@solongate/proxy 0.83.9 → 0.83.10

package/dist/index.js

@@ -12363,6 +12363,12 @@ function SettingsPanel({
         ] }, "h:" + sec)
       );
       lineKey.push("");
+      if ((sec === "WEBHOOKS" || sec === "ALERTS") && local?.enabled) {
+        lineEls.push(
+          /* @__PURE__ */ jsx8(Text8, { wrap: "truncate", color: theme.warn, children: `  \u26A0 local logs on \u2014 real denials stay on this machine, so ${sec.toLowerCase()} do NOT fire${sec === "WEBHOOKS" ? " (t test still works)" : ""}` }, "warn:" + sec)
+        );
+        lineKey.push("");
+      }
     }
     lineEls.push(/* @__PURE__ */ jsx8(Box8, { children: rowLine(r) }, keyOf(r)));
     lineKey.push(keyOf(r));

package/dist/tui/index.js

@@ -5489,6 +5489,12 @@ function SettingsPanel({
         ] }, "h:" + sec)
       );
       lineKey.push("");
+      if ((sec === "WEBHOOKS" || sec === "ALERTS") && local?.enabled) {
+        lineEls.push(
+          /* @__PURE__ */ jsx8(Text8, { wrap: "truncate", color: theme.warn, children: `  \u26A0 local logs on \u2014 real denials stay on this machine, so ${sec.toLowerCase()} do NOT fire${sec === "WEBHOOKS" ? " (t test still works)" : ""}` }, "warn:" + sec)
+        );
+        lineKey.push("");
+      }
     }
     lineEls.push(/* @__PURE__ */ jsx8(Box8, { children: rowLine(r) }, keyOf(r)));
     lineKey.push(keyOf(r));

package/hooks/audit.mjs

@@ -11,7 +11,7 @@ import { homedir } from 'node:os';
 // Bump on every audit hook change. The cloud serves the newest version; the guard
 // hook installs it on its next run (no re-login needed). See guard.mjs
 // fetchAndInstallHook / maybeSelfUpdate.
-const HOOK_VERSION = 25;
+const HOOK_VERSION = 26;
 
 function loadEnvKey(dir) {
   try {
@@ -748,11 +748,8 @@ try { input += readFileSync(0, 'utf-8'); } catch {}
       try { rateLimitBurst = rateLimitObserveBurst(AGENT_ID, loadRateLimitObserve()); } catch { rateLimitBurst = false; }
     }
 
-    // Local log storage (opt-in) MIRRORS: the entry is appended to the user's
-    // chosen file AND still sent to the cloud. It used to divert instead, so a
-    // project with local logs on saw an empty dashboard with nothing to say the
-    // emptiness was deliberate — while the dataroom called the same setting
-    // "mirror every decision to a file".
+    // Local log storage (opt-in): when ON, logs are kept LOCAL ONLY — we append
+    // this entry to the user's chosen file and do NOT send it to the cloud.
     const localLogs = loadLocalLogs();
     if (localLogs) {
       appendLocalLog(localLogs, {
@@ -762,8 +759,9 @@ try { input += readFileSync(0, 'utf-8'); } catch {}
         ...(dlpMatches.length ? { dlp: dlpMatches } : {}),
         ...(rateLimitBurst ? { rate_limit_burst: true } : {}),
       });
-    }
-    {
+      fetchDone = true;
+      maybeExit();
+    } else {
       // Fire-and-forget: don't block tool execution waiting for API response
       fetch(`${API_URL}/api/v1/audit-logs`, {
         method: 'POST',

package/hooks/guard.bundled.mjs

@@ -6536,7 +6536,7 @@ import { resolve, join, dirname, isAbsolute } from "node:path";
 import { homedir } from "node:os";
 import { gunzipSync } from "node:zlib";
 import { createHash } from "node:crypto";
-var HOOK_VERSION = 74;
+var HOOK_VERSION = 75;
 function localLogsOnly(security) {
   if (security !== void 0) {
     const l = security && security.localLogs;
@@ -8428,12 +8428,13 @@ if (!REFRESH_MODE) {
           } catch {
           }
           try {
-            await fetch(API_URL + "/api/v1/audit-logs", {
-              method: "POST",
-              headers: { "Content-Type": "application/json", ...AUTH_HEADERS },
-              body: JSON.stringify(_logEntry),
-              signal: AbortSignal.timeout(3e3)
-            });
+            if (!localLogsOnly(_sec))
+              await fetch(API_URL + "/api/v1/audit-logs", {
+                method: "POST",
+                headers: { "Content-Type": "application/json", ...AUTH_HEADERS },
+                body: JSON.stringify(_logEntry),
+                signal: AbortSignal.timeout(3e3)
+              });
           } catch {
           }
           if (AGENT_TYPE !== "codex")
@@ -8545,23 +8546,24 @@ if (!REFRESH_MODE) {
           }
           writeLocalLog(securityCfg, { ts: (/* @__PURE__ */ new Date()).toISOString(), tool: toolName, arguments: args, decision: "DENY", reason: "ghost path (hidden from agent)", permission: guessPermission(toolName), source: `${AGENT_TYPE}-guard`, agent_id: AGENT_TYPE, agent_name: AGENT_NAME, session_id: call.sessionId, evaluation_time_ms: Date.now() - _evalStart });
           try {
-            await fetch(API_URL + "/api/v1/audit-logs", {
-              method: "POST",
-              headers: { "Content-Type": "application/json", ...AUTH_HEADERS },
-              body: JSON.stringify({
-                tool: toolName,
-                arguments: args,
-                decision: "DENY",
-                reason: "ghost path (hidden from agent)",
-                permission: guessPermission(toolName),
-                source: `${AGENT_TYPE}-guard`,
-                agent_id: AGENT_TYPE,
-                agent_name: AGENT_NAME,
-                session_id: call.sessionId,
-                evaluation_time_ms: Date.now() - _evalStart
-              }),
-              signal: AbortSignal.timeout(3e3)
-            });
+            if (!localLogsOnly(securityCfg))
+              await fetch(API_URL + "/api/v1/audit-logs", {
+                method: "POST",
+                headers: { "Content-Type": "application/json", ...AUTH_HEADERS },
+                body: JSON.stringify({
+                  tool: toolName,
+                  arguments: args,
+                  decision: "DENY",
+                  reason: "ghost path (hidden from agent)",
+                  permission: guessPermission(toolName),
+                  source: `${AGENT_TYPE}-guard`,
+                  agent_id: AGENT_TYPE,
+                  agent_name: AGENT_NAME,
+                  session_id: call.sessionId,
+                  evaluation_time_ms: Date.now() - _evalStart
+                }),
+                signal: AbortSignal.timeout(3e3)
+              });
           } catch {
           }
           blockTool(ghostHit, true);
@@ -8642,12 +8644,13 @@ if (!REFRESH_MODE) {
               evaluation_time_ms: Date.now() - _evalStart
             };
             writeLocalLog(securityCfg, { ts: (/* @__PURE__ */ new Date()).toISOString(), ...logEntry });
-            await fetch(API_URL + "/api/v1/audit-logs", {
-              method: "POST",
-              headers: { "Content-Type": "application/json", ...AUTH_HEADERS },
-              body: JSON.stringify(logEntry),
-              signal: AbortSignal.timeout(3e3)
-            });
+            if (!localLogsOnly(securityCfg))
+              await fetch(API_URL + "/api/v1/audit-logs", {
+                method: "POST",
+                headers: { "Content-Type": "application/json", ...AUTH_HEADERS },
+                body: JSON.stringify(logEntry),
+                signal: AbortSignal.timeout(3e3)
+              });
           } catch {
           }
         }

package/hooks/guard.mjs

@@ -32,13 +32,11 @@ import { createHash } from 'node:crypto';
 // the installed hook self-updates when the cloud version is higher (see
 // maybeSelfUpdate). This is what makes guard fixes propagate without a manual
 // reinstall — the same trust model as the OPA WASM this hook already runs.
-const HOOK_VERSION = 74;
+const HOOK_VERSION = 75;
 
-// True when local log storage is ON — meaning a copy is written to this
-// machine. It is a MIRROR, not a diversion: the cloud audit log is written
-// either way. The dataroom always described it as "mirror every decision to a
-// file"; the code diverted instead, so a project with local logs on had nothing
-// in the dashboard and no way to tell that was deliberate.
+// True when local log storage is ON. In that mode logs are kept LOCAL ONLY and
+// nothing is sent to the cloud audit log — local and cloud are one or the
+// other, never both.
 //
 // `undefined` is the ONLY value that means "we do not know yet". `null` is an
 // answer: it is what the refresh writes when the API returns no security block,
@@ -2426,7 +2424,7 @@ if (!REFRESH_MODE) { try { input += readFileSync(0, 'utf-8'); } catch {} }
         };
         try { writeLocalLog(_sec, { ts: new Date().toISOString(), ..._logEntry }); } catch {}
         try {
-          await fetch(API_URL + '/api/v1/audit-logs', {
+          if (!localLogsOnly(_sec)) await fetch(API_URL + '/api/v1/audit-logs', {
             method: 'POST',
             headers: { 'Content-Type': 'application/json', ...AUTH_HEADERS },
             body: JSON.stringify(_logEntry),
@@ -2579,7 +2577,7 @@ if (!REFRESH_MODE) { try { input += readFileSync(0, 'utf-8'); } catch {} }
         try { writeDenyFlag(toolName); } catch {}
         writeLocalLog(securityCfg, { ts: new Date().toISOString(), tool: toolName, arguments: args, decision: 'DENY', reason: 'ghost path (hidden from agent)', permission: guessPermission(toolName), source: `${AGENT_TYPE}-guard`, agent_id: AGENT_TYPE, agent_name: AGENT_NAME, session_id: call.sessionId, evaluation_time_ms: Date.now() - _evalStart });
         try {
-          await fetch(API_URL + '/api/v1/audit-logs', {
+          if (!localLogsOnly(securityCfg)) await fetch(API_URL + '/api/v1/audit-logs', {
             method: 'POST',
             headers: { 'Content-Type': 'application/json', ...AUTH_HEADERS },
             body: JSON.stringify({
@@ -2721,7 +2719,7 @@ if (!REFRESH_MODE) { try { input += readFileSync(0, 'utf-8'); } catch {} }
           writeLocalLog(securityCfg, { ts: new Date().toISOString(), ...logEntry });
           // PI hook layer removed — piResult fields no longer attached.
           // Local-only mode: keep the log on the user's machine, skip the cloud.
-          await fetch(API_URL + '/api/v1/audit-logs', {
+          if (!localLogsOnly(securityCfg)) await fetch(API_URL + '/api/v1/audit-logs', {
             method: 'POST',
             headers: { 'Content-Type': 'application/json', ...AUTH_HEADERS },
             body: JSON.stringify(logEntry),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.83.9",
+  "version": "0.83.10",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {