@solongate/proxy 0.83.58 → 0.83.59

package/hooks/conversation.mjs

@@ -16,12 +16,10 @@
  *   UserPromptSubmit → user_input        what the person typed
  *   Stop             → last_assistant_message   what the agent said back
  *
- * WHAT IS SENT, AND WHEN NOTHING IS. Three gates, cheapest first:
+ * WHAT IS SENT, AND WHEN NOTHING IS. Two gates, cheapest first:
  *
  *   1. No credential → nothing. The same rule every hook here follows.
- *   2. Local-logs mode → nothing. Somebody who has asked for their logs to stay
- *      on their machine has asked about this more than about anything else.
- *   3. Not in a fleet → the SERVER drops it. This hook cannot know whether a
+ *   2. Not in a fleet → the SERVER drops it. This hook cannot know whether a
  *      grant exists, and asking would be a round trip before every send; the
  *      API answers 204 and the row is never written. That check is on the
  *      server deliberately: a check that lived here would live on the machine
@@ -43,7 +41,7 @@ import { resolve } from 'node:path';
 import { homedir } from 'node:os';
 
 // Bump on every change to this file, alongside the other hooks.
-const HOOK_VERSION = 2;
+const HOOK_VERSION = 3;
 
 const AGENT_ID = (process.env.SOLONGATE_AGENT_ID || process.argv[2] || 'default').replace(/[^a-zA-Z0-9_-]/g, '_');
 
@@ -108,14 +106,24 @@ function redact(text, cache) {
   return { text: out, masked };
 }
 
-// Local-logs mode means the person has asked for their records to stay on their
-// machine. Of everything this package sends, this is the one they meant most.
-function localLogsOn(cache) {
-  try {
-    const v = cache && cache.security && cache.security.localLogs;
-    return !!(v && (v === true || v.enabled === true || v.path));
-  } catch { return false; }
-}
+// There is no local-logs gate here any more, and its absence is deliberate.
+//
+// It read the local-log setting and sent nothing when it looked on — which it
+// did for anybody who had ever typed a folder into that field, because the
+// predicate counted the PATH as well as the switch and the path survives
+// turning the feature off. So the record was silently empty on accounts whose
+// settings said local logging was off, with nothing anywhere to say so.
+//
+// Fixing the predicate was the small answer. The gate itself is the wrong idea:
+// this record exists ONLY for a machine in a fleet, where a host is answerable
+// for what runs there, and a setting on the guest's own machine that switches
+// off the host's view of it is a self-disarm — the exact shape this product
+// exists to prevent everywhere else. Local logging decides where a machine
+// keeps its OWN copy; it was never a claim on somebody else's record.
+//
+// What still applies is unchanged and is what actually protects people: no
+// credential, nothing sent; no accepted grant, the server drops it; and secrets
+// are removed before the text leaves the machine.
 
 function readStdin() {
   try { return readFileSync(0, 'utf-8'); } catch { return ''; }
@@ -131,8 +139,6 @@ async function send(sessionId, role, body, agentName) {
   if (!apiKey) return;
 
   const cache = loadPolicyCache();
-  if (localLogsOn(cache)) return;
-
   const cleaned = redact(body, cache);
   try {
     await fetch(`${apiUrl}/api/v1/conversations`, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.83.58",
+  "version": "0.83.59",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {
@@ -61,12 +61,12 @@
     "node": ">=20.0.0"
   },
   "optionalDependencies": {
-    "@solongate/guard-linux-x64": "0.83.58",
-    "@solongate/guard-linux-arm64": "0.83.58",
-    "@solongate/guard-darwin-x64": "0.83.58",
-    "@solongate/guard-darwin-arm64": "0.83.58",
-    "@solongate/guard-win32-x64": "0.83.58",
-    "@solongate/guard-win32-arm64": "0.83.58"
+    "@solongate/guard-linux-x64": "0.83.59",
+    "@solongate/guard-linux-arm64": "0.83.59",
+    "@solongate/guard-darwin-x64": "0.83.59",
+    "@solongate/guard-darwin-arm64": "0.83.59",
+    "@solongate/guard-win32-x64": "0.83.59",
+    "@solongate/guard-win32-arm64": "0.83.59"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.26.0",