@solongate/proxy 0.83.56 → 0.83.58

package/dist/global-install.js

@@ -1,37 +1,218 @@
 // src/global-install.ts
-import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync, rmdirSync, readdirSync, statSync, chmodSync, copyFileSync, renameSync } from "fs";
-import { resolve, join, dirname } from "path";
-import { homedir } from "os";
+import { readFileSync as readFileSync2, writeFileSync, existsSync as existsSync2, mkdirSync, rmSync, rmdirSync, readdirSync, statSync as statSync2, chmodSync, copyFileSync, renameSync } from "fs";
+import { resolve, join as join2, dirname, basename } from "path";
+import { homedir as homedir2 } from "os";
 import { createRequire } from "module";
 import { fileURLToPath } from "url";
 import { createInterface } from "readline";
-import { execFileSync, spawn } from "child_process";
+import { execFileSync as execFileSync2, spawn } from "child_process";
+
+// src/hook-launcher.ts
+var NODE_CANDIDATES = [
+  // Homebrew, by the STABLE symlink rather than the Cellar path behind it —
+  // the exact distinction this file exists for. Apple Silicon then Intel.
+  "/opt/homebrew/bin/node",
+  "/usr/local/bin/node",
+  // Homebrew's keg-only layout, both prefixes.
+  "/opt/homebrew/opt/node/bin/node",
+  "/usr/local/opt/node/bin/node",
+  // Distro and hand-built.
+  "/usr/bin/node",
+  "/usr/local/n/versions/node/*/bin/node",
+  "/snap/bin/node"
+];
+var NODE_GLOBS = [
+  // nvm. NVM_DIR is exported by its own shell hook, which a non-interactive
+  // hook environment does not run, so the default location is tried too.
+  '"${NVM_DIR:-}"/versions/node/*/bin/node',
+  '"$home"/.nvm/versions/node/*/bin/node',
+  // fnm, both the XDG location and the macOS Application Support one.
+  '"$home"/.local/share/fnm/node-versions/*/installation/bin/node',
+  '"$home"/Library/Application Support/fnm/node-versions/*/installation/bin/node',
+  // Volta.
+  '"$home"/.volta/tools/image/node/*/bin/node',
+  // asdf, old layout and the current plugin one.
+  '"$home"/.asdf/installs/nodejs/*/bin/node',
+  '"$home"/.asdf/installs/node/*/bin/node'
+];
+var LAUNCHER_NAME = "sg-run.sh";
+var BEAT_DIR = ".beat";
+function launcherScript(pinnedNode) {
+  const pinned = pinnedNode.replace(/'/g, `'\\''`);
+  return `#!/bin/sh
+# SolonGate hook launcher \u2014 generated by \`solongate init --global\` / \`repair\`.
+#
+# Finds a working node and execs the hook with it. Do not edit: a reinstall
+# overwrites this file, and on macOS it is chflags-locked besides.
+#
+# The reason it exists rather than the hook naming a node directly: an absolute
+# node path recorded at install time is a Homebrew Cellar path or an nvm version
+# directory, and both are deleted by a routine upgrade. The hook then could not
+# start, nothing was enforced, nothing was logged, and every check still said
+# the guard was registered \u2014 because it was.
+
+set -u
+
+script="\${1:-}"
+[ -n "$script" ] || { echo "solongate: launcher called with no hook script" >&2; exit 1; }
+shift
+
+hook=\${script##*/}
+home=\${HOME:-~}
+beatdir="$home/.solongate/${BEAT_DIR}"
+
+# The beat. Written BEFORE node is resolved, because its whole job is to record
+# that the client invoked us \u2014 which is true even when everything after this
+# line fails. The file's modification time is the timestamp; nothing is forked
+# to produce one, and the directory test is a builtin.
+#
+# The braces matter. A redirect into a missing directory is reported by the
+# SHELL, before the command runs, so a \`2>/dev/null\` on the printf alone does
+# not suppress it \u2014 it lands on the hook's stderr, and Claude Code shows a
+# hook's stderr to the person using it. Redirecting the group catches both.
+beat() {
+  [ -d "$beatdir" ] || mkdir -p "$beatdir" 2>/dev/null || return 0
+  { printf '%s\\n' "$1" > "$beatdir/$hook"; } 2>/dev/null || true
+}
+
+try() {
+  [ -n "\${1:-}" ] && [ -x "$1" ]
+}
+
+resolve_node() {
+  # Told explicitly.
+  if try "\${SOLONGATE_NODE:-}"; then echo "$SOLONGATE_NODE"; return 0; fi
+  # The node this was installed with.
+  if try '${pinned}'; then echo '${pinned}'; return 0; fi
+  # PATH, when the client gave us one worth having.
+  p=$(command -v node 2>/dev/null) || p=
+  if try "$p"; then echo "$p"; return 0; fi
+  # The fixed locations.
+  for c in ${NODE_CANDIDATES.map((c) => `"${c}"`).join(" ")}; do
+    for g in $c; do
+      if try "$g"; then echo "$g"; return 0; fi
+    done
+  done
+  # The version managers.
+  for c in ${NODE_GLOBS.join(" ")}; do
+    for g in $c; do
+      if try "$g"; then echo "$g"; return 0; fi
+    done
+  done
+  return 1
+}
+
+node_bin=$(resolve_node) || node_bin=
+
+# --sg-doctor: report what would be used and leave. This is what \`solongate
+# doctor\` runs, so the health check exercises the REAL resolution rather than a
+# copy of it that can drift.
+if [ "$script" = "--sg-doctor" ] || [ "\${1:-}" = "--sg-doctor" ]; then
+  [ -n "$node_bin" ] && { echo "$node_bin"; exit 0; }
+  echo "no node found" >&2
+  exit 1
+fi
+
+if [ -z "$node_bin" ]; then
+  beat "no-node"
+  # Nothing can be enforced without node, and which way to fail is not a
+  # judgement call: the guard is fail-closed, so it refuses the call and says
+  # why. Everything else here only records what already happened, and refusing
+  # a tool call because the log could not be written would be a worse product
+  # than a gap in the log.
+  echo "solongate: no node runtime found, so $hook did not run." >&2
+  echo "solongate: run \\\`solongate repair\\\` in a terminal, or set SOLONGATE_NODE to your node binary." >&2
+  case "$hook" in
+    guard.mjs) echo "solongate: this tool call is REFUSED \u2014 the guard is fail-closed." >&2; exit 2 ;;
+    *) exit 0 ;;
+  esac
+fi
+
+beat "$node_bin"
+exec "$node_bin" "$script" "$@"
+`;
+}
+
+// src/hook-health.ts
+import { execFileSync } from "child_process";
+import { existsSync, readFileSync, statSync } from "fs";
+import { join } from "path";
+import { homedir } from "os";
+var sgDir = () => join(homedir(), ".solongate");
+var hooksDir = () => join(sgDir(), "hooks");
+function hookCanStart() {
+  const launcher = join(hooksDir(), LAUNCHER_NAME);
+  if (process.platform === "win32") {
+    const ok = existsSync(process.execPath);
+    return { ok, node: process.execPath, detail: ok ? process.execPath : `${process.execPath} is gone` };
+  }
+  if (!existsSync(launcher)) {
+    return { ok: false, detail: "hook launcher missing - run `solongate repair`" };
+  }
+  try {
+    const out = execFileSync("/bin/sh", [launcher, "--sg-doctor"], {
+      encoding: "utf-8",
+      timeout: 5e3,
+      stdio: ["ignore", "pipe", "pipe"]
+    }).trim();
+    if (!out) return { ok: false, detail: "launcher found no node runtime - set SOLONGATE_NODE or install node" };
+    return { ok: true, node: out, detail: out };
+  } catch (e) {
+    const msg = e instanceof Error ? e.message : String(e);
+    return { ok: false, detail: `launcher will not run: ${msg.split("\n")[0]}` };
+  }
+}
+function hookBeats() {
+  const dir = join(sgDir(), BEAT_DIR);
+  const out = [];
+  for (const hook of ["guard.mjs", "audit.mjs", "conversation.mjs", "stop.mjs"]) {
+    const f = join(dir, hook);
+    try {
+      const st = statSync(f);
+      out.push({ hook, at: st.mtime, node: readFileSync(f, "utf-8").trim() });
+    } catch {
+    }
+  }
+  return out.sort((a, b) => b.at.getTime() - a.at.getTime());
+}
+function guardBeat() {
+  return hookBeats().find((b) => b.hook === "guard.mjs") ?? null;
+}
+function agoLabel(d) {
+  const s = Math.max(0, Math.round((Date.now() - d.getTime()) / 1e3));
+  if (s < 60) return s <= 3 ? "just now" : `${s}s ago`;
+  if (s < 3600) return `${Math.round(s / 60)}m ago`;
+  if (s < 86400) return `${Math.round(s / 3600)}h ago`;
+  return `${Math.round(s / 86400)}d ago`;
+}
+
+// src/global-install.ts
 var __dirname = dirname(fileURLToPath(import.meta.url));
 var HOOKS_DIR = resolve(__dirname, "..", "hooks");
 function lockFile(file) {
-  if (!existsSync(file)) return;
+  if (!existsSync2(file)) return;
   try {
     if (process.platform === "win32") {
       try {
-        execFileSync("icacls", [file, "/deny", "*S-1-1-0:(WD,AD,DC,DE,WDAC,WO)"], { stdio: "ignore" });
+        execFileSync2("icacls", [file, "/deny", "*S-1-1-0:(WD,AD,DC,DE,WDAC,WO)"], { stdio: "ignore" });
       } catch {
       }
       try {
-        execFileSync("icacls", [file, "/grant", "*S-1-3-4:(RX)"], { stdio: "ignore" });
+        execFileSync2("icacls", [file, "/grant", "*S-1-3-4:(RX)"], { stdio: "ignore" });
       } catch {
       }
       try {
-        execFileSync("attrib", ["+R", file], { stdio: "ignore" });
+        execFileSync2("attrib", ["+R", file], { stdio: "ignore" });
       } catch {
       }
     } else if (process.platform === "darwin") {
       try {
-        execFileSync("chflags", ["uchg", file], { stdio: "ignore" });
+        execFileSync2("chflags", ["uchg", file], { stdio: "ignore" });
       } catch {
       }
     } else {
       try {
-        execFileSync("chattr", ["+i", file], { stdio: "ignore" });
+        execFileSync2("chattr", ["+i", file], { stdio: "ignore" });
       } catch {
       }
       try {
@@ -43,33 +224,33 @@ function lockFile(file) {
   }
 }
 function unlockFile(file) {
-  if (!existsSync(file)) return;
+  if (!existsSync2(file)) return;
   try {
     if (process.platform === "win32") {
       try {
-        execFileSync("icacls", [file, "/remove:g", "*S-1-3-4"], { stdio: "ignore" });
+        execFileSync2("icacls", [file, "/remove:g", "*S-1-3-4"], { stdio: "ignore" });
       } catch {
       }
       try {
-        execFileSync("icacls", [file, "/remove:d", "*S-1-1-0"], { stdio: "ignore" });
+        execFileSync2("icacls", [file, "/remove:d", "*S-1-1-0"], { stdio: "ignore" });
       } catch {
       }
       try {
-        execFileSync("icacls", [file, "/reset"], { stdio: "ignore" });
+        execFileSync2("icacls", [file, "/reset"], { stdio: "ignore" });
       } catch {
       }
       try {
-        execFileSync("attrib", ["-R", file], { stdio: "ignore" });
+        execFileSync2("attrib", ["-R", file], { stdio: "ignore" });
       } catch {
       }
     } else if (process.platform === "darwin") {
       try {
-        execFileSync("chflags", ["nouchg", file], { stdio: "ignore" });
+        execFileSync2("chflags", ["nouchg", file], { stdio: "ignore" });
       } catch {
       }
     } else {
       try {
-        execFileSync("chattr", ["-i", file], { stdio: "ignore" });
+        execFileSync2("chattr", ["-i", file], { stdio: "ignore" });
       } catch {
       }
       try {
@@ -83,14 +264,19 @@ function unlockFile(file) {
 function protectedTargets() {
   const p = globalPaths();
   return [
-    join(p.hooksDir, "guard.mjs"),
-    join(p.hooksDir, "audit.mjs"),
-    join(p.hooksDir, "stop.mjs"),
-    join(p.hooksDir, "shield.mjs"),
+    join2(p.hooksDir, "guard.mjs"),
+    join2(p.hooksDir, "audit.mjs"),
+    join2(p.hooksDir, "stop.mjs"),
+    join2(p.hooksDir, "shield.mjs"),
     // The conversation record is locked with the rest. A guest who could edit
     // it could decide what their host sees them say, which is the same class of
     // problem as editing the guard.
-    join(p.hooksDir, "conversation.mjs"),
+    join2(p.hooksDir, "conversation.mjs"),
+    // The launcher is the enforcement path now: every hook command in every
+    // client config runs THROUGH it. A program that could rewrite it could
+    // point every hook at /bin/true and disarm the guard without touching a
+    // single file that used to be locked.
+    join2(p.hooksDir, LAUNCHER_NAME),
     p.configPath,
     p.settingsPath,
     p.antigravityHooksPath,
@@ -124,60 +310,60 @@ function writeProtectedFile(file, contents) {
   }
 }
 function globalPaths() {
-  const home = homedir();
-  const sgDir = join(home, ".solongate");
-  const hooksDir = join(sgDir, "hooks");
-  const claudeDir = join(home, ".claude");
-  const antigravityDir = join(home, ".gemini", "config");
-  const codexDir = process.env["CODEX_HOME"] ? resolve(process.env["CODEX_HOME"]) : join(home, ".codex");
-  const opencodeDir = join(process.env["XDG_CONFIG_HOME"] ? resolve(process.env["XDG_CONFIG_HOME"]) : join(home, ".config"), "opencode");
-  const binDir = join(sgDir, "bin");
+  const home = homedir2();
+  const sgDir2 = join2(home, ".solongate");
+  const hooksDir2 = join2(sgDir2, "hooks");
+  const claudeDir = join2(home, ".claude");
+  const antigravityDir = join2(home, ".gemini", "config");
+  const codexDir = process.env["CODEX_HOME"] ? resolve(process.env["CODEX_HOME"]) : join2(home, ".codex");
+  const opencodeDir = join2(process.env["XDG_CONFIG_HOME"] ? resolve(process.env["XDG_CONFIG_HOME"]) : join2(home, ".config"), "opencode");
+  const binDir = join2(sgDir2, "bin");
   return {
     home,
-    sgDir,
-    hooksDir,
+    sgDir: sgDir2,
+    hooksDir: hooksDir2,
     binDir,
     claudeDir,
     antigravityDir,
     codexDir,
     opencodeDir,
-    settingsPath: join(claudeDir, "settings.json"),
-    backupPath: join(claudeDir, "settings.solongate.bak"),
-    configPath: join(sgDir, "cloud-guard.json"),
+    settingsPath: join2(claudeDir, "settings.json"),
+    backupPath: join2(claudeDir, "settings.solongate.bak"),
+    configPath: join2(sgDir2, "cloud-guard.json"),
     // Antigravity reads global hooks from ~/.gemini/config/hooks.json. Only the
     // guard is registered there (PreToolUse); Antigravity's ALLOW-path audit is
     // covered by the passive session-log collector, not a hook.
-    antigravityHooksPath: join(antigravityDir, "hooks.json"),
-    antigravityBackupPath: join(antigravityDir, "hooks.solongate.bak"),
+    antigravityHooksPath: join2(antigravityDir, "hooks.json"),
+    antigravityBackupPath: join2(antigravityDir, "hooks.solongate.bak"),
     // Codex reads user-level hooks from ~/.codex/hooks.json (or a [hooks] table
     // in ~/.codex/config.toml — we use the JSON file so we never have to rewrite
     // the user's TOML, which also holds the hook TRUST state Codex manages).
-    codexHooksPath: join(codexDir, "hooks.json"),
-    codexBackupPath: join(codexDir, "hooks.solongate.bak"),
-    codexConfigPath: join(codexDir, "config.toml"),
+    codexHooksPath: join2(codexDir, "hooks.json"),
+    codexBackupPath: join2(codexDir, "hooks.solongate.bak"),
+    codexConfigPath: join2(codexDir, "config.toml"),
     // OpenCode scans its plugin folder at startup and loads every module in it.
     // Measured on 1.18.10: BOTH `plugin/` and `plugins/` are scanned, so the
     // docs and the field reports are each half right. We write the documented
     // one. There is nothing to register anywhere — dropping the file IS the
     // installation, which also means deleting the file IS the uninstall.
-    opencodePluginDir: join(opencodeDir, "plugins"),
-    opencodePluginPath: join(opencodeDir, "plugins", "solongate.js")
+    opencodePluginDir: join2(opencodeDir, "plugins"),
+    opencodePluginPath: join2(opencodeDir, "plugins", "solongate.js")
   };
 }
 function clearGuardUpdateCheck() {
   try {
-    rmSync(join(globalPaths().sgDir, ".hook-update-check"), { force: true });
+    rmSync(join2(globalPaths().sgDir, ".hook-update-check"), { force: true });
     return true;
   } catch {
     return false;
   }
 }
 function readHook(filename) {
-  return readFileSync(join(HOOKS_DIR, filename), "utf-8");
+  return readFileSync2(join2(HOOKS_DIR, filename), "utf-8");
 }
 function firstAccountCredential() {
   try {
-    const raw = JSON.parse(readFileSync(join(homedir(), ".solongate", "accounts.json"), "utf-8"));
+    const raw = JSON.parse(readFileSync2(join2(homedir2(), ".solongate", "accounts.json"), "utf-8"));
     if (Array.isArray(raw)) {
       const acc = raw.find((a) => a && typeof a.apiKey === "string" && a.apiKey);
       if (acc) return { apiKey: acc.apiKey, apiUrl: typeof acc.apiUrl === "string" ? acc.apiUrl : void 0 };
@@ -187,8 +373,8 @@ function firstAccountCredential() {
   return {};
 }
 function readGuard() {
-  const bundled = join(HOOKS_DIR, "guard.bundled.mjs");
-  return existsSync(bundled) ? readFileSync(bundled, "utf-8") : readHook("guard.mjs");
+  const bundled = join2(HOOKS_DIR, "guard.bundled.mjs");
+  return existsSync2(bundled) ? readFileSync2(bundled, "utf-8") : readHook("guard.mjs");
 }
 function installGoBinaries(binDir) {
   const os_ = process.platform === "win32" ? "win32" : process.platform;
@@ -208,10 +394,10 @@ function installGoBinaries(binDir) {
     return placed;
   }
   for (const name of ["solongate-guard", "solongate"]) {
-    const from = join(pkgDir, name + suffix);
-    const to = join(binDir, name + suffix);
+    const from = join2(pkgDir, name + suffix);
+    const to = join2(binDir, name + suffix);
     try {
-      if (!existsSync(from)) continue;
+      if (!existsSync2(from)) continue;
       const tmp = to + ".new";
       copyFileSync(from, tmp);
       chmodSync(tmp, 493);
@@ -224,16 +410,17 @@ function installGoBinaries(binDir) {
 }
 var ANTIGRAVITY_GROUP = "solongate-guard";
 function antigravityHookCommand(guardAbs) {
-  const nodeBin = process.execPath.replace(/\\/g, "/");
-  const call = process.platform === "win32" ? "& " : "";
-  return `${call}"${nodeBin}" "${guardAbs.replace(/\\/g, "/")}" antigravity "Antigravity"`;
+  return hookCommandFor(dirname(guardAbs), basename(guardAbs), "antigravity", "Antigravity");
+}
+function antigravityConversationCommand(guardAbs) {
+  return hookCommandFor(dirname(guardAbs), "conversation.mjs", "antigravity", "Antigravity");
 }
 function installAntigravityGuard(p, guardAbs) {
   mkdirSync(p.antigravityDir, { recursive: true });
   let existing = {};
-  if (existsSync(p.antigravityHooksPath)) {
-    const raw = readFileSync(p.antigravityHooksPath, "utf-8");
-    if (!existsSync(p.antigravityBackupPath)) writeFileSync(p.antigravityBackupPath, raw);
+  if (existsSync2(p.antigravityHooksPath)) {
+    const raw = readFileSync2(p.antigravityHooksPath, "utf-8");
+    if (!existsSync2(p.antigravityBackupPath)) writeFileSync(p.antigravityBackupPath, raw);
     try {
       existing = JSON.parse(raw);
     } catch {
@@ -243,15 +430,16 @@ function installAntigravityGuard(p, guardAbs) {
   const merged = {
     ...existing,
     [ANTIGRAVITY_GROUP]: {
-      PreToolUse: [{ matcher: "", hooks: [{ type: "command", command: antigravityHookCommand(guardAbs) }] }]
+      PreToolUse: [{ matcher: "", hooks: [{ type: "command", command: antigravityHookCommand(guardAbs) }] }],
+      Stop: [{ matcher: "", hooks: [{ type: "command", command: antigravityConversationCommand(guardAbs) }] }]
     }
   };
   writeFileSync(p.antigravityHooksPath, JSON.stringify(merged, null, 2) + "\n");
 }
 function removeAntigravityGuard(p) {
-  if (!existsSync(p.antigravityHooksPath)) return;
+  if (!existsSync2(p.antigravityHooksPath)) return;
   try {
-    const s = JSON.parse(readFileSync(p.antigravityHooksPath, "utf-8"));
+    const s = JSON.parse(readFileSync2(p.antigravityHooksPath, "utf-8"));
     if (!(ANTIGRAVITY_GROUP in s)) return;
     delete s[ANTIGRAVITY_GROUP];
     writeFileSync(p.antigravityHooksPath, JSON.stringify(s, null, 2) + "\n");
@@ -261,8 +449,10 @@ function removeAntigravityGuard(p) {
 var CODEX_EVENTS = ["PreToolUse", "PostToolUse", "UserPromptSubmit", "Stop"];
 var CODEX_TIMEOUT_SEC = 30;
 function codexHookCommand(scriptAbs) {
-  const nodeBin = process.execPath.replace(/\\/g, "/");
-  return `"${nodeBin}" "${scriptAbs.replace(/\\/g, "/")}" codex "Codex"`;
+  if (process.platform === "win32") {
+    return `"${process.execPath.replace(/\\/g, "/")}" "${scriptAbs.replace(/\\/g, "/")}" codex "Codex"`;
+  }
+  return hookCommandFor(dirname(scriptAbs), basename(scriptAbs), "codex", "Codex");
 }
 function isOurCodexGroup(group) {
   const hooks = Array.isArray(group?.hooks) ? group.hooks : [];
@@ -270,10 +460,10 @@ function isOurCodexGroup(group) {
 }
 function readCodexHooksFile(path) {
   const out = { hooks: {}, rest: {} };
-  if (!existsSync(path)) return out;
+  if (!existsSync2(path)) return out;
   let raw;
   try {
-    raw = JSON.parse(readFileSync(path, "utf-8"));
+    raw = JSON.parse(readFileSync2(path, "utf-8"));
   } catch {
     return out;
   }
@@ -318,10 +508,10 @@ function writeCodexHooksFile(path, file) {
   body["hooks"] = hooks;
   writeFileSync(path, JSON.stringify(body, null, 2) + "\n");
 }
-function installCodexGuard(p, hooksDir) {
+function installCodexGuard(p, hooksDir2) {
   mkdirSync(p.codexDir, { recursive: true });
-  if (existsSync(p.codexHooksPath) && !existsSync(p.codexBackupPath)) {
-    writeFileSync(p.codexBackupPath, readFileSync(p.codexHooksPath, "utf-8"));
+  if (existsSync2(p.codexHooksPath) && !existsSync2(p.codexBackupPath)) {
+    writeFileSync(p.codexBackupPath, readFileSync2(p.codexHooksPath, "utf-8"));
   }
   const file = readCodexHooksFile(p.codexHooksPath);
   const script = {
@@ -345,7 +535,7 @@ function installCodexGuard(p, hooksDir) {
       ...ev === "Stop" ? {} : { matcher: "*" },
       hooks: [{
         type: "command",
-        command: codexHookCommand(join(hooksDir, script[ev]).replace(/\\/g, "/")),
+        command: codexHookCommand(join2(hooksDir2, script[ev]).replace(/\\/g, "/")),
         timeout: CODEX_TIMEOUT_SEC,
         statusMessage: status[ev]
       }]
@@ -355,7 +545,7 @@ function installCodexGuard(p, hooksDir) {
   writeCodexHooksFile(p.codexHooksPath, file);
 }
 function removeCodexGuard(p) {
-  if (!existsSync(p.codexHooksPath)) return;
+  if (!existsSync2(p.codexHooksPath)) return;
   try {
     const file = readCodexHooksFile(p.codexHooksPath);
     let changed = false;
@@ -381,7 +571,7 @@ function isCodexGuardInstalled() {
 }
 function codexDetected() {
   try {
-    return existsSync(globalPaths().codexDir);
+    return existsSync2(globalPaths().codexDir);
   } catch {
     return false;
   }
@@ -391,7 +581,7 @@ function codexHooksStatus() {
   const registered = isCodexGuardInstalled();
   let trusted = false, disabled = false;
   try {
-    const toml = readFileSync(p.codexConfigPath, "utf-8");
+    const toml = readFileSync2(p.codexConfigPath, "utf-8");
     trusted = /trusted_hash\s*=/.test(toml);
     disabled = /^\s*hooks\s*=\s*false\s*$/m.test(toml);
   } catch {
@@ -410,10 +600,10 @@ function removeOpencodeGuard(p) {
   } catch {
   }
 }
-function warmPolicyCache(hooksDir, agents) {
+function warmPolicyCache(hooksDir2, agents) {
   for (const agent of agents) {
     try {
-      const child = spawn(process.execPath, [join(hooksDir, "guard.mjs"), agent, "--sg-refresh-policy"], {
+      const child = spawn(process.execPath, [join2(hooksDir2, "guard.mjs"), agent, "--sg-refresh-policy"], {
         detached: true,
         stdio: "ignore",
         windowsHide: true
@@ -427,24 +617,24 @@ function warmPolicyCache(hooksDir, agents) {
 }
 function isOpencodeGuardInstalled() {
   try {
-    return readFileSync(globalPaths().opencodePluginPath, "utf-8").includes("tool.execute.before");
+    return readFileSync2(globalPaths().opencodePluginPath, "utf-8").includes("tool.execute.before");
   } catch {
     return false;
   }
 }
 function opencodeDetected() {
   try {
-    return existsSync(globalPaths().opencodeDir);
+    return existsSync2(globalPaths().opencodeDir);
   } catch {
     return false;
   }
 }
 var SCRATCH_FILES = /* @__PURE__ */ new Set([".eval-ring.jsonl", ".last-eval", ".last-deny", ".last-tool-call", ".debug-guard-log"]);
-function sweepStrayScratchDirs(root = homedir(), maxDepth = 6, budget = 4e4) {
+function sweepStrayScratchDirs(root = homedir2(), maxDepth = 6, budget = 4e4) {
   let removed = 0;
   let visited = 0;
   const skip = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", ".next", "build"]);
-  const store = join(homedir(), ".solongate");
+  const store = join2(homedir2(), ".solongate");
   const walk = (dir, depth) => {
     if (depth > maxDepth || visited++ > budget) return;
     let entries;
@@ -455,11 +645,11 @@ function sweepStrayScratchDirs(root = homedir(), maxDepth = 6, budget = 4e4) {
     }
     for (const name of entries) {
       if (skip.has(name)) continue;
-      const full = join(dir, name);
+      const full = join2(dir, name);
       if (full === store) continue;
       let isDir = false;
       try {
-        isDir = statSync(full).isDirectory();
+        isDir = statSync2(full).isDirectory();
       } catch {
         continue;
       }
@@ -470,7 +660,7 @@ function sweepStrayScratchDirs(root = homedir(), maxDepth = 6, budget = 4e4) {
           for (const f of readdirSync(full)) {
             if (SCRATCH_FILES.has(f)) {
               try {
-                rmSync(join(full, f), { force: true });
+                rmSync(join2(full, f), { force: true });
               } catch {
                 left.push(f);
               }
@@ -510,12 +700,12 @@ function runGlobalRestore() {
     removeOpencodeGuard(p);
   } catch {
   }
-  if (existsSync(p.backupPath)) {
-    writeFileSync(p.settingsPath, readFileSync(p.backupPath, "utf-8"));
+  if (existsSync2(p.backupPath)) {
+    writeFileSync(p.settingsPath, readFileSync2(p.backupPath, "utf-8"));
     console.log(`  Restored ${p.settingsPath} from backup.`);
-  } else if (existsSync(p.settingsPath)) {
+  } else if (existsSync2(p.settingsPath)) {
     try {
-      const s = JSON.parse(readFileSync(p.settingsPath, "utf-8"));
+      const s = JSON.parse(readFileSync2(p.settingsPath, "utf-8"));
       delete s.hooks;
       writeFileSync(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
       console.log(`  Removed SolonGate hooks from ${p.settingsPath}.`);
@@ -528,12 +718,17 @@ function runGlobalRestore() {
 }
 function repairQuiet() {
   const p = globalPaths();
-  const has = (f) => existsSync(f);
-  const guardFile = join(p.hooksDir, "guard.mjs");
+  const has = (f) => existsSync2(f);
+  const guardFile = join2(p.hooksDir, "guard.mjs");
   const line = (label, ok, yes, no) => ({ label, ok, detail: ok ? yes : no });
+  const runtime = () => {
+    const r2 = hookCanStart();
+    return { label: "hook runtime", ok: r2.ok, detail: r2.ok ? `node ${r2.detail}` : r2.detail };
+  };
   const before = [
     line("guard hook file", has(guardFile), "present", "MISSING"),
     line("cloud credential", has(p.configPath), "present", "MISSING"),
+    runtime(),
     line("Claude hooks", isGuardInstalled(), "guard registered", "guard NOT registered"),
     line("Antigravity hooks", has(p.antigravityHooksPath), "guard registered", "guard NOT registered"),
     line("Codex hooks", isCodexGuardInstalled(), "guard registered", "guard NOT registered"),
@@ -543,6 +738,7 @@ function repairQuiet() {
   if (!r.ok) return { ok: false, message: r.message, before, after: [], notes: [] };
   const after = [
     { label: "guard hook file", ok: true, detail: `present (v${installedGuardVersion() ?? "?"})` },
+    runtime(),
     line("Claude hooks", isGuardInstalled(), "guard registered", "NOT registered"),
     line("Antigravity hooks", has(p.antigravityHooksPath), "guard registered", "NOT registered"),
     line("Codex hooks", isCodexGuardInstalled(), "guard registered", "NOT registered"),
@@ -603,7 +799,7 @@ function installGlobalQuiet() {
     let apiKey = process.env["SOLONGATE_API_KEY"] || "";
     let apiUrl = process.env["SOLONGATE_API_URL"] || "https://api.solongate.com";
     try {
-      const cfg = JSON.parse(readFileSync(p.configPath, "utf-8"));
+      const cfg = JSON.parse(readFileSync2(p.configPath, "utf-8"));
       if (cfg && typeof cfg.apiKey === "string") apiKey = apiKey || cfg.apiKey;
       if (cfg && typeof cfg.apiUrl === "string") apiUrl = cfg.apiUrl;
     } catch {
@@ -619,26 +815,26 @@ function installGlobalQuiet() {
     mkdirSync(p.hooksDir, { recursive: true });
     mkdirSync(p.claudeDir, { recursive: true });
     unlockProtected();
-    writeFileSync(join(p.hooksDir, "guard.mjs"), readGuard());
+    writeFileSync(join2(p.hooksDir, "guard.mjs"), readGuard());
     installGoBinaries(p.binDir);
-    writeFileSync(join(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
-    writeFileSync(join(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
-    writeFileSync(join(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
-    writeFileSync(join(p.hooksDir, "conversation.mjs"), readHook("conversation.mjs"));
+    writeFileSync(join2(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
+    writeFileSync(join2(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
+    writeFileSync(join2(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
+    writeFileSync(join2(p.hooksDir, "conversation.mjs"), readHook("conversation.mjs"));
+    writeLauncher(p.hooksDir);
+    writeLauncher(p.hooksDir);
     writeFileSync(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
     let existing = {};
-    if (existsSync(p.settingsPath)) {
-      const raw = readFileSync(p.settingsPath, "utf-8");
-      if (!existsSync(p.backupPath)) writeFileSync(p.backupPath, raw);
+    if (existsSync2(p.settingsPath)) {
+      const raw = readFileSync2(p.settingsPath, "utf-8");
+      if (!existsSync2(p.backupPath)) writeFileSync(p.backupPath, raw);
       try {
         existing = JSON.parse(raw);
       } catch {
         existing = {};
       }
     }
-    const nodeBin = process.execPath.replace(/\\/g, "/");
-    const call = process.platform === "win32" ? "& " : "";
-    const hookCmd = (script) => `${call}"${nodeBin}" "${join(p.hooksDir, script).replace(/\\/g, "/")}" claude-code "Claude Code"`;
+    const hookCmd = (script) => hookCommandFor(p.hooksDir, script);
     const merged = {
       ...existing,
       hooks: {
@@ -665,7 +861,7 @@ function installGlobalQuiet() {
     };
     writeFileSync(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
     try {
-      installAntigravityGuard(p, join(p.hooksDir, "guard.mjs").replace(/\\/g, "/"));
+      installAntigravityGuard(p, join2(p.hooksDir, "guard.mjs").replace(/\\/g, "/"));
     } catch {
     }
     try {
@@ -686,7 +882,7 @@ function installGlobalQuiet() {
 function installedGuardVersion() {
   try {
     const p = globalPaths();
-    const s = readFileSync(join(p.hooksDir, "guard.mjs"), "utf-8");
+    const s = readFileSync2(join2(p.hooksDir, "guard.mjs"), "utf-8");
     const m = s.match(/HOOK_VERSION\s*=\s*(\d+)/);
     return m ? parseInt(m[1], 10) : null;
   } catch {
@@ -696,16 +892,35 @@ function installedGuardVersion() {
 function guardHookOutdated() {
   try {
     const p = globalPaths();
-    return readFileSync(join(p.hooksDir, "guard.mjs"), "utf-8") !== readGuard();
+    return readFileSync2(join2(p.hooksDir, "guard.mjs"), "utf-8") !== readGuard();
   } catch {
     return false;
   }
 }
+function hookCommandFor(hooksDir2, script, client = "claude-code", label = "Claude Code") {
+  const target = join2(hooksDir2, script).replace(/\\/g, "/");
+  if (process.platform === "win32") {
+    return `& "${process.execPath.replace(/\\/g, "/")}" "${target}" ${client} "${label}"`;
+  }
+  const launcher = join2(hooksDir2, LAUNCHER_NAME).replace(/\\/g, "/");
+  return `/bin/sh "${launcher}" "${target}" ${client} "${label}"`;
+}
+function writeLauncher(hooksDir2) {
+  writeFileSync(join2(hooksDir2, LAUNCHER_NAME), launcherScript(process.execPath));
+  try {
+    chmodSync(join2(hooksDir2, LAUNCHER_NAME), 493);
+  } catch {
+  }
+  try {
+    mkdirSync(join2(hooksDir2, "..", BEAT_DIR), { recursive: true });
+  } catch {
+  }
+}
 function isGuardInstalled() {
   try {
     const p = globalPaths();
-    if (!existsSync(p.settingsPath)) return false;
-    const s = JSON.parse(readFileSync(p.settingsPath, "utf-8"));
+    if (!existsSync2(p.settingsPath)) return false;
+    const s = JSON.parse(readFileSync2(p.settingsPath, "utf-8"));
     return !!s.hooks && JSON.stringify(s.hooks).includes(".solongate");
   } catch {
     return false;
@@ -728,8 +943,8 @@ function uninstallGlobalQuiet() {
       removeOpencodeGuard(p);
     } catch {
     }
-    if (!existsSync(p.settingsPath)) return { ok: true, message: "guard removed (open a new session)" };
-    const s = JSON.parse(readFileSync(p.settingsPath, "utf-8"));
+    if (!existsSync2(p.settingsPath)) return { ok: true, message: "guard removed (open a new session)" };
+    const s = JSON.parse(readFileSync2(p.settingsPath, "utf-8"));
     delete s.hooks;
     writeFileSync(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
     return { ok: true, message: "guard removed (open a new session)" };
@@ -745,7 +960,7 @@ function escapeRe(s) {
 function resolveRealClaude() {
   try {
     const finder = process.platform === "win32" ? "where" : "which";
-    const out = execFileSync(finder, ["claude"], { encoding: "utf-8" }).split(/\r?\n/).map((s) => s.trim()).filter(Boolean);
+    const out = execFileSync2(finder, ["claude"], { encoding: "utf-8" }).split(/\r?\n/).map((s) => s.trim()).filter(Boolean);
     if (process.platform === "win32") {
       const low = (s) => s.toLowerCase();
       return out.find((l) => low(l).endsWith(".cmd")) || out.find((l) => low(l).endsWith(".exe")) || out.find((l) => low(l).endsWith(".bat")) || out[0] || null;
@@ -758,17 +973,17 @@ function resolveRealClaude() {
 function shimTargets() {
   if (process.platform === "win32") {
     try {
-      const prof = execFileSync("powershell", ["-NoProfile", "-Command", "$PROFILE.CurrentUserAllHosts"], { encoding: "utf-8" }).trim();
+      const prof = execFileSync2("powershell", ["-NoProfile", "-Command", "$PROFILE.CurrentUserAllHosts"], { encoding: "utf-8" }).trim();
       return prof ? [prof] : [];
     } catch {
       return [];
     }
   }
-  return [".bashrc", ".zshrc", ".profile"].map((f) => join(homedir(), f)).filter((f) => existsSync(f));
+  return [".bashrc", ".zshrc", ".profile"].map((f) => join2(homedir2(), f)).filter((f) => existsSync2(f));
 }
 function writeShimBlock(file, block) {
   const re = new RegExp(escapeRe(SHIM_BEGIN) + "[\\s\\S]*?" + escapeRe(SHIM_END) + "\\r?\\n?", "g");
-  let content = existsSync(file) ? readFileSync(file, "utf-8") : "";
+  let content = existsSync2(file) ? readFileSync2(file, "utf-8") : "";
   content = content.replace(re, "");
   if (block) {
     if (content.length && !content.endsWith("\n")) content += "\n";
@@ -813,7 +1028,7 @@ async function runGlobalInstall(opts = {}) {
   let apiKey = opts.apiKey || process.env["SOLONGATE_API_KEY"] || "";
   if (!apiKey || apiKey === "sg_live_your_key_here") {
     try {
-      const cfg = JSON.parse(readFileSync(p.configPath, "utf-8"));
+      const cfg = JSON.parse(readFileSync2(p.configPath, "utf-8"));
       if (cfg && typeof cfg.apiKey === "string") apiKey = cfg.apiKey;
     } catch {
     }
@@ -833,19 +1048,19 @@ async function runGlobalInstall(opts = {}) {
   mkdirSync(p.hooksDir, { recursive: true });
   mkdirSync(p.claudeDir, { recursive: true });
   unlockProtected();
-  writeFileSync(join(p.hooksDir, "guard.mjs"), readGuard());
-  writeFileSync(join(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
-  writeFileSync(join(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
-  writeFileSync(join(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
-  writeFileSync(join(p.hooksDir, "conversation.mjs"), readHook("conversation.mjs"));
+  writeFileSync(join2(p.hooksDir, "guard.mjs"), readGuard());
+  writeFileSync(join2(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
+  writeFileSync(join2(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
+  writeFileSync(join2(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
+  writeFileSync(join2(p.hooksDir, "conversation.mjs"), readHook("conversation.mjs"));
   console.log(`  Installed hooks \u2192 ${p.hooksDir}`);
-  installClaudeShim(join(p.hooksDir, "shield.mjs"));
+  installClaudeShim(join2(p.hooksDir, "shield.mjs"));
   writeFileSync(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
   console.log(`  Wrote ${p.configPath}`);
   let existing = {};
-  if (existsSync(p.settingsPath)) {
-    const raw = readFileSync(p.settingsPath, "utf-8");
-    if (!existsSync(p.backupPath)) {
+  if (existsSync2(p.settingsPath)) {
+    const raw = readFileSync2(p.settingsPath, "utf-8");
+    if (!existsSync2(p.backupPath)) {
       writeFileSync(p.backupPath, raw);
       console.log(`  Backed up existing settings \u2192 ${p.backupPath}`);
     }
@@ -855,22 +1070,17 @@ async function runGlobalInstall(opts = {}) {
       existing = {};
     }
   }
-  const guardAbs = join(p.hooksDir, "guard.mjs").replace(/\\/g, "/");
-  const auditAbs = join(p.hooksDir, "audit.mjs").replace(/\\/g, "/");
-  const stopAbs = join(p.hooksDir, "stop.mjs").replace(/\\/g, "/");
-  const convAbs = join(p.hooksDir, "conversation.mjs").replace(/\\/g, "/");
-  const nodeBin = process.execPath.replace(/\\/g, "/");
-  const call = process.platform === "win32" ? "& " : "";
-  const hookCmd = (script) => `${call}"${nodeBin}" "${script}" claude-code "Claude Code"`;
+  const guardAbs = join2(p.hooksDir, "guard.mjs").replace(/\\/g, "/");
+  const hookCmd = (script) => hookCommandFor(p.hooksDir, script);
   const merged = {
     ...existing,
     hooks: {
-      PreToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(guardAbs) }] }],
-      PostToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(auditAbs) }] }],
-      UserPromptSubmit: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(convAbs) }] }],
+      PreToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("guard.mjs") }] }],
+      PostToolUse: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("audit.mjs") }] }],
+      UserPromptSubmit: [{ matcher: "", hooks: [{ type: "command", command: hookCmd("conversation.mjs") }] }],
       Stop: [
-        { matcher: "", hooks: [{ type: "command", command: hookCmd(stopAbs) }] },
-        { matcher: "", hooks: [{ type: "command", command: hookCmd(convAbs) }] }
+        { matcher: "", hooks: [{ type: "command", command: hookCmd("stop.mjs") }] },
+        { matcher: "", hooks: [{ type: "command", command: hookCmd("conversation.mjs") }] }
       ]
     }
   };
@@ -912,11 +1122,18 @@ async function installGlobalWithKey(apiKey, apiUrl) {
   await runGlobalInstall({ apiKey, apiUrl });
 }
 export {
+  BEAT_DIR,
+  LAUNCHER_NAME,
+  agoLabel,
   clearGuardUpdateCheck,
   codexDetected,
   codexHooksStatus,
   globalPaths,
+  guardBeat,
   guardHookOutdated,
+  hookBeats,
+  hookCanStart,
+  hookCommandFor,
   installClaudeShim,
   installGlobalQuiet,
   installGlobalWithKey,
@@ -924,6 +1141,7 @@ export {
   isCodexGuardInstalled,
   isGuardInstalled,
   isOpencodeGuardInstalled,
+  launcherScript,
   lockProtected,
   opencodeDetected,
   removeClaudeShim,
@@ -934,5 +1152,6 @@ export {
   sweepStrayScratchDirs,
   uninstallGlobalQuiet,
   unlockProtected,
+  writeLauncher,
   writeProtectedFile
 };