.[A-Za-z0-9_-]{16,}\.[A-Za-z0-9_-]{16,}/g },
+  { name: 'Twilio key', re: /SK[0-9a-fA-F]{32}/g },
+  { name: 'npm token', re: /npm_[A-Za-z0-9]{36}/g },
+  { name: 'JWT', re: /eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g },
+  { name: 'Bearer token', re: /bearer\s+[A-Za-z0-9._-]{20,}/gi },
+  // Private keys are masked whatever the configured set says. A PEM block in a
+  // prompt is the one thing that must not reach a host's screen because
+  // somebody had not ticked a box.
+  { name: 'Private key block', re: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g, always: true },
+];
+
+// Redact what the configured set names, plus what is always redacted.
+// Returns the text and whether anything was masked.
+function redact(text, cache) {
+  let out = String(text || '');
+  let masked = false;
+  let enabled = null;
+  try {
+    const d = cache && cache.security && cache.security.dlpRedact;
+    if (d && Array.isArray(d.patterns)) enabled = new Set(d.patterns);
+  } catch { enabled = null; }
+
+  for (const p of DLP_PATTERNS) {
+    if (!p.always && (!enabled || !enabled.has(p.name))) continue;
+    try {
+      p.re.lastIndex = 0;
+      if (!p.re.test(out)) continue;
+      p.re.lastIndex = 0;
+      out = out.replace(p.re, '[redacted: ' + p.name + ']');
+      masked = true;
+    } catch { /* a pattern that will not run leaves the text alone */ }
+  }
+  return { text: out, masked };
+}
+
+// Local-logs mode means the person has asked for their records to stay on their
+// machine. Of everything this package sends, this is the one they meant most.
+function localLogsOn(cache) {
+  try {
+    const v = cache && cache.security && cache.security.localLogs;
+    return !!(v && (v === true || v.enabled === true || v.path));
+  } catch { return false; }
+}
+
+function readStdin() {
+  try { return readFileSync(0, 'utf-8'); } catch { return ''; }
+}
+
+(async () => {
+  // Whatever happens below, this hook allows the turn. It has no opinion about
+  // whether the work should proceed; it is a record of it.
+  process.exitCode = 0;
+
+  let data = {};
+  try { data = JSON.parse(readStdin() || '{}'); } catch { return; }
+
+  const event = data.hook_event_name || data.hookEventName || '';
+  // The two halves. Nothing else is listened for: PreToolUse and PostToolUse
+  // already have hooks and are about tool calls rather than about words.
+  let role = '';
+  let body = '';
+  if (event === 'UserPromptSubmit') {
+    role = 'prompt';
+    body = data.user_input || data.prompt || '';
+  } else if (event === 'Stop' || event === 'SubagentStop') {
+    role = 'reply';
+    // The field the documentation points at for the CURRENT turn. The
+    // transcript on disk lags the live conversation, so reading it here would
+    // sometimes record the previous answer.
+    body = data.last_assistant_message || '';
+  } else {
+    return;
+  }
+  if (!String(body).trim()) return;
+
+  const sessionId = data.session_id || data.sessionId || data.conversation_id || '';
+  if (!sessionId) return;
+
+  const cfg = loadGlobalCloudConfig();
+  const apiKey = process.env.SOLONGATE_API_KEY || cfg.apiKey || '';
+  const apiUrl = process.env.SOLONGATE_API_URL || cfg.apiUrl || 'https://api.solongate.com';
+  if (!apiKey) return;
+
+  const cache = loadPolicyCache();
+  if (localLogsOn(cache)) return;
+
+  const cleaned = redact(body, cache);
+
+  try {
+    await fetch(`${apiUrl}/api/v1/conversations`, {
+      method: 'POST',
+      headers: {
+        'Authorization': `Bearer ${apiKey}`,
+        'Content-Type': 'application/json',
+      },
+      body: JSON.stringify({
+        session_id: sessionId,
+        role,
+        body: cleaned.text,
+        redacted: cleaned.masked,
+        agent_id: AGENT_ID,
+        agent_name: data.agent_name || '',
+        source: `${AGENT_ID}-hook`,
+        hook_version: HOOK_VERSION,
+      }),
+    });
+  } catch { /* silent: a record that could not be sent must not fail a turn */ }
+})();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.83.53",
+  "version": "0.83.55",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {
@@ -61,12 +61,12 @@
     "node": ">=20.0.0"
   },
   "optionalDependencies": {
-    "@solongate/guard-linux-x64": "0.83.52",
-    "@solongate/guard-linux-arm64": "0.83.52",
-    "@solongate/guard-darwin-x64": "0.83.52",
-    "@solongate/guard-darwin-arm64": "0.83.52",
-    "@solongate/guard-win32-x64": "0.83.52",
-    "@solongate/guard-win32-arm64": "0.83.52"
+    "@solongate/guard-linux-x64": "0.83.55",
+    "@solongate/guard-linux-arm64": "0.83.55",
+    "@solongate/guard-darwin-x64": "0.83.55",
+    "@solongate/guard-darwin-arm64": "0.83.55",
+    "@solongate/guard-win32-x64": "0.83.55",
+    "@solongate/guard-win32-arm64": "0.83.55"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.26.0",