@solongate/proxy 0.83.6 → 0.83.7

package/dist/index.js

@@ -7573,6 +7573,41 @@ import { closeSync, existsSync as existsSync4, openSync as openSync3, readdirSyn
 import { homedir as homedir6 } from "os";
 import { createHash as createHash2 } from "crypto";
 import { isAbsolute, join as join8 } from "path";
+function localLogsSetting() {
+  const off = { enabled: false, configuredPath: null, usableHere: true, file: DEFAULT_LOCAL_LOG };
+  try {
+    for (const cache of policyCachesNewestFirst()) {
+      try {
+        const c2 = JSON.parse(readFileSync8(cache, "utf-8"));
+        const l = c2?.security?.localLogs;
+        if (!l || typeof l.enabled !== "boolean") continue;
+        if (!l.enabled) return { ...off, configuredPath: typeof l.path === "string" ? l.path.trim() || null : null };
+        const raw = typeof l.path === "string" ? l.path.trim() : "";
+        const dir = raw.replace(/[\\/]+$/, "");
+        if (!dir) return { enabled: true, configuredPath: null, usableHere: true, file: DEFAULT_LOCAL_LOG };
+        if (!isAbsolute(dir)) return { enabled: true, configuredPath: raw, usableHere: false, file: DEFAULT_LOCAL_LOG };
+        const file = join8(dir, "solongate-audit.jsonl");
+        const usable = existsSync4(file) || existsSync4(dir);
+        return { enabled: true, configuredPath: raw, usableHere: usable, file: usable ? file : DEFAULT_LOCAL_LOG };
+      } catch {
+      }
+    }
+  } catch {
+  }
+  return off;
+}
+function policyCachesNewestFirst() {
+  const sgDir = join8(homedir6(), ".solongate");
+  return readdirSync(sgDir).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json")).map((f) => {
+    const p = join8(sgDir, f);
+    let mtime = 0;
+    try {
+      mtime = statSync(p).mtimeMs;
+    } catch {
+    }
+    return { p, mtime };
+  }).sort((a, b) => b.mtime - a.mtime).map((x) => x.p);
+}
 function localLogFile() {
   try {
     const sgDir = join8(homedir6(), ".solongate");
@@ -8498,6 +8533,7 @@ function LivePanel({ active: active2 }) {
   const [cloudBuf, setCloudBuf] = useState2([]);
   const [localBuf, setLocalBuf] = useState2([]);
   const [localOn, setLocalOn] = useState2(null);
+  const [localPath, setLocalPath] = useState2(null);
   const [ring, setRing] = useState2(null);
   const [log3, setLog] = useState2([]);
   const [filter, setFilter] = useState2("all");
@@ -8552,12 +8588,11 @@ function LivePanel({ active: active2 }) {
   const paused = () => frozenRef.current || Date.now() < pausedUntil.current;
   const pollLocal = useCallback2(() => {
     if (frozenRef.current) return;
-    const lines = tailLines(localLogFile());
-    if (!lines.length) {
-      setLocalOn((prev) => prev === null ? false : prev);
-      return;
-    }
-    setLocalOn(true);
+    const setting = localLogsSetting();
+    setLocalOn(setting.enabled);
+    setLocalPath(setting);
+    const lines = tailLines(setting.file);
+    if (!lines.length) return;
     const fresh = [];
     for (const line of lines) {
       try {
@@ -9369,7 +9404,17 @@ function LivePanel({ active: active2 }) {
       searchRow,
       localOn === false ? /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
         /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "local logs off" }),
-        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ` \u2014 enable: dataroom \u2192 Settings (local logs) or dashboard \u2192 Settings \xB7 hooks write ${localLogFile()}` })
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2014 enable: dataroom \u2192 Settings (local logs) or dashboard \u2192 Settings" })
+      ] }) : localOn && localPath && !localPath.usableHere ? (
+        // The folder is a PROJECT setting, so it can name a path that exists
+        // on another machine. Saying so beats showing a path nothing writes to.
+        /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "local logs on" }),
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ` \u2014 ${localPath.configuredPath} is not a folder on this device \xB7 writing to ${localPath.file}` })
+        ] })
+      ) : localOn && localBuf.length === 0 ? /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: "local logs on" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ` \u2014 no entries yet \xB7 hooks write ${localPath?.file ?? ""}` })
       ] }) : null,
       windowed.length === 0 ? (
         // With a source filter on, "awaiting traffic" reads as "nothing is
@@ -11573,6 +11618,18 @@ function SettingsPanel({
   const [diagBusy, setDiagBusy] = useState8(null);
   const [autoUp, setAutoUp] = useState8(() => autoUpdateEnabled());
   const [updBusy, setUpdBusy] = useState8(false);
+  const [llSetting, setLlSetting] = useState8(null);
+  useEffect7(() => {
+    const read = () => {
+      try {
+        setLlSetting(localLogsSetting());
+      } catch {
+      }
+    };
+    read();
+    const t = setInterval(read, 5e3);
+    return () => clearInterval(t);
+  }, []);
   const [canInstall, setCanInstall] = useState8(null);
   useEffect7(() => {
     let live2 = true;
@@ -12229,7 +12286,16 @@ function SettingsPanel({
         return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
           cursor(r),
           /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "path ".padEnd(11) }),
-          local?.path ? /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate2(local.path, cols - 14) }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "not set \u2014 enter to edit" })
+          local?.path ? (
+            // The folder is a PROJECT setting shared by every device on it, so
+            // it can name a path that only exists on another OS. The hooks then
+            // quietly fall back and this row was the last place still claiming
+            // the configured path was in use.
+            llSetting && local.enabled && !llSetting.usableHere ? /* @__PURE__ */ jsxs8(Fragment5, { children: [
+              /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: truncate2(local.path, Math.max(12, Math.floor((cols - 20) / 2))) }),
+              /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: `  not valid here \u2192 ${truncate2(llSetting.file, Math.max(12, Math.floor((cols - 20) / 2)))}` })
+            ] }) : /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate2(local.path, cols - 14) })
+          ) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "not set \u2014 enter to edit" })
         ] });
       case "ll-server":
         return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [

package/dist/tui/index.js

@@ -741,6 +741,41 @@ import { homedir as homedir2 } from "os";
 import { createHash } from "crypto";
 import { isAbsolute, join as join2 } from "path";
 var DEFAULT_LOCAL_LOG = join2(homedir2(), ".solongate", "local-logs", "solongate-audit.jsonl");
+function localLogsSetting() {
+  const off = { enabled: false, configuredPath: null, usableHere: true, file: DEFAULT_LOCAL_LOG };
+  try {
+    for (const cache of policyCachesNewestFirst()) {
+      try {
+        const c2 = JSON.parse(readFileSync2(cache, "utf-8"));
+        const l = c2?.security?.localLogs;
+        if (!l || typeof l.enabled !== "boolean") continue;
+        if (!l.enabled) return { ...off, configuredPath: typeof l.path === "string" ? l.path.trim() || null : null };
+        const raw = typeof l.path === "string" ? l.path.trim() : "";
+        const dir = raw.replace(/[\\/]+$/, "");
+        if (!dir) return { enabled: true, configuredPath: null, usableHere: true, file: DEFAULT_LOCAL_LOG };
+        if (!isAbsolute(dir)) return { enabled: true, configuredPath: raw, usableHere: false, file: DEFAULT_LOCAL_LOG };
+        const file = join2(dir, "solongate-audit.jsonl");
+        const usable = existsSync(file) || existsSync(dir);
+        return { enabled: true, configuredPath: raw, usableHere: usable, file: usable ? file : DEFAULT_LOCAL_LOG };
+      } catch {
+      }
+    }
+  } catch {
+  }
+  return off;
+}
+function policyCachesNewestFirst() {
+  const sgDir = join2(homedir2(), ".solongate");
+  return readdirSync(sgDir).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json")).map((f) => {
+    const p = join2(sgDir, f);
+    let mtime = 0;
+    try {
+      mtime = statSync(p).mtimeMs;
+    } catch {
+    }
+    return { p, mtime };
+  }).sort((a, b) => b.mtime - a.mtime).map((x) => x.p);
+}
 function localLogFile() {
   try {
     const sgDir = join2(homedir2(), ".solongate");
@@ -1619,6 +1654,7 @@ function LivePanel({ active: active2 }) {
   const [cloudBuf, setCloudBuf] = useState2([]);
   const [localBuf, setLocalBuf] = useState2([]);
   const [localOn, setLocalOn] = useState2(null);
+  const [localPath, setLocalPath] = useState2(null);
   const [ring, setRing] = useState2(null);
   const [log, setLog] = useState2([]);
   const [filter, setFilter] = useState2("all");
@@ -1673,12 +1709,11 @@ function LivePanel({ active: active2 }) {
   const paused = () => frozenRef.current || Date.now() < pausedUntil.current;
   const pollLocal = useCallback2(() => {
     if (frozenRef.current) return;
-    const lines = tailLines(localLogFile());
-    if (!lines.length) {
-      setLocalOn((prev) => prev === null ? false : prev);
-      return;
-    }
-    setLocalOn(true);
+    const setting = localLogsSetting();
+    setLocalOn(setting.enabled);
+    setLocalPath(setting);
+    const lines = tailLines(setting.file);
+    if (!lines.length) return;
     const fresh = [];
     for (const line of lines) {
       try {
@@ -2490,7 +2525,17 @@ function LivePanel({ active: active2 }) {
       searchRow,
       localOn === false ? /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
         /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "local logs off" }),
-        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ` \u2014 enable: dataroom \u2192 Settings (local logs) or dashboard \u2192 Settings \xB7 hooks write ${localLogFile()}` })
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2014 enable: dataroom \u2192 Settings (local logs) or dashboard \u2192 Settings" })
+      ] }) : localOn && localPath && !localPath.usableHere ? (
+        // The folder is a PROJECT setting, so it can name a path that exists
+        // on another machine. Saying so beats showing a path nothing writes to.
+        /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "local logs on" }),
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ` \u2014 ${localPath.configuredPath} is not a folder on this device \xB7 writing to ${localPath.file}` })
+        ] })
+      ) : localOn && localBuf.length === 0 ? /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: "local logs on" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ` \u2014 no entries yet \xB7 hooks write ${localPath?.file ?? ""}` })
       ] }) : null,
       windowed.length === 0 ? (
         // With a source filter on, "awaiting traffic" reads as "nothing is
@@ -4699,6 +4744,18 @@ function SettingsPanel({
   const [diagBusy, setDiagBusy] = useState8(null);
   const [autoUp, setAutoUp] = useState8(() => autoUpdateEnabled());
   const [updBusy, setUpdBusy] = useState8(false);
+  const [llSetting, setLlSetting] = useState8(null);
+  useEffect7(() => {
+    const read = () => {
+      try {
+        setLlSetting(localLogsSetting());
+      } catch {
+      }
+    };
+    read();
+    const t = setInterval(read, 5e3);
+    return () => clearInterval(t);
+  }, []);
   const [canInstall, setCanInstall] = useState8(null);
   useEffect7(() => {
     let live2 = true;
@@ -5355,7 +5412,16 @@ function SettingsPanel({
         return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
           cursor(r),
           /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "path ".padEnd(11) }),
-          local?.path ? /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate(local.path, cols - 14) }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "not set \u2014 enter to edit" })
+          local?.path ? (
+            // The folder is a PROJECT setting shared by every device on it, so
+            // it can name a path that only exists on another OS. The hooks then
+            // quietly fall back and this row was the last place still claiming
+            // the configured path was in use.
+            llSetting && local.enabled && !llSetting.usableHere ? /* @__PURE__ */ jsxs8(Fragment5, { children: [
+              /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: truncate(local.path, Math.max(12, Math.floor((cols - 20) / 2))) }),
+              /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: `  not valid here \u2192 ${truncate(llSetting.file, Math.max(12, Math.floor((cols - 20) / 2)))}` })
+            ] }) : /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate(local.path, cols - 14) })
+          ) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "not set \u2014 enter to edit" })
         ] });
       case "ll-server":
         return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [

package/dist/tui/local-log.d.ts

@@ -16,6 +16,27 @@ export declare const DEFAULT_LOCAL_LOG: string;
  * it the same way they do, preferring the most recently refreshed cache. Falls
  * back to the default path when nothing is configured or readable.
  */
+/** What local logging is set to on this device, and where it can actually go. */
+export interface LocalLogSetting {
+    /** The project setting, as the hooks read it. */
+    enabled: boolean;
+    /** The folder the project asked for, verbatim (null when nothing is set). */
+    configuredPath: string | null;
+    /** False when that folder cannot be used HERE — e.g. a Windows path on Linux. */
+    usableHere: boolean;
+    /** The file entries actually land in, after any fallback. */
+    file: string;
+}
+/**
+ * Read the local-logging SETTING, not its output.
+ *
+ * Live used to decide on/off by whether the log file had any lines in it, so an
+ * enabled log that happened to be empty — a fresh install, a folder just
+ * changed, an account just switched — reported "local logs off" and told the
+ * user to go and enable something that was already on. The setting and the
+ * evidence of the setting are different questions; this answers the first.
+ */
+export declare function localLogsSetting(): LocalLogSetting;
 export declare function localLogFile(): string;
 /** Resolved once per process for callers that want a plain path (the folder can
  *  only change via a dashboard edit, which needs a new session anyway). Prefer

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.83.6",
+  "version": "0.83.7",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {