@solongate/proxy 0.83.54 → 0.83.56

package/dist/api-client/audit.d.ts

@@ -12,19 +12,6 @@ export interface AuditQuery {
     signal?: 'dlp' | 'ratelimit';
 }
 export declare function list(query?: AuditQuery): Promise<AuditList>;
-export declare function remove(ids: string[]): Promise<{
-    deleted: {
-        logs: number;
-        agents: number;
-    };
-}>;
-/** Deletes EVERY audit log of the project (agents/sessions are kept). */
-export declare function removeAll(): Promise<{
-    deleted: {
-        logs: number;
-        agents: number;
-    };
-}>;
 export declare function whitelist(id: string, scope?: 'exact' | 'tool'): Promise<{
     ok: true;
     deduped: boolean;

package/dist/commands/index.js

@@ -480,19 +480,11 @@ var audit_exports = {};
 __export(audit_exports, {
   block: () => block,
   list: () => list2,
-  remove: () => remove2,
-  removeAll: () => removeAll,
   whitelist: () => whitelist
 });
 function list2(query = {}) {
   return request("GET", "/audit-logs", { query });
 }
-function remove2(ids) {
-  return request("DELETE", "/audit-logs", { body: { ids } });
-}
-function removeAll() {
-  return request("DELETE", "/audit-logs", { body: { scope: "logs" } });
-}
 function whitelist(id, scope = "exact") {
   return request("POST", `/audit-logs/${encodeURIComponent(id)}/whitelist`, { body: { scope } });
 }

package/dist/global-install.js

@@ -87,6 +87,10 @@ function protectedTargets() {
     join(p.hooksDir, "audit.mjs"),
     join(p.hooksDir, "stop.mjs"),
     join(p.hooksDir, "shield.mjs"),
+    // The conversation record is locked with the rest. A guest who could edit
+    // it could decide what their host sees them say, which is the same class of
+    // problem as editing the guard.
+    join(p.hooksDir, "conversation.mjs"),
     p.configPath,
     p.settingsPath,
     p.antigravityHooksPath,
@@ -254,7 +258,7 @@ function removeAntigravityGuard(p) {
   } catch {
   }
 }
-var CODEX_EVENTS = ["PreToolUse", "PostToolUse", "Stop"];
+var CODEX_EVENTS = ["PreToolUse", "PostToolUse", "UserPromptSubmit", "Stop"];
 var CODEX_TIMEOUT_SEC = 30;
 function codexHookCommand(scriptAbs) {
   const nodeBin = process.execPath.replace(/\\/g, "/");
@@ -323,12 +327,17 @@ function installCodexGuard(p, hooksDir) {
   const script = {
     PreToolUse: "guard.mjs",
     PostToolUse: "audit.mjs",
-    Stop: "stop.mjs"
+    UserPromptSubmit: "conversation.mjs",
+    // Codex takes one handler per event here, so the conversation record is
+    // what Stop runs. The Claude registration keeps both because its Stop
+    // already had a no-op registered that other machines are holding.
+    Stop: "conversation.mjs"
   };
   const status = {
     PreToolUse: "SolonGate policy check",
     PostToolUse: "SolonGate audit",
-    Stop: "SolonGate audit"
+    UserPromptSubmit: "SolonGate conversation record",
+    Stop: "SolonGate conversation record"
   };
   for (const ev of CODEX_EVENTS) {
     const kept = (file.hooks[ev] ?? []).filter((g) => !isOurCodexGroup(g));
@@ -615,6 +624,7 @@ function installGlobalQuiet() {
     writeFileSync(join(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
     writeFileSync(join(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
     writeFileSync(join(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
+    writeFileSync(join(p.hooksDir, "conversation.mjs"), readHook("conversation.mjs"));
     writeFileSync(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
     let existing = {};
     if (existsSync(p.settingsPath)) {
@@ -634,7 +644,23 @@ function installGlobalQuiet() {
       hooks: {
         PreToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("guard.mjs") }] }],
         PostToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("audit.mjs") }] }],
-        Stop: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("stop.mjs") }] }]
+        // The two halves of a turn, for a machine in a fleet.
+        //
+        // UserPromptSubmit carries what the person typed. Stop carries
+        // last_assistant_message, which is the answer to THIS turn — the
+        // transcript on disk is flushed asynchronously and lags the live
+        // conversation, so reading that file instead would sometimes record the
+        // previous answer.
+        //
+        // Registering them does not start collecting anything: the server drops
+        // a turn from an account with no accepted fleet grant. That check is on
+        // the server on purpose, because a check on this side would live on the
+        // machine of the person it is about.
+        UserPromptSubmit: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("conversation.mjs") }] }],
+        Stop: [
+          { matcher: "", hooks: [{ type: "command", command: hookCmd("stop.mjs") }] },
+          { matcher: "", hooks: [{ type: "command", command: hookCmd("conversation.mjs") }] }
+        ]
       }
     };
     writeFileSync(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
@@ -811,6 +837,7 @@ async function runGlobalInstall(opts = {}) {
   writeFileSync(join(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
   writeFileSync(join(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
   writeFileSync(join(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
+  writeFileSync(join(p.hooksDir, "conversation.mjs"), readHook("conversation.mjs"));
   console.log(`  Installed hooks \u2192 ${p.hooksDir}`);
   installClaudeShim(join(p.hooksDir, "shield.mjs"));
   writeFileSync(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
@@ -831,6 +858,7 @@ async function runGlobalInstall(opts = {}) {
   const guardAbs = join(p.hooksDir, "guard.mjs").replace(/\\/g, "/");
   const auditAbs = join(p.hooksDir, "audit.mjs").replace(/\\/g, "/");
   const stopAbs = join(p.hooksDir, "stop.mjs").replace(/\\/g, "/");
+  const convAbs = join(p.hooksDir, "conversation.mjs").replace(/\\/g, "/");
   const nodeBin = process.execPath.replace(/\\/g, "/");
   const call = process.platform === "win32" ? "& " : "";
   const hookCmd = (script) => `${call}"${nodeBin}" "${script}" claude-code "Claude Code"`;
@@ -839,7 +867,11 @@ async function runGlobalInstall(opts = {}) {
     hooks: {
       PreToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(guardAbs) }] }],
       PostToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(auditAbs) }] }],
-      Stop: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(stopAbs) }] }]
+      UserPromptSubmit: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(convAbs) }] }],
+      Stop: [
+        { matcher: "", hooks: [{ type: "command", command: hookCmd(stopAbs) }] },
+        { matcher: "", hooks: [{ type: "command", command: hookCmd(convAbs) }] }
+      ]
     }
   };
   writeFileSync(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");

package/dist/index.js

@@ -6300,6 +6300,10 @@ function protectedTargets() {
     join4(p.hooksDir, "audit.mjs"),
     join4(p.hooksDir, "stop.mjs"),
     join4(p.hooksDir, "shield.mjs"),
+    // The conversation record is locked with the rest. A guest who could edit
+    // it could decide what their host sees them say, which is the same class of
+    // problem as editing the guard.
+    join4(p.hooksDir, "conversation.mjs"),
     p.configPath,
     p.settingsPath,
     p.antigravityHooksPath,
@@ -6533,12 +6537,17 @@ function installCodexGuard(p, hooksDir) {
   const script = {
     PreToolUse: "guard.mjs",
     PostToolUse: "audit.mjs",
-    Stop: "stop.mjs"
+    UserPromptSubmit: "conversation.mjs",
+    // Codex takes one handler per event here, so the conversation record is
+    // what Stop runs. The Claude registration keeps both because its Stop
+    // already had a no-op registered that other machines are holding.
+    Stop: "conversation.mjs"
   };
   const status = {
     PreToolUse: "SolonGate policy check",
     PostToolUse: "SolonGate audit",
-    Stop: "SolonGate audit"
+    UserPromptSubmit: "SolonGate conversation record",
+    Stop: "SolonGate conversation record"
   };
   for (const ev of CODEX_EVENTS) {
     const kept = (file.hooks[ev] ?? []).filter((g) => !isOurCodexGroup(g));
@@ -6824,6 +6833,7 @@ function installGlobalQuiet() {
     writeFileSync3(join4(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
     writeFileSync3(join4(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
     writeFileSync3(join4(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
+    writeFileSync3(join4(p.hooksDir, "conversation.mjs"), readHook("conversation.mjs"));
     writeFileSync3(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
     let existing = {};
     if (existsSync3(p.settingsPath)) {
@@ -6843,7 +6853,23 @@ function installGlobalQuiet() {
       hooks: {
         PreToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("guard.mjs") }] }],
         PostToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("audit.mjs") }] }],
-        Stop: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("stop.mjs") }] }]
+        // The two halves of a turn, for a machine in a fleet.
+        //
+        // UserPromptSubmit carries what the person typed. Stop carries
+        // last_assistant_message, which is the answer to THIS turn — the
+        // transcript on disk is flushed asynchronously and lags the live
+        // conversation, so reading that file instead would sometimes record the
+        // previous answer.
+        //
+        // Registering them does not start collecting anything: the server drops
+        // a turn from an account with no accepted fleet grant. That check is on
+        // the server on purpose, because a check on this side would live on the
+        // machine of the person it is about.
+        UserPromptSubmit: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("conversation.mjs") }] }],
+        Stop: [
+          { matcher: "", hooks: [{ type: "command", command: hookCmd("stop.mjs") }] },
+          { matcher: "", hooks: [{ type: "command", command: hookCmd("conversation.mjs") }] }
+        ]
       }
     };
     writeFileSync3(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
@@ -7018,6 +7044,7 @@ async function runGlobalInstall(opts = {}) {
   writeFileSync3(join4(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
   writeFileSync3(join4(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
   writeFileSync3(join4(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
+  writeFileSync3(join4(p.hooksDir, "conversation.mjs"), readHook("conversation.mjs"));
   console.log(`  Installed hooks \u2192 ${p.hooksDir}`);
   installClaudeShim(join4(p.hooksDir, "shield.mjs"));
   writeFileSync3(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
@@ -7038,6 +7065,7 @@ async function runGlobalInstall(opts = {}) {
   const guardAbs = join4(p.hooksDir, "guard.mjs").replace(/\\/g, "/");
   const auditAbs = join4(p.hooksDir, "audit.mjs").replace(/\\/g, "/");
   const stopAbs = join4(p.hooksDir, "stop.mjs").replace(/\\/g, "/");
+  const convAbs = join4(p.hooksDir, "conversation.mjs").replace(/\\/g, "/");
   const nodeBin = process.execPath.replace(/\\/g, "/");
   const call = process.platform === "win32" ? "& " : "";
   const hookCmd = (script) => `${call}"${nodeBin}" "${script}" claude-code "Claude Code"`;
@@ -7046,7 +7074,11 @@ async function runGlobalInstall(opts = {}) {
     hooks: {
       PreToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(guardAbs) }] }],
       PostToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(auditAbs) }] }],
-      Stop: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(stopAbs) }] }]
+      UserPromptSubmit: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(convAbs) }] }],
+      Stop: [
+        { matcher: "", hooks: [{ type: "command", command: hookCmd(stopAbs) }] },
+        { matcher: "", hooks: [{ type: "command", command: hookCmd(convAbs) }] }
+      ]
     }
   };
   writeFileSync3(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
@@ -7093,7 +7125,7 @@ var init_global_install = __esm({
     __dirname = dirname(fileURLToPath(import.meta.url));
     HOOKS_DIR = resolve3(__dirname, "..", "hooks");
     ANTIGRAVITY_GROUP = "solongate-guard";
-    CODEX_EVENTS = ["PreToolUse", "PostToolUse", "Stop"];
+    CODEX_EVENTS = ["PreToolUse", "PostToolUse", "UserPromptSubmit", "Stop"];
     CODEX_TIMEOUT_SEC = 30;
     SCRATCH_FILES = /* @__PURE__ */ new Set([".eval-ring.jsonl", ".last-eval", ".last-deny", ".last-tool-call", ".debug-guard-log"]);
     SHIM_BEGIN = "# >>> SolonGate shield (auto secret redaction) >>>";
@@ -7894,31 +7926,6 @@ function tailLines(file, maxBytes = 131072) {
     return [];
   }
 }
-function deleteLocalEntry(at, tool, session) {
-  try {
-    const file = localLogFile();
-    const lines = readFileSync8(file, "utf-8").split("\n");
-    let removed = 0;
-    const kept = lines.filter((line) => {
-      if (!line.trim()) return false;
-      if (removed) return true;
-      try {
-        const j = JSON.parse(line);
-        const hit = Date.parse(j.ts ?? "") === at && (j.tool ?? "?") === tool && (!session || j.session_id === session);
-        if (hit) {
-          removed++;
-          return false;
-        }
-      } catch {
-      }
-      return true;
-    });
-    if (removed) writeFileSync6(file, kept.length ? kept.join("\n") + "\n" : "");
-    return removed;
-  } catch {
-    return 0;
-  }
-}
 function clearLocalLog() {
   try {
     const file = localLogFile();
@@ -8463,19 +8470,11 @@ var audit_exports = {};
 __export(audit_exports, {
   block: () => block,
   list: () => list2,
-  remove: () => remove2,
-  removeAll: () => removeAll,
   whitelist: () => whitelist
 });
 function list2(query = {}) {
   return request("GET", "/audit-logs", { query });
 }
-function remove2(ids) {
-  return request("DELETE", "/audit-logs", { body: { ids } });
-}
-function removeAll() {
-  return request("DELETE", "/audit-logs", { body: { scope: "logs" } });
-}
 function whitelist(id, scope = "exact") {
   return request("POST", `/audit-logs/${encodeURIComponent(id)}/whitelist`, { body: { scope } });
 }
@@ -11006,7 +11005,6 @@ function AuditPanel({ active: active2, focused }) {
   const [si, setSi] = useState7(0);
   const [sessSearch, setSessSearch] = useState7("");
   const [sessSel, setSessSel] = useState7(0);
-  const [confirm, setConfirm] = useState7(null);
   const [msg, setMsg] = useState7(null);
   const [showHelp, setShowHelp] = useState7(false);
   const [frozen, setFrozen] = useState7(false);
@@ -11088,29 +11086,6 @@ function AuditPanel({ active: active2, focused }) {
   const currentSess = sessionsFiltered[Math.min(sessSel, Math.max(0, sessionsFiltered.length - 1))];
   const logsLoading = (source === "cloud" ? cloudQ.loading : localQ.loading) && !editing;
   const sessLoading = source === "cloud" ? agentsQ.loading : localQ.loading;
-  const doDelete = (kind) => {
-    setMsg({ text: "deleting\u2026", level: "ok" });
-    const run12 = async () => {
-      if (source === "cloud") {
-        if (kind === "one") {
-          if (!current) throw new Error("nothing selected");
-          await api.audit.remove([current.id]);
-        } else {
-          await api.audit.removeAll();
-        }
-        cloudQ.reload();
-        statsQ.reloadQuiet();
-      } else {
-        const n = kind === "one" && current ? deleteLocalEntry(current.at, current.tool, current.session) : kind === "all" ? clearLocalLog() : 0;
-        if (!n) throw new Error("entry not found in the local file");
-        localQ.reload();
-      }
-    };
-    run12().then(() => {
-      setMsg({ text: kind === "one" ? "\u2713 entry deleted" : `\u2713 ALL ${source} logs deleted`, level: "ok" });
-      toTop();
-    }).catch((e) => setMsg({ text: "\u2717 " + (e instanceof Error ? e.message : String(e)), level: "bad" }));
-  };
   const doExport = (kind) => {
     setMsg({ text: "exporting\u2026", level: "ok" });
     const run12 = async () => {
@@ -11161,8 +11136,7 @@ function AuditPanel({ active: active2, focused }) {
         return;
       }
       if (view === "logs" ? logsLoading : sessLoading) return;
-      if (confirm && input !== "x" && input !== "X") {
-        setConfirm(null);
+      if (msg) {
         setMsg(null);
       }
       if (input === "s") {
@@ -11226,23 +11200,6 @@ function AuditPanel({ active: active2, focused }) {
         setGi((n) => (n + 1) % SIGNALS.length);
         setPage(0);
         toTop();
-      } else if (input === "x") {
-        if (!current) return;
-        if (confirm?.kind !== "one" || confirm.key !== current.id) {
-          setConfirm({ kind: "one", key: current.id });
-          setMsg({ text: `x = delete ONLY the selected entry: ${current.decision} ${current.tool} (${ago(current.at)} ago) \u2014 press x again`, level: "bad" });
-          return;
-        }
-        setConfirm(null);
-        doDelete("one");
-      } else if (input === "X") {
-        if (confirm?.kind !== "all") {
-          setConfirm({ kind: "all", key: "all" });
-          setMsg({ text: `\u26A0 X = delete ALL ${source} logs \u2014 every one of the ${total} matched entries! press X again`, level: "bad" });
-          return;
-        }
-        setConfirm(null);
-        doDelete("all");
       } else if (input === "e") doExport("page");
       else if (input === "E") doExport("all");
       else if (input === "t") setEditing("tool");
@@ -11556,8 +11513,6 @@ var init_Audit = __esm({
           ["g", "signal filter: all \u2192 dlp \u2192 ratelimit"],
           ["t / n", "tool / agent filter (type, enter done)"],
           ["/", "free-text search"],
-          ["x", "delete ONLY the selected entry (press x twice)"],
-          ["X", "delete ALL matched logs of the source (press X twice)"],
           ["e", "export this page \u2192 ~/.solongate/audit-export-<src>.jsonl"],
           ["E", "export ALL matched rows (cloud: up to 10k)"],
           ["c", "clear every filter (incl. session)"]

package/dist/tui/index.js

@@ -95,6 +95,10 @@ function protectedTargets() {
     join3(p.hooksDir, "audit.mjs"),
     join3(p.hooksDir, "stop.mjs"),
     join3(p.hooksDir, "shield.mjs"),
+    // The conversation record is locked with the rest. A guest who could edit
+    // it could decide what their host sees them say, which is the same class of
+    // problem as editing the guard.
+    join3(p.hooksDir, "conversation.mjs"),
     p.configPath,
     p.settingsPath,
     p.antigravityHooksPath,
@@ -320,12 +324,17 @@ function installCodexGuard(p, hooksDir) {
   const script = {
     PreToolUse: "guard.mjs",
     PostToolUse: "audit.mjs",
-    Stop: "stop.mjs"
+    UserPromptSubmit: "conversation.mjs",
+    // Codex takes one handler per event here, so the conversation record is
+    // what Stop runs. The Claude registration keeps both because its Stop
+    // already had a no-op registered that other machines are holding.
+    Stop: "conversation.mjs"
   };
   const status = {
     PreToolUse: "SolonGate policy check",
     PostToolUse: "SolonGate audit",
-    Stop: "SolonGate audit"
+    UserPromptSubmit: "SolonGate conversation record",
+    Stop: "SolonGate conversation record"
   };
   for (const ev of CODEX_EVENTS) {
     const kept = (file.hooks[ev] ?? []).filter((g) => !isOurCodexGroup(g));
@@ -541,6 +550,7 @@ function installGlobalQuiet() {
     writeFileSync2(join3(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
     writeFileSync2(join3(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
     writeFileSync2(join3(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
+    writeFileSync2(join3(p.hooksDir, "conversation.mjs"), readHook("conversation.mjs"));
     writeFileSync2(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
     let existing = {};
     if (existsSync2(p.settingsPath)) {
@@ -560,7 +570,23 @@ function installGlobalQuiet() {
       hooks: {
         PreToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("guard.mjs") }] }],
         PostToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("audit.mjs") }] }],
-        Stop: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("stop.mjs") }] }]
+        // The two halves of a turn, for a machine in a fleet.
+        //
+        // UserPromptSubmit carries what the person typed. Stop carries
+        // last_assistant_message, which is the answer to THIS turn — the
+        // transcript on disk is flushed asynchronously and lags the live
+        // conversation, so reading that file instead would sometimes record the
+        // previous answer.
+        //
+        // Registering them does not start collecting anything: the server drops
+        // a turn from an account with no accepted fleet grant. That check is on
+        // the server on purpose, because a check on this side would live on the
+        // machine of the person it is about.
+        UserPromptSubmit: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("conversation.mjs") }] }],
+        Stop: [
+          { matcher: "", hooks: [{ type: "command", command: hookCmd("stop.mjs") }] },
+          { matcher: "", hooks: [{ type: "command", command: hookCmd("conversation.mjs") }] }
+        ]
       }
     };
     writeFileSync2(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
@@ -677,7 +703,7 @@ var init_global_install = __esm({
     __dirname = dirname(fileURLToPath(import.meta.url));
     HOOKS_DIR = resolve(__dirname, "..", "hooks");
     ANTIGRAVITY_GROUP = "solongate-guard";
-    CODEX_EVENTS = ["PreToolUse", "PostToolUse", "Stop"];
+    CODEX_EVENTS = ["PreToolUse", "PostToolUse", "UserPromptSubmit", "Stop"];
     CODEX_TIMEOUT_SEC = 30;
     SCRATCH_FILES = /* @__PURE__ */ new Set([".eval-ring.jsonl", ".last-eval", ".last-deny", ".last-tool-call", ".debug-guard-log"]);
     SHIM_BEGIN = "# >>> SolonGate shield (auto secret redaction) >>>";
@@ -998,31 +1024,6 @@ function tailLines(file, maxBytes = 131072) {
     return [];
   }
 }
-function deleteLocalEntry(at, tool, session) {
-  try {
-    const file = localLogFile();
-    const lines = readFileSync2(file, "utf-8").split("\n");
-    let removed = 0;
-    const kept = lines.filter((line) => {
-      if (!line.trim()) return false;
-      if (removed) return true;
-      try {
-        const j = JSON.parse(line);
-        const hit = Date.parse(j.ts ?? "") === at && (j.tool ?? "?") === tool && (!session || j.session_id === session);
-        if (hit) {
-          removed++;
-          return false;
-        }
-      } catch {
-      }
-      return true;
-    });
-    if (removed) writeFileSync(file, kept.length ? kept.join("\n") + "\n" : "");
-    return removed;
-  } catch {
-    return 0;
-  }
-}
 function clearLocalLog() {
   try {
     const file = localLogFile();
@@ -1519,19 +1520,11 @@ var audit_exports = {};
 __export(audit_exports, {
   block: () => block,
   list: () => list2,
-  remove: () => remove2,
-  removeAll: () => removeAll,
   whitelist: () => whitelist
 });
 function list2(query = {}) {
   return request("GET", "/audit-logs", { query });
 }
-function remove2(ids) {
-  return request("DELETE", "/audit-logs", { body: { ids } });
-}
-function removeAll() {
-  return request("DELETE", "/audit-logs", { body: { scope: "logs" } });
-}
 function whitelist(id, scope = "exact") {
   return request("POST", `/audit-logs/${encodeURIComponent(id)}/whitelist`, { body: { scope } });
 }
@@ -3977,8 +3970,6 @@ var AUDIT_HELP = [
       ["g", "signal filter: all \u2192 dlp \u2192 ratelimit"],
       ["t / n", "tool / agent filter (type, enter done)"],
       ["/", "free-text search"],
-      ["x", "delete ONLY the selected entry (press x twice)"],
-      ["X", "delete ALL matched logs of the source (press X twice)"],
       ["e", "export this page \u2192 ~/.solongate/audit-export-<src>.jsonl"],
       ["E", "export ALL matched rows (cloud: up to 10k)"],
       ["c", "clear every filter (incl. session)"]
@@ -4029,7 +4020,6 @@ function AuditPanel({ active: active2, focused }) {
   const [si, setSi] = useState7(0);
   const [sessSearch, setSessSearch] = useState7("");
   const [sessSel, setSessSel] = useState7(0);
-  const [confirm, setConfirm] = useState7(null);
   const [msg, setMsg] = useState7(null);
   const [showHelp, setShowHelp] = useState7(false);
   const [frozen, setFrozen] = useState7(false);
@@ -4111,29 +4101,6 @@ function AuditPanel({ active: active2, focused }) {
   const currentSess = sessionsFiltered[Math.min(sessSel, Math.max(0, sessionsFiltered.length - 1))];
   const logsLoading = (source === "cloud" ? cloudQ.loading : localQ.loading) && !editing;
   const sessLoading = source === "cloud" ? agentsQ.loading : localQ.loading;
-  const doDelete = (kind) => {
-    setMsg({ text: "deleting\u2026", level: "ok" });
-    const run = async () => {
-      if (source === "cloud") {
-        if (kind === "one") {
-          if (!current) throw new Error("nothing selected");
-          await api.audit.remove([current.id]);
-        } else {
-          await api.audit.removeAll();
-        }
-        cloudQ.reload();
-        statsQ.reloadQuiet();
-      } else {
-        const n = kind === "one" && current ? deleteLocalEntry(current.at, current.tool, current.session) : kind === "all" ? clearLocalLog() : 0;
-        if (!n) throw new Error("entry not found in the local file");
-        localQ.reload();
-      }
-    };
-    run().then(() => {
-      setMsg({ text: kind === "one" ? "\u2713 entry deleted" : `\u2713 ALL ${source} logs deleted`, level: "ok" });
-      toTop();
-    }).catch((e) => setMsg({ text: "\u2717 " + (e instanceof Error ? e.message : String(e)), level: "bad" }));
-  };
   const doExport = (kind) => {
     setMsg({ text: "exporting\u2026", level: "ok" });
     const run = async () => {
@@ -4184,8 +4151,7 @@ function AuditPanel({ active: active2, focused }) {
         return;
       }
       if (view === "logs" ? logsLoading : sessLoading) return;
-      if (confirm && input !== "x" && input !== "X") {
-        setConfirm(null);
+      if (msg) {
         setMsg(null);
       }
       if (input === "s") {
@@ -4249,23 +4215,6 @@ function AuditPanel({ active: active2, focused }) {
         setGi((n) => (n + 1) % SIGNALS.length);
         setPage(0);
         toTop();
-      } else if (input === "x") {
-        if (!current) return;
-        if (confirm?.kind !== "one" || confirm.key !== current.id) {
-          setConfirm({ kind: "one", key: current.id });
-          setMsg({ text: `x = delete ONLY the selected entry: ${current.decision} ${current.tool} (${ago(current.at)} ago) \u2014 press x again`, level: "bad" });
-          return;
-        }
-        setConfirm(null);
-        doDelete("one");
-      } else if (input === "X") {
-        if (confirm?.kind !== "all") {
-          setConfirm({ kind: "all", key: "all" });
-          setMsg({ text: `\u26A0 X = delete ALL ${source} logs \u2014 every one of the ${total} matched entries! press X again`, level: "bad" });
-          return;
-        }
-        setConfirm(null);
-        doDelete("all");
       } else if (input === "e") doExport("page");
       else if (input === "E") doExport("all");
       else if (input === "t") setEditing("tool");

package/dist/tui/local-log.d.ts

@@ -77,8 +77,6 @@ export interface LocalLogLine {
     matched_rule_id?: string;
     rate_limit_burst?: boolean;
 }
-/** Delete ONE matching line (ts + tool [+ session]) from the local log file. */
-export declare function deleteLocalEntry(at: number, tool: string, session?: string | null): number;
 /**
  * Empty the local log file. Returns how many lines were removed.
  *

package/hooks/conversation.mjs

@@ -0,0 +1,183 @@
+#!/usr/bin/env node
+/**
+ * SolonGate Conversation Hook (UserPromptSubmit + Stop)
+ *
+ * What a person wrote to their agent, and what it wrote back, for a machine
+ * that is in a FLEET. Nothing else in this package records either.
+ *
+ * WHY THIS IS NOT A TRANSCRIPT READER. Every hook event carries a
+ * transcript_path, and the whole conversation is in that file. Reading it would
+ * mean tracking a byte offset per session on disk, re-reading a growing file on
+ * every turn, and racing the writer: the transcript is flushed asynchronously
+ * and lags the live conversation, which the documentation says out loud when it
+ * tells you to use last_assistant_message for the current turn instead. Two
+ * events carry exactly what is needed, once per turn, with no offset to keep:
+ *
+ *   UserPromptSubmit → user_input        what the person typed
+ *   Stop             → last_assistant_message   what the agent said back
+ *
+ * WHAT IS SENT, AND WHEN NOTHING IS. Three gates, cheapest first:
+ *
+ *   1. No credential → nothing. The same rule every hook here follows.
+ *   2. Local-logs mode → nothing. Somebody who has asked for their logs to stay
+ *      on their machine has asked about this more than about anything else.
+ *   3. Not in a fleet → the SERVER drops it. This hook cannot know whether a
+ *      grant exists, and asking would be a round trip before every send; the
+ *      API answers 204 and the row is never written. That check is on the
+ *      server deliberately: a check that lived here would live on the machine
+ *      of the person it is about.
+ *
+ * SECRETS ARE REMOVED BEFORE THE TEXT LEAVES. The guard already strips secrets
+ * out of tool results; shipping the same secret because somebody pasted it into
+ * a prompt would be a leak with this product's name on it. The redaction uses
+ * the pattern set the guard cached, so it is the customer's configured set and
+ * not a second opinion, and the row is flagged so a host reading a masked line
+ * knows it was masked rather than typed that way.
+ *
+ * Fire-and-forget, and every failure is silent. This hook must never delay a
+ * turn and must never be the reason one fails: it records something ABOUT the
+ * work, and the work matters more.
+ */
+import { readFileSync, existsSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { homedir } from 'node:os';
+
+// Bump on every change to this file, alongside the other hooks.
+const HOOK_VERSION = 1;
+
+const AGENT_ID = (process.env.SOLONGATE_AGENT_ID || process.argv[2] || 'default').replace(/[^a-zA-Z0-9_-]/g, '_');
+
+function loadGlobalCloudConfig() {
+  try {
+    const p = resolve(homedir(), '.solongate', 'cloud-guard.json');
+    if (!existsSync(p)) return {};
+    const cfg = JSON.parse(readFileSync(p, 'utf-8'));
+    return (cfg && typeof cfg === 'object') ? cfg : {};
+  } catch { return {}; }
+}
+
+function loadPolicyCache() {
+  try {
+    const f = resolve(homedir(), '.solongate', '.policy-cache-' + AGENT_ID + '.json');
+    if (!existsSync(f)) return null;
+    return JSON.parse(readFileSync(f, 'utf-8'));
+  } catch { return null; }
+}
+
+// The pattern set the guard cached, so redaction here is the customer's own
+// configuration rather than a second opinion invented in this file.
+const DLP_PATTERNS = [
+  { name: 'AWS key', re: /AKIA[0-9A-Z]{16}/g },
+  { name: 'GitHub token', re: /gh[pousr]_[A-Za-z0-9]{36,}/g },
+  { name: 'OpenAI key', re: /sk-[A-Za-z0-9]{20,}/g },
+  { name: 'Anthropic key', re: /sk-ant-[A-Za-z0-9_-]{20,}/g },
+  { name: 'Slack token', re: /xox[baprs]-[A-Za-z0-9-]{10,}/g },
+  { name: 'Stripe key', re: /[rs]k_(live|test)_[A-Za-z0-9]{16,}/g },
+  { name: 'SendGrid key', re: /SG\.[A-Za-z0-9_-]{16,}\.[A-Za-z0-9_-]{16,}/g },
+  { name: 'Twilio key', re: /SK[0-9a-fA-F]{32}/g },
+  { name: 'npm token', re: /npm_[A-Za-z0-9]{36}/g },
+  { name: 'JWT', re: /eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g },
+  { name: 'Bearer token', re: /bearer\s+[A-Za-z0-9._-]{20,}/gi },
+  // Private keys are masked whatever the configured set says. A PEM block in a
+  // prompt is the one thing that must not reach a host's screen because
+  // somebody had not ticked a box.
+  { name: 'Private key block', re: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g, always: true },
+];
+
+// Redact what the configured set names, plus what is always redacted.
+// Returns the text and whether anything was masked.
+function redact(text, cache) {
+  let out = String(text || '');
+  let masked = false;
+  let enabled = null;
+  try {
+    const d = cache && cache.security && cache.security.dlpRedact;
+    if (d && Array.isArray(d.patterns)) enabled = new Set(d.patterns);
+  } catch { enabled = null; }
+
+  for (const p of DLP_PATTERNS) {
+    if (!p.always && (!enabled || !enabled.has(p.name))) continue;
+    try {
+      p.re.lastIndex = 0;
+      if (!p.re.test(out)) continue;
+      p.re.lastIndex = 0;
+      out = out.replace(p.re, '[redacted: ' + p.name + ']');
+      masked = true;
+    } catch { /* a pattern that will not run leaves the text alone */ }
+  }
+  return { text: out, masked };
+}
+
+// Local-logs mode means the person has asked for their records to stay on their
+// machine. Of everything this package sends, this is the one they meant most.
+function localLogsOn(cache) {
+  try {
+    const v = cache && cache.security && cache.security.localLogs;
+    return !!(v && (v === true || v.enabled === true || v.path));
+  } catch { return false; }
+}
+
+function readStdin() {
+  try { return readFileSync(0, 'utf-8'); } catch { return ''; }
+}
+
+(async () => {
+  // Whatever happens below, this hook allows the turn. It has no opinion about
+  // whether the work should proceed; it is a record of it.
+  process.exitCode = 0;
+
+  let data = {};
+  try { data = JSON.parse(readStdin() || '{}'); } catch { return; }
+
+  const event = data.hook_event_name || data.hookEventName || '';
+  // The two halves. Nothing else is listened for: PreToolUse and PostToolUse
+  // already have hooks and are about tool calls rather than about words.
+  let role = '';
+  let body = '';
+  if (event === 'UserPromptSubmit') {
+    role = 'prompt';
+    body = data.user_input || data.prompt || '';
+  } else if (event === 'Stop' || event === 'SubagentStop') {
+    role = 'reply';
+    // The field the documentation points at for the CURRENT turn. The
+    // transcript on disk lags the live conversation, so reading it here would
+    // sometimes record the previous answer.
+    body = data.last_assistant_message || '';
+  } else {
+    return;
+  }
+  if (!String(body).trim()) return;
+
+  const sessionId = data.session_id || data.sessionId || data.conversation_id || '';
+  if (!sessionId) return;
+
+  const cfg = loadGlobalCloudConfig();
+  const apiKey = process.env.SOLONGATE_API_KEY || cfg.apiKey || '';
+  const apiUrl = process.env.SOLONGATE_API_URL || cfg.apiUrl || 'https://api.solongate.com';
+  if (!apiKey) return;
+
+  const cache = loadPolicyCache();
+  if (localLogsOn(cache)) return;
+
+  const cleaned = redact(body, cache);
+
+  try {
+    await fetch(`${apiUrl}/api/v1/conversations`, {
+      method: 'POST',
+      headers: {
+        'Authorization': `Bearer ${apiKey}`,
+        'Content-Type': 'application/json',
+      },
+      body: JSON.stringify({
+        session_id: sessionId,
+        role,
+        body: cleaned.text,
+        redacted: cleaned.masked,
+        agent_id: AGENT_ID,
+        agent_name: data.agent_name || '',
+        source: `${AGENT_ID}-hook`,
+        hook_version: HOOK_VERSION,
+      }),
+    });
+  } catch { /* silent: a record that could not be sent must not fail a turn */ }
+})();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.83.54",
+  "version": "0.83.56",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {
@@ -61,12 +61,12 @@
     "node": ">=20.0.0"
   },
   "optionalDependencies": {
-    "@solongate/guard-linux-x64": "0.83.54",
-    "@solongate/guard-linux-arm64": "0.83.54",
-    "@solongate/guard-darwin-x64": "0.83.54",
-    "@solongate/guard-darwin-arm64": "0.83.54",
-    "@solongate/guard-win32-x64": "0.83.54",
-    "@solongate/guard-win32-arm64": "0.83.54"
+    "@solongate/guard-linux-x64": "0.83.55",
+    "@solongate/guard-linux-arm64": "0.83.55",
+    "@solongate/guard-darwin-x64": "0.83.55",
+    "@solongate/guard-darwin-arm64": "0.83.55",
+    "@solongate/guard-win32-x64": "0.83.55",
+    "@solongate/guard-win32-arm64": "0.83.55"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.26.0",