@solongate/proxy 0.49.1 → 0.50.0

package/dist/index.js

@@ -3412,12 +3412,12 @@ ${ctx.indent}`;
       for (const {
         format,
         test,
-        resolve: resolve8
+        resolve: resolve7
       } of tags) {
         if (test) {
           const match = str.match(test);
           if (match) {
-            let res = resolve8.apply(null, match);
+            let res = resolve7.apply(null, match);
             if (!(res instanceof Scalar)) res = new Scalar(res);
             if (format) res.format = format;
             return res;
@@ -6775,707 +6775,10 @@ var init_global_install = __esm({
   }
 });
 
-// src/init.ts
-var init_exports = {};
-import { readFileSync as readFileSync6, writeFileSync as writeFileSync4, existsSync as existsSync5, mkdirSync as mkdirSync5 } from "fs";
-import { resolve as resolve4, join as join5, dirname as dirname3 } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
-import { execFileSync as execFileSync3 } from "child_process";
-import { createInterface as createInterface2 } from "readline";
-function startSpinner(message) {
-  spinnerFrame = 0;
-  process.stderr.write(`  ${SPINNER_FRAMES[0]} ${message}`);
-  spinnerInterval = setInterval(() => {
-    spinnerFrame = (spinnerFrame + 1) % SPINNER_FRAMES.length;
-    process.stderr.write(`\r  ${SPINNER_FRAMES[spinnerFrame]} ${message}`);
-  }, 80);
-}
-function stopSpinner(result) {
-  if (spinnerInterval) {
-    clearInterval(spinnerInterval);
-    spinnerInterval = null;
-  }
-  process.stderr.write(`\r  ${result}
-`);
-}
-function findConfigFile(explicitPath, createIfMissing = false) {
-  if (explicitPath) {
-    if (existsSync5(explicitPath)) {
-      return { path: resolve4(explicitPath), type: "mcp" };
-    }
-    return null;
-  }
-  for (const searchPath of SEARCH_PATHS) {
-    const full = resolve4(searchPath);
-    if (existsSync5(full)) return { path: full, type: "mcp" };
-  }
-  if (createIfMissing) {
-    const starterConfig = {
-      mcpServers: {
-        "filesystem": {
-          command: "npx",
-          args: ["-y", "@modelcontextprotocol/server-filesystem@latest", "."]
-        },
-        "playwright": {
-          command: "npx",
-          args: ["-y", "@playwright/mcp@latest"]
-        }
-      }
-    };
-    const starterPath = resolve4(".mcp.json");
-    writeFileSync4(starterPath, JSON.stringify(starterConfig, null, 2) + "\n");
-    console.log("  Created .mcp.json with starter servers (filesystem, playwright).");
-    console.log("");
-    return { path: starterPath, type: "mcp", created: true };
-  }
-  for (const desktopPath of CLAUDE_DESKTOP_PATHS) {
-    if (existsSync5(desktopPath)) return { path: desktopPath, type: "claude-desktop" };
-  }
-  return null;
-}
-function readConfig(filePath) {
-  const content = readFileSync6(filePath, "utf-8");
-  const parsed = JSON.parse(content);
-  if (parsed.mcpServers) return parsed;
-  throw new Error(`Unrecognized config format in ${filePath}`);
-}
-function isAlreadyProtected(server) {
-  const args = server.args ?? [];
-  if (server.command === "solongate-proxy") return true;
-  if (server.command === "@solongate/proxy") return true;
-  for (const arg of args) {
-    if (arg === "-y" || arg === "--yes") continue;
-    if (arg === "@solongate/proxy" || arg === "@solongate/proxy@latest" || arg === "solongate-proxy") return true;
-    if (/[/\\]packages[/\\]proxy[/\\]dist[/\\]index\.js$/.test(arg)) return true;
-    break;
-  }
-  return false;
-}
-function wrapServer(serverName, server, policy, agentName) {
-  const env = { ...server.env ?? {} };
-  env.SOLONGATE_API_KEY = "${SOLONGATE_API_KEY}";
-  const proxyArgs = ["-y", "@solongate/proxy@latest"];
-  if (policy) {
-    proxyArgs.push("--policy", policy);
-  }
-  if (agentName) {
-    proxyArgs.push("--agent-name", agentName);
-  }
-  proxyArgs.push("--verbose", "--", server.command, ...server.args ?? []);
-  return {
-    command: "npx",
-    args: proxyArgs,
-    env
-  };
-}
-async function prompt(question) {
-  const rl = createInterface2({ input: process.stdin, output: process.stderr });
-  return new Promise((res) => {
-    rl.question(question, (answer) => {
-      rl.close();
-      res(answer.trim());
-    });
-  });
-}
-function parseInitArgs(argv) {
-  const args = argv.slice(2);
-  const options = {
-    all: false,
-    tools: [],
-    global: false,
-    restore: false
-  };
-  for (let i = 0; i < args.length; i++) {
-    switch (args[i]) {
-      case "--config":
-        options.configPath = args[++i];
-        break;
-      case "--policy":
-        options.policy = args[++i];
-        break;
-      case "--api-key":
-        options.apiKey = args[++i];
-        break;
-      case "--all":
-        options.all = true;
-        break;
-      case "--global":
-      case "-g":
-        options.global = true;
-        break;
-      case "--restore":
-      case "--uninstall":
-        options.restore = true;
-        break;
-      case "--claude-code":
-        options.tools.push("claude-code");
-        break;
-      case "--gemini":
-        options.tools.push("gemini");
-        break;
-      case "--help":
-      case "-h":
-        printHelp();
-        process.exit(0);
-    }
-  }
-  return options;
-}
-function printHelp() {
-  const help = `
-SolonGate Init \u2014 Protect your MCP servers in seconds
-
-USAGE
-  npx @solongate/proxy init --all
-  npx @solongate/proxy init --global          # system-wide (every project)
-
-OPTIONS
-  --config <path>     Path to MCP config file (default: auto-detect)
-  --policy <file>     Custom policy JSON file (auto-detects policy.json)
-  --api-key <key>     SolonGate API key (sg_live_... or sg_test_...)
-  --all               Protect all servers without prompting
-  --global, -g        Install a SYSTEM-WIDE Claude Code hook (~/.claude) that
-                      guards EVERY session on the machine with your cloud
-                      policy (OPA WASM) \u2014 like the air-gapped product.
-  --restore           With --global: undo the system-wide install.
-  -h, --help          Show this help message
-
-AI TOOL HOOKS (default: all)
-  --claude-code       Install hooks for Claude Code
-  --gemini            Install hooks for Gemini CLI
-
-EXAMPLES
-  npx @solongate/proxy init --all                          # Protect everything, all tools
-  npx @solongate/proxy init --all --claude-code            # Only Claude Code hooks
-  npx @solongate/proxy init --all --policy policy.json     # With custom policy
-  npx @solongate/proxy init --global --api-key sg_live_\u2026   # System-wide enforcement
-  npx @solongate/proxy init --global --restore             # Undo system-wide install
-`;
-  console.log(help);
-}
-function readHookScript(filename) {
-  return readFileSync6(join5(HOOKS_DIR2, filename), "utf-8");
-}
-function readGuardForGlobal() {
-  const bundled = join5(HOOKS_DIR2, "guard.bundled.mjs");
-  if (existsSync5(bundled)) return readFileSync6(bundled, "utf-8");
-  return readFileSync6(join5(HOOKS_DIR2, "guard.mjs"), "utf-8");
-}
-function unlockProtectedDirs() {
-  const dirs = [".solongate", ".claude", ".gemini"];
-  for (const dir of dirs) {
-    const fullDir = resolve4(dir);
-    if (!existsSync5(fullDir)) continue;
-    try {
-      if (process.platform === "win32") {
-        try {
-          execFileSync3("icacls", [fullDir, "/remove:d", "*S-1-1-0", "/T", "/Q"], { stdio: "ignore" });
-        } catch {
-        }
-        try {
-          execFileSync3("attrib", ["-R", "/S", "/D", fullDir], { stdio: "ignore" });
-        } catch {
-        }
-      } else {
-        try {
-          execFileSync3("chattr", ["-i", "-R", fullDir], { stdio: "ignore" });
-        } catch {
-        }
-        execFileSync3("chmod", ["-R", "u+w", fullDir], { stdio: "ignore" });
-      }
-    } catch {
-    }
-  }
-  const protectedFiles = [".env", ".gitignore", ".mcp.json", "policy.json"];
-  for (const file of protectedFiles) {
-    const fullPath = resolve4(file);
-    if (!existsSync5(fullPath)) continue;
-    try {
-      if (process.platform === "win32") {
-        try {
-          execFileSync3("icacls", [fullPath, "/remove:d", "*S-1-1-0", "/Q"], { stdio: "ignore" });
-        } catch {
-        }
-        try {
-          execFileSync3("attrib", ["-R", fullPath], { stdio: "ignore" });
-        } catch {
-        }
-      } else {
-        try {
-          execFileSync3("chattr", ["-i", fullPath], { stdio: "ignore" });
-        } catch {
-        }
-        execFileSync3("chmod", ["u+w", fullPath], { stdio: "ignore" });
-      }
-    } catch {
-    }
-  }
-}
-function installHooks(selectedTools = [], wrappedMcpConfig) {
-  unlockProtectedDirs();
-  const hooksDir = resolve4(".solongate", "hooks");
-  mkdirSync5(hooksDir, { recursive: true });
-  const hookFiles = ["guard.mjs", "audit.mjs", "stop.mjs"];
-  let hooksUpdated = 0;
-  let hooksSkipped = 0;
-  for (const filename of hookFiles) {
-    const hookPath = join5(hooksDir, filename);
-    const latest = filename === "guard.mjs" ? readGuardForGlobal() : readHookScript(filename);
-    let needsWrite = true;
-    if (existsSync5(hookPath)) {
-      const current = readFileSync6(hookPath, "utf-8");
-      if (current === latest) {
-        needsWrite = false;
-        hooksSkipped++;
-      }
-    }
-    if (needsWrite) {
-      writeFileSync4(hookPath, latest);
-      hooksUpdated++;
-      console.log(`  ${existsSync5(hookPath) ? "Updated" : "Created"} ${hookPath}`);
-    }
-  }
-  if (hooksSkipped > 0 && hooksUpdated === 0) {
-    console.log(`  Hook files already up to date`);
-  }
-  const allClients = [
-    { name: "Claude Code", dir: ".claude", key: "claude-code", agentId: "claude-code", agentName: "Claude Code" },
-    { name: "Gemini CLI", dir: ".gemini", key: "gemini", agentId: "gemini-cli", agentName: "Gemini CLI" }
-  ];
-  const clients = selectedTools.length > 0 ? allClients.filter((c3) => selectedTools.includes(c3.key)) : allClients;
-  const activatedNames = [];
-  const skippedNames = [];
-  for (const client of clients) {
-    const clientDir = resolve4(client.dir);
-    mkdirSync5(clientDir, { recursive: true });
-    const nodeBin = process.execPath.replace(/\\/g, "/");
-    const guardCmd = `"${nodeBin}" .solongate/hooks/guard.mjs ${client.agentId} "${client.agentName}"`;
-    const auditCmd = `"${nodeBin}" .solongate/hooks/audit.mjs ${client.agentId} "${client.agentName}"`;
-    const stopCmd = `"${nodeBin}" .solongate/hooks/stop.mjs ${client.agentId} "${client.agentName}"`;
-    if (client.key === "gemini") {
-      const result = installGeminiConfig(clientDir, guardCmd, auditCmd, stopCmd, wrappedMcpConfig);
-      if (result === "skipped") skippedNames.push(client.name);
-      else activatedNames.push(client.name);
-    } else {
-      const result = installStandardHookConfig(clientDir, client.name, guardCmd, auditCmd, stopCmd);
-      if (result === "skipped") skippedNames.push(client.name);
-      else activatedNames.push(client.name);
-    }
-  }
-  console.log("");
-  if (activatedNames.length > 0) {
-    console.log("  Hooks installed:");
-    console.log("  guard.mjs  \u2192 blocks policy-violating calls (pre-execution)");
-    console.log("  audit.mjs  \u2192 logs all calls to dashboard (post-execution)");
-    console.log("  stop.mjs   \u2192 tracks text-only responses (no tool calls)");
-    console.log(`  Activated for: ${activatedNames.join(", ")}`);
-  }
-  if (skippedNames.length > 0) {
-    console.log(`  Already configured: ${skippedNames.join(", ")}`);
-  }
-}
-function installStandardHookConfig(clientDir, clientName, guardCmd, auditCmd, stopCmd) {
-  const settingsPath = join5(clientDir, "settings.json");
-  const hookSettings = {
-    PreToolUse: [
-      { matcher: "", hooks: [{ type: "command", command: guardCmd }] }
-    ],
-    PostToolUse: [
-      { matcher: "", hooks: [{ type: "command", command: auditCmd }] }
-    ],
-    Stop: [
-      { matcher: "", hooks: [{ type: "command", command: stopCmd }] }
-    ]
-  };
-  let existing = {};
-  try {
-    existing = JSON.parse(readFileSync6(settingsPath, "utf-8"));
-  } catch {
-  }
-  const merged = { ...existing, hooks: hookSettings };
-  const mergedStr = JSON.stringify(merged, null, 2) + "\n";
-  const existingStr = existsSync5(settingsPath) ? readFileSync6(settingsPath, "utf-8") : "";
-  if (mergedStr === existingStr) return "skipped";
-  writeFileSync4(settingsPath, mergedStr);
-  console.log(`  ${existingStr ? "Updated" : "Created"} ${settingsPath}`);
-  return "installed";
-}
-function installGeminiConfig(clientDir, guardCmd, auditCmd, _stopCmd, wrappedMcpConfig) {
-  const settingsPath = join5(clientDir, "settings.json");
-  let existing = {};
-  try {
-    existing = JSON.parse(readFileSync6(settingsPath, "utf-8"));
-  } catch {
-  }
-  const merged = { ...existing };
-  if (wrappedMcpConfig) {
-    const geminiMcp = {};
-    for (const [name, server] of Object.entries(wrappedMcpConfig.mcpServers)) {
-      const args = [...server.args ?? []];
-      const agentIdx = args.indexOf("--agent-name");
-      if (agentIdx >= 0 && agentIdx + 1 < args.length) {
-        args[agentIdx + 1] = "gemini-cli";
-      } else {
-        const sepIdx = args.indexOf("--");
-        if (sepIdx >= 0) args.splice(sepIdx, 0, "--agent-name", "gemini-cli");
-      }
-      geminiMcp[name] = { ...server, args };
-    }
-    merged.mcpServers = geminiMcp;
-  }
-  merged.hooks = {
-    BeforeTool: [
-      { matcher: ".*", hooks: [{ type: "command", command: guardCmd }] }
-    ],
-    AfterTool: [
-      { matcher: ".*", hooks: [{ type: "command", command: auditCmd }] }
-    ]
-  };
-  const mergedStr = JSON.stringify(merged, null, 2) + "\n";
-  const existingStr = existsSync5(settingsPath) ? readFileSync6(settingsPath, "utf-8") : "";
-  if (mergedStr === existingStr) return "skipped";
-  writeFileSync4(settingsPath, mergedStr);
-  console.log(`  ${existingStr ? "Updated" : "Created"} ${settingsPath}`);
-  return "installed";
-}
-function ensureEnvFile() {
-  let envChanged = false;
-  let gitignoreChanged = false;
-  const envPath = resolve4(".env");
-  if (!existsSync5(envPath)) {
-    const envContent = `# SolonGate Configuration
-# IMPORTANT: Never commit this file to git!
-
-# Your SolonGate API key \u2014 get one at https://dashboard.solongate.com
-SOLONGATE_API_KEY=sg_live_your_key_here
-
-# AI Judge (semantic security layer) \u2014 get a free key at https://console.groq.com/keys
-# Enable with: npx @solongate/proxy --ai-judge ...
-GROQ_API_KEY=gsk_your_groq_key_here
-`;
-    writeFileSync4(envPath, envContent);
-    console.log(`  Created .env`);
-    console.log(`  \u2192 Set your API key in .env (get one at https://dashboard.solongate.com)`);
-    envChanged = true;
-  } else {
-    const existingEnv = readFileSync6(envPath, "utf-8");
-    if (!existingEnv.includes("SOLONGATE_API_KEY")) {
-      const separator = existingEnv.endsWith("\n") ? "" : "\n";
-      const appendContent = `${separator}
-# SolonGate API key \u2014 get one at https://dashboard.solongate.com
-SOLONGATE_API_KEY=sg_live_your_key_here
-`;
-      writeFileSync4(envPath, existingEnv + appendContent);
-      console.log(`  Updated .env (added SOLONGATE_API_KEY)`);
-      console.log(`  \u2192 Set your API key in .env (get one at https://dashboard.solongate.com)`);
-      envChanged = true;
-    }
-  }
-  const gitignorePath = resolve4(".gitignore");
-  const requiredLines = [
-    ".env",
-    ".env.local",
-    ".mcp.json",
-    ".solongate/**",
-    ".claude/**",
-    ".gemini/**"
-  ];
-  if (existsSync5(gitignorePath)) {
-    let gitignore = readFileSync6(gitignorePath, "utf-8");
-    const existingLines = new Set(gitignore.split("\n").map((l) => l.trim()));
-    const missing = requiredLines.filter((line) => !existingLines.has(line));
-    if (missing.length > 0) {
-      gitignore = gitignore.trimEnd() + "\n\n# SolonGate\n" + missing.join("\n") + "\n";
-      writeFileSync4(gitignorePath, gitignore);
-      console.log(`  Updated .gitignore (+${missing.length} entries)`);
-      gitignoreChanged = true;
-    }
-  } else {
-    const content = "# SolonGate\n" + requiredLines.join("\n") + "\nnode_modules/\n";
-    writeFileSync4(gitignorePath, content);
-    console.log(`  Created .gitignore`);
-    gitignoreChanged = true;
-  }
-  if (!envChanged && !gitignoreChanged) {
-    console.log(`  .env and .gitignore already up to date`);
-  }
-  return { envChanged, gitignoreChanged };
-}
-async function main() {
-  const options = parseInitArgs(process.argv);
-  if (options.global) {
-    console.log("");
-    console.log(`  ${c.bold}SolonGate \u2014 Global Install${c.reset}`);
-    console.log("");
-    if (options.restore) {
-      runGlobalRestore();
-    } else {
-      await runGlobalInstall({ apiKey: options.apiKey });
-      console.log("");
-      console.log("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
-      console.log("  \u2502  Global enforcement active.                     \u2502");
-      console.log("  \u2502  Every Claude Code session on this machine is   \u2502");
-      console.log("  \u2502  now guarded by your cloud policy (OPA WASM).   \u2502");
-      console.log("  \u2502                                                 \u2502");
-      console.log("  \u2502  Undo:  init --global --restore                 \u2502");
-      console.log("  \u2502  Logs:  https://dashboard.solongate.com         \u2502");
-      console.log("  \u2502  Restart Claude Code to apply.                  \u2502");
-      console.log("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518");
-    }
-    console.log("");
-    return;
-  }
-  const fullBanner = BANNER_FULL;
-  const mediumBanner = [
-    " \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2557      \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2557   \u2588\u2588\u2557",
-    " \u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2551     \u2588\u2588\u2554\u2550\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2551",
-    " \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2551     \u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2554\u2588\u2588\u2557 \u2588\u2588\u2551",
-    " \u255A\u2550\u2550\u2550\u2550\u2588\u2588\u2551\u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2551     \u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2551\u255A\u2588\u2588\u2557\u2588\u2588\u2551",
-    " \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551\u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2551 \u255A\u2588\u2588\u2588\u2588\u2551",
-    " \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u255D  \u255A\u2550\u2550\u2550\u255D",
-    "          \u2588\u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557",
-    "         \u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D \u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u255A\u2550\u2550\u2588\u2588\u2554\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D",
-    "         \u2588\u2588\u2551  \u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551   \u2588\u2588\u2551   \u2588\u2588\u2588\u2588\u2588\u2557  ",
-    "         \u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2551   \u2588\u2588\u2551   \u2588\u2588\u2554\u2550\u2550\u255D  ",
-    "         \u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2551  \u2588\u2588\u2551   \u2588\u2588\u2551   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557",
-    "          \u255A\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u255D  \u255A\u2550\u255D   \u255A\u2550\u255D   \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D"
-  ];
-  const smallBanner = [
-    " \u250F\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2513",
-    " \u2503   \u2554\u2550\u2557\u2554\u2550\u2557\u2566  \u2554\u2550\u2557\u2554\u2557\u2554\u2554\u2550\u2557    \u2503",
-    " \u2503   \u255A\u2550\u2557\u2551 \u2551\u2551  \u2551 \u2551\u2551\u2551\u2551\u2551 \u2566    \u2503",
-    " \u2503   \u255A\u2550\u255D\u255A\u2550\u255D\u2569\u2550\u255D\u255A\u2550\u255D\u255D\u255A\u255D\u255A\u2550\u255D   \u2503",
-    " \u2503      \u2554\u2550\u2557\u2554\u2550\u2557\u2554\u2566\u2557\u2554\u2550\u2557       \u2503",
-    " \u2503      \u2551 \u2566\u2560\u2550\u2563 \u2551 \u2551\u2563        \u2503",
-    " \u2503      \u255A\u2550\u255D\u2569 \u2569 \u2569 \u255A\u2550\u255D       \u2503",
-    " \u2517\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u251B"
-  ];
-  const cols = process.stdout.columns || 80;
-  const bannerLines = cols >= 82 ? fullBanner : cols >= 50 ? mediumBanner : smallBanner;
-  const bannerColors = BANNER_COLORS;
-  console.log("");
-  for (let i = 0; i < bannerLines.length; i++) {
-    console.log(`${c.bold}${bannerColors[i % bannerColors.length]}${bannerLines[i]}${c.reset}`);
-  }
-  console.log("");
-  console.log(`  ${c.dim}${c.italic}Init Setup${c.reset}`);
-  console.log("");
-  startSpinner("Scanning for MCP config...");
-  await sleep(400);
-  const configInfo = findConfigFile(options.configPath, true);
-  if (!configInfo) {
-    stopSpinner("\u2717 No MCP config found and could not create one.");
-    process.exit(1);
-  }
-  stopSpinner(`\u2713 Found config: ${configInfo.path}`);
-  console.log(`  Type:   ${configInfo.type === "claude-desktop" ? "Claude Desktop" : "MCP JSON"}`);
-  console.log("");
-  const config = readConfig(configInfo.path);
-  const serverNames = Object.keys(config.mcpServers);
-  if (serverNames.length === 0) {
-    console.log("  No MCP servers found in config.");
-    process.exit(1);
-  }
-  startSpinner("Analyzing servers...");
-  await sleep(300);
-  const toProtect = [];
-  const alreadyProtected = [];
-  const skipped = [];
-  for (const name of serverNames) {
-    const server = config.mcpServers[name];
-    if (isAlreadyProtected(server)) {
-      alreadyProtected.push(name);
-    } else {
-      if (options.all) {
-        toProtect.push(name);
-      }
-    }
-  }
-  stopSpinner(`\u2713 Found ${serverNames.length} MCP server(s)`);
-  console.log("");
-  for (const name of serverNames) {
-    const server = config.mcpServers[name];
-    if (alreadyProtected.includes(name)) {
-      console.log(`    [protected] ${name}`);
-    } else {
-      console.log(`    [exposed]   ${name} \u2192 ${server.command} ${(server.args ?? []).join(" ")}`);
-    }
-  }
-  console.log("");
-  if (alreadyProtected.length === serverNames.length) {
-    console.log("  All servers are already protected by SolonGate!");
-    ensureEnvFile();
-    console.log("");
-    installHooks(options.tools, config);
-    process.exit(0);
-  }
-  if (!options.all) {
-    const exposed = serverNames.filter((n) => !alreadyProtected.includes(n));
-    for (const name of exposed) {
-      const answer = await prompt(`  Protect "${name}"? [Y/n] `);
-      if (answer === "" || answer.toLowerCase() === "y" || answer.toLowerCase() === "yes") {
-        toProtect.push(name);
-      } else {
-        skipped.push(name);
-      }
-    }
-  }
-  if (toProtect.length === 0) {
-    console.log("  No servers selected for protection.");
-    ensureEnvFile();
-    process.exit(0);
-  }
-  console.log("");
-  startSpinner("Setting up environment...");
-  await sleep(300);
-  stopSpinner("\u2713 Environment");
-  ensureEnvFile();
-  console.log("");
-  let apiKey = options.apiKey || process.env.SOLONGATE_API_KEY || "";
-  if (!apiKey) {
-    const envPath = resolve4(".env");
-    if (existsSync5(envPath)) {
-      const envContent = readFileSync6(envPath, "utf-8");
-      const match = envContent.match(/^SOLONGATE_API_KEY=(sg_(?:live|test)_\w+)/m);
-      if (match) apiKey = match[1];
-    }
-  }
-  if (!apiKey || apiKey === "sg_live_your_key_here") {
-    if (options.all) {
-      apiKey = "sg_test_demo_init_key";
-      console.log("  No API key found \u2014 using demo test key.");
-      console.log("  Set your real key in .env for cloud features.");
-      console.log("");
-    } else {
-      apiKey = await prompt("  Enter your SolonGate API key (from https://dashboard.solongate.com): ");
-    }
-    if (!apiKey) {
-      console.log("  API key is required. Get one at https://dashboard.solongate.com");
-      process.exit(1);
-    }
-  }
-  if (!apiKey.startsWith("sg_live_") && !apiKey.startsWith("sg_test_")) {
-    console.log("  Invalid API key format. Must start with sg_live_ or sg_test_");
-    process.exit(1);
-  }
-  let policyValue;
-  if (options.policy) {
-    const policyPath = resolve4(options.policy);
-    if (existsSync5(policyPath)) {
-      policyValue = `./${options.policy}`;
-      console.log(`  Policy:  ${policyPath}`);
-    } else {
-      console.log(`  Policy file not found: ${options.policy}`);
-      process.exit(1);
-    }
-  } else {
-    const defaultPolicy = resolve4("policy.json");
-    if (existsSync5(defaultPolicy)) {
-      policyValue = "./policy.json";
-      console.log(`  Policy:  ${defaultPolicy} (auto-detected)`);
-    } else {
-      console.log(`  Policy:  cloud-managed (fetched via API key)`);
-    }
-  }
-  console.log(`  API Key: ${apiKey.slice(0, 12)}...${apiKey.slice(-4)}`);
-  console.log(`  Protecting: ${toProtect.join(", ")}`);
-  console.log("");
-  startSpinner("Wrapping MCP servers with proxy...");
-  const newConfig = { mcpServers: {} };
-  for (const name of serverNames) {
-    if (toProtect.includes(name)) {
-      newConfig.mcpServers[name] = wrapServer(name, config.mcpServers[name], policyValue);
-    } else {
-      newConfig.mcpServers[name] = config.mcpServers[name];
-    }
-  }
-  const currentContent = readFileSync6(configInfo.path, "utf-8");
-  let newContent;
-  if (configInfo.type === "claude-desktop") {
-    const original = JSON.parse(currentContent);
-    original.mcpServers = newConfig.mcpServers;
-    newContent = JSON.stringify(original, null, 2) + "\n";
-  } else {
-    newContent = JSON.stringify(newConfig, null, 2) + "\n";
-  }
-  await sleep(400);
-  if (newContent === currentContent) {
-    stopSpinner("\u2713 Config already up to date");
-  } else {
-    writeFileSync4(configInfo.path, newContent);
-    stopSpinner("\u2713 Config updated");
-  }
-  console.log("");
-  startSpinner("Installing hooks...");
-  await sleep(300);
-  stopSpinner("\u2713 Hooks");
-  installHooks(options.tools, newConfig);
-  console.log("");
-  const allUpToDate = toProtect.length === 0 && alreadyProtected.length === serverNames.length;
-  console.log("  \u2500\u2500 Summary \u2500\u2500");
-  console.log("");
-  for (const name of toProtect) {
-    console.log(`  \u2713 ${name} \u2014 protected`);
-  }
-  for (const name of alreadyProtected) {
-    console.log(`  \u25CF ${name} \u2014 already protected`);
-  }
-  for (const name of skipped) {
-    console.log(`  \u25CB ${name} \u2014 skipped`);
-  }
-  console.log("");
-  if (allUpToDate) {
-    console.log("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
-    console.log("  \u2502  Everything is already up to date!              \u2502");
-    console.log("  \u2502                                                 \u2502");
-    console.log("  \u2502  All MCP servers protected, hooks configured.   \u2502");
-    console.log("  \u2502  View logs: https://dashboard.solongate.com     \u2502");
-    console.log("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518");
-  } else {
-    console.log("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
-    console.log("  \u2502  Setup complete!                                \u2502");
-    console.log("  \u2502                                                 \u2502");
-    console.log("  \u2502  MCP servers  \u2192 Protected via proxy             \u2502");
-    console.log("  \u2502  AI tools     \u2192 Guarded via hooks               \u2502");
-    console.log("  \u2502  Claude Code, Gemini CLI                         \u2502");
-    console.log("  \u2502  API key      \u2192 Set in .env                     \u2502");
-    console.log("  \u2502                                                 \u2502");
-    console.log("  \u2502  View logs: https://dashboard.solongate.com     \u2502");
-    console.log("  \u2502                                                 \u2502");
-    console.log("  \u2502  Restart your MCP client to apply changes.      \u2502");
-    console.log("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518");
-  }
-  console.log("");
-}
-var SEARCH_PATHS, CLAUDE_DESKTOP_PATHS, sleep, SPINNER_FRAMES, spinnerInterval, spinnerFrame, __dirname2, HOOKS_DIR2;
-var init_init = __esm({
-  "src/init.ts"() {
-    "use strict";
-    init_cli_utils();
-    init_global_install();
-    SEARCH_PATHS = [
-      ".mcp.json",
-      "mcp.json",
-      ".claude/mcp.json"
-    ];
-    CLAUDE_DESKTOP_PATHS = process.platform === "win32" ? [join5(process.env["APPDATA"] ?? "", "Claude", "claude_desktop_config.json")] : process.platform === "darwin" ? [join5(process.env["HOME"] ?? "", "Library", "Application Support", "Claude", "claude_desktop_config.json")] : [join5(process.env["HOME"] ?? "", ".config", "claude", "claude_desktop_config.json")];
-    sleep = (ms) => new Promise((r) => setTimeout(r, ms));
-    SPINNER_FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
-    spinnerInterval = null;
-    spinnerFrame = 0;
-    __dirname2 = dirname3(fileURLToPath2(import.meta.url));
-    HOOKS_DIR2 = resolve4(__dirname2, "..", "hooks");
-    main().catch((err) => {
-      console.log(`Fatal: ${err instanceof Error ? err.message : String(err)}`);
-      process.exit(1);
-    });
-  }
-});
-
 // src/login.ts
 var login_exports = {};
 import { spawn } from "child_process";
-function startSpinner2(text) {
+function startSpinner(text) {
   if (!process.stderr.isTTY) {
     process.stderr.write(`  ${text}
 `);
@@ -7485,7 +6788,7 @@ function startSpinner2(text) {
   }
   let i = 0;
   const draw = () => {
-    const frame = SPINNER_FRAMES2[i = (i + 1) % SPINNER_FRAMES2.length];
+    const frame = SPINNER_FRAMES[i = (i + 1) % SPINNER_FRAMES.length];
     process.stderr.write(`\r  ${c.cyan}${frame}${c.reset} ${c.dim}${text}${c.reset}\x1B[K`);
   };
   draw();
@@ -7517,7 +6820,7 @@ function openBrowser(url) {
   } catch {
   }
 }
-async function main2() {
+async function main() {
   const { apiUrl, install } = parseArgs2(process.argv);
   console.log("");
   console.log(`  ${c.bold}${c.blue4}SolonGate${c.reset} ${c.dim}\u2014 Login${c.reset}`);
@@ -7544,9 +6847,9 @@ async function main2() {
   const pollMs = Math.max(2, Number(interval) || 3) * 1e3;
   const deadline = Date.now() + (Number(expires_in) || 600) * 1e3;
   let apiKey = "";
-  const stopSpinner2 = startSpinner2("Waiting for authorization\u2026");
+  const stopSpinner = startSpinner("Waiting for authorization\u2026");
   while (Date.now() < deadline) {
-    await sleep2(pollMs);
+    await sleep(pollMs);
     try {
       const res = await fetch(`${apiUrl}/api/v1/auth/device/poll`, {
         method: "POST",
@@ -7556,7 +6859,7 @@ async function main2() {
       const data = await res.json().catch(() => ({}));
       if (data?.status === "approved" && data?.api_key) {
         apiKey = data.api_key;
-        stopSpinner2();
+        stopSpinner();
         console.log("");
         const who = data?.user?.name || data?.user?.email;
         const mail = data?.user?.email;
@@ -7572,19 +6875,19 @@ async function main2() {
         break;
       }
       if (data?.status === "expired" || data?.status === "not_found") {
-        stopSpinner2(`  ${c.red}\u2717${c.reset} Code expired. Run \`login\` again.`);
+        stopSpinner(`  ${c.red}\u2717${c.reset} Code expired. Run \`login\` again.`);
         process.exit(1);
       }
     } catch {
     }
   }
   if (!apiKey) {
-    stopSpinner2(`  ${c.red}\u2717${c.reset} Timed out waiting for authorization. Run \`login\` again.`);
+    stopSpinner(`  ${c.red}\u2717${c.reset} Timed out waiting for authorization. Run \`login\` again.`);
     process.exit(1);
   }
   if (!install) {
     console.log("");
-    console.log("  Logged in. Run `init --global` to enable system-wide enforcement.");
+    console.log("  Logged in. Re-run `login` to enable system-wide enforcement.");
     return;
   }
   console.log("");
@@ -7595,8 +6898,7 @@ async function main2() {
   console.log("  \u2502  Every Claude Code session on this machine is   \u2502");
   console.log("  \u2502  now guarded by your cloud policy (OPA WASM).   \u2502");
   console.log("  \u2502                                                 \u2502");
-  console.log("  \u2502  Undo:  npx @solongate/proxy init --global      \u2502");
-  console.log("  \u2502         --restore                               \u2502");
+  console.log("  \u2502  Undo:  npx @solongate/proxy logout             \u2502");
   console.log("  \u2502  Manage policy: https://dashboard.solongate.com \u2502");
   console.log("  \u2502  Restart Claude Code to apply.                  \u2502");
   console.log("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518");
@@ -7608,15 +6910,15 @@ async function main2() {
   console.log(`     there for the guard + audit logging to take effect.${c.reset}`);
   console.log("");
 }
-var sleep2, SPINNER_FRAMES2;
+var sleep, SPINNER_FRAMES;
 var init_login = __esm({
   "src/login.ts"() {
     "use strict";
     init_cli_utils();
     init_global_install();
-    sleep2 = (ms) => new Promise((r) => setTimeout(r, ms));
-    SPINNER_FRAMES2 = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
-    main2().catch((err) => {
+    sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+    SPINNER_FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
+    main().catch((err) => {
       console.log(`Fatal: ${err instanceof Error ? err.message : String(err)}`);
       process.exit(1);
     });
@@ -7625,8 +6927,8 @@ var init_login = __esm({
 
 // src/inject.ts
 var inject_exports = {};
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync5, existsSync as existsSync6, copyFileSync } from "fs";
-import { resolve as resolve5 } from "path";
+import { readFileSync as readFileSync6, writeFileSync as writeFileSync4, existsSync as existsSync5, copyFileSync } from "fs";
+import { resolve as resolve4 } from "path";
 import { execSync } from "child_process";
 function parseInjectArgs(argv) {
   const args = argv.slice(2);
@@ -7651,13 +6953,13 @@ function parseInjectArgs(argv) {
         break;
       case "--help":
       case "-h":
-        printHelp2();
+        printHelp();
         process.exit(0);
     }
   }
   return opts;
 }
-function printHelp2() {
+function printHelp() {
   log3(`
 SolonGate Inject \u2014 Add security to your MCP server in seconds
 
@@ -7683,9 +6985,9 @@ WHAT IT DOES
 `);
 }
 function detectProject() {
-  if (!existsSync6(resolve5("package.json"))) return false;
+  if (!existsSync5(resolve4("package.json"))) return false;
   try {
-    const pkg = JSON.parse(readFileSync7(resolve5("package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync6(resolve4("package.json"), "utf-8"));
     const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
     return !!(allDeps["@modelcontextprotocol/sdk"] || allDeps["@modelcontextprotocol/server"]);
   } catch {
@@ -7694,18 +6996,18 @@ function detectProject() {
 }
 function findTsEntryFile() {
   try {
-    const pkg = JSON.parse(readFileSync7(resolve5("package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync6(resolve4("package.json"), "utf-8"));
     if (pkg.bin) {
       const binPath = typeof pkg.bin === "string" ? pkg.bin : Object.values(pkg.bin)[0];
       if (typeof binPath === "string") {
         const srcPath = binPath.replace(/^\.\/dist\//, "./src/").replace(/\.js$/, ".ts");
-        if (existsSync6(resolve5(srcPath))) return resolve5(srcPath);
-        if (existsSync6(resolve5(binPath))) return resolve5(binPath);
+        if (existsSync5(resolve4(srcPath))) return resolve4(srcPath);
+        if (existsSync5(resolve4(binPath))) return resolve4(binPath);
       }
     }
     if (pkg.main) {
       const srcPath = pkg.main.replace(/^\.\/dist\//, "./src/").replace(/\.js$/, ".ts");
-      if (existsSync6(resolve5(srcPath))) return resolve5(srcPath);
+      if (existsSync5(resolve4(srcPath))) return resolve4(srcPath);
     }
   } catch {
   }
@@ -7718,10 +7020,10 @@ function findTsEntryFile() {
     "main.ts"
   ];
   for (const c3 of candidates) {
-    const full = resolve5(c3);
-    if (existsSync6(full)) {
+    const full = resolve4(c3);
+    if (existsSync5(full)) {
       try {
-        const content = readFileSync7(full, "utf-8");
+        const content = readFileSync6(full, "utf-8");
         if (content.includes("McpServer") || content.includes("McpServer")) {
           return full;
         }
@@ -7730,18 +7032,18 @@ function findTsEntryFile() {
     }
   }
   for (const c3 of candidates) {
-    if (existsSync6(resolve5(c3))) return resolve5(c3);
+    if (existsSync5(resolve4(c3))) return resolve4(c3);
   }
   return null;
 }
 function detectPackageManager() {
-  if (existsSync6(resolve5("pnpm-lock.yaml"))) return "pnpm";
-  if (existsSync6(resolve5("yarn.lock"))) return "yarn";
+  if (existsSync5(resolve4("pnpm-lock.yaml"))) return "pnpm";
+  if (existsSync5(resolve4("yarn.lock"))) return "yarn";
   return "npm";
 }
 function installSdk() {
   try {
-    const pkg = JSON.parse(readFileSync7(resolve5("package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync6(resolve4("package.json"), "utf-8"));
     const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
     if (allDeps["@solongate/proxy"]) {
       log3("  @solongate/proxy already installed");
@@ -7762,7 +7064,7 @@ function installSdk() {
   }
 }
 function injectTypeScript(filePath) {
-  const original = readFileSync7(filePath, "utf-8");
+  const original = readFileSync6(filePath, "utf-8");
   const changes = [];
   let modified = original;
   if (modified.includes("SecureMcpServer")) {
@@ -7866,7 +7168,7 @@ function showDiff(result) {
   }
   log3("");
 }
-async function main3() {
+async function main2() {
   const opts = parseInjectArgs(process.argv);
   printBanner("Inject SDK");
   if (!detectProject()) {
@@ -7878,8 +7180,8 @@ async function main3() {
     process.exit(1);
   }
   log3("  Language: TypeScript");
-  const entryFile = opts.file ? resolve5(opts.file) : findTsEntryFile();
-  if (!entryFile || !existsSync6(entryFile)) {
+  const entryFile = opts.file ? resolve4(opts.file) : findTsEntryFile();
+  if (!entryFile || !existsSync5(entryFile)) {
     log3(`  Could not find entry file.${opts.file ? ` File not found: ${opts.file}` : ""}`);
     log3("");
     log3("  Specify it manually: --file <path>");
@@ -7892,7 +7194,7 @@ async function main3() {
   log3("");
   const backupPath = entryFile + ".solongate-backup";
   if (opts.restore) {
-    if (!existsSync6(backupPath)) {
+    if (!existsSync5(backupPath)) {
       log3("  No backup found. Nothing to restore.");
       process.exit(1);
     }
@@ -7928,12 +7230,12 @@ async function main3() {
     log3("  To apply: npx @solongate/proxy inject");
     process.exit(0);
   }
-  if (!existsSync6(backupPath)) {
+  if (!existsSync5(backupPath)) {
     copyFileSync(entryFile, backupPath);
     log3("");
     log3(`  Backup: ${backupPath}`);
   }
-  writeFileSync5(entryFile, result.modified);
+  writeFileSync4(entryFile, result.modified);
   log3("");
   log3("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
   log3("  \u2502  SolonGate SDK injected successfully!         \u2502");
@@ -7953,7 +7255,7 @@ var init_inject = __esm({
   "src/inject.ts"() {
     "use strict";
     init_cli_utils();
-    main3().catch((err) => {
+    main2().catch((err) => {
       log3(`Fatal: ${err instanceof Error ? err.message : String(err)}`);
       process.exit(1);
     });
@@ -7962,8 +7264,8 @@ var init_inject = __esm({
 
 // src/create.ts
 var create_exports = {};
-import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync6, existsSync as existsSync7 } from "fs";
-import { resolve as resolve6, join as join6 } from "path";
+import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync5, existsSync as existsSync6 } from "fs";
+import { resolve as resolve5, join as join5 } from "path";
 import { execSync as execSync2 } from "child_process";
 function withSpinner(message, fn) {
   const frames = ["\u28FE", "\u28FD", "\u28FB", "\u28BF", "\u287F", "\u28DF", "\u28EF", "\u28F7"];
@@ -8002,7 +7304,7 @@ function parseCreateArgs(argv) {
         break;
       case "--help":
       case "-h":
-        printHelp3();
+        printHelp2();
         process.exit(0);
         break;
       default:
@@ -8024,7 +7326,7 @@ function parseCreateArgs(argv) {
   }
   return opts;
 }
-function printHelp3() {
+function printHelp2() {
   log3(`
 SolonGate Create \u2014 Scaffold a secure MCP server in seconds
 
@@ -8042,8 +7344,8 @@ EXAMPLES
 `);
 }
 function createProject(dir, name, _policy) {
-  writeFileSync6(
-    join6(dir, "package.json"),
+  writeFileSync5(
+    join5(dir, "package.json"),
     JSON.stringify(
       {
         name,
@@ -8072,8 +7374,8 @@ function createProject(dir, name, _policy) {
       2
     ) + "\n"
   );
-  writeFileSync6(
-    join6(dir, "tsconfig.json"),
+  writeFileSync5(
+    join5(dir, "tsconfig.json"),
     JSON.stringify(
       {
         compilerOptions: {
@@ -8093,9 +7395,9 @@ function createProject(dir, name, _policy) {
       2
     ) + "\n"
   );
-  mkdirSync6(join6(dir, "src"), { recursive: true });
-  writeFileSync6(
-    join6(dir, "src", "index.ts"),
+  mkdirSync5(join5(dir, "src"), { recursive: true });
+  writeFileSync5(
+    join5(dir, "src", "index.ts"),
     `#!/usr/bin/env node
 
 console.log = (...args: unknown[]) => {
@@ -8136,8 +7438,8 @@ console.log('');
 console.log('Press Ctrl+C to stop.');
 `
   );
-  writeFileSync6(
-    join6(dir, ".mcp.json"),
+  writeFileSync5(
+    join5(dir, ".mcp.json"),
     JSON.stringify(
       {
         mcpServers: {
@@ -8154,13 +7456,13 @@ console.log('Press Ctrl+C to stop.');
       2
     ) + "\n"
   );
-  writeFileSync6(
-    join6(dir, ".env"),
+  writeFileSync5(
+    join5(dir, ".env"),
     `SOLONGATE_API_KEY=sg_live_YOUR_KEY_HERE
 `
   );
-  writeFileSync6(
-    join6(dir, ".gitignore"),
+  writeFileSync5(
+    join5(dir, ".gitignore"),
     `node_modules/
 dist/
 *.solongate-backup
@@ -8170,16 +7472,16 @@ dist/
 `
   );
 }
-async function main4() {
+async function main3() {
   const opts = parseCreateArgs(process.argv);
-  const dir = resolve6(opts.name);
+  const dir = resolve5(opts.name);
   printBanner("Create MCP Server");
-  if (existsSync7(dir)) {
+  if (existsSync6(dir)) {
     log3(`  ${c.red}Error:${c.reset} Directory "${opts.name}" already exists.`);
     process.exit(1);
   }
   withSpinner(`Setting up ${opts.name}...`, () => {
-    mkdirSync6(dir, { recursive: true });
+    mkdirSync5(dir, { recursive: true });
     createProject(dir, opts.name, opts.policy);
   });
   if (!opts.noInstall) {
@@ -8244,7 +7546,7 @@ var init_create = __esm({
   "src/create.ts"() {
     "use strict";
     init_cli_utils();
-    main4().catch((err) => {
+    main3().catch((err) => {
       log3(`Fatal: ${err instanceof Error ? err.message : String(err)}`);
       process.exit(1);
     });
@@ -8253,14 +7555,14 @@ var init_create = __esm({
 
 // src/pull-push.ts
 var pull_push_exports = {};
-import { readFileSync as readFileSync8, writeFileSync as writeFileSync7, existsSync as existsSync8 } from "fs";
-import { resolve as resolve7 } from "path";
+import { readFileSync as readFileSync7, writeFileSync as writeFileSync6, existsSync as existsSync7 } from "fs";
+import { resolve as resolve6 } from "path";
 function loadEnv() {
   if (process.env.SOLONGATE_API_KEY) return;
-  const envPath = resolve7(".env");
-  if (!existsSync8(envPath)) return;
+  const envPath = resolve6(".env");
+  if (!existsSync7(envPath)) return;
   try {
-    const content = readFileSync8(envPath, "utf-8");
+    const content = readFileSync7(envPath, "utf-8");
     for (const line of content.split("\n")) {
       const trimmed = line.trim();
       if (!trimmed || trimmed.startsWith("#")) continue;
@@ -8315,7 +7617,7 @@ function parseCliArgs() {
     log4(red("ERROR: Pull/push/list requires a live API key (sg_live_...)."));
     process.exit(1);
   }
-  return { command, apiKey, file: resolve7(file), policyId };
+  return { command, apiKey, file: resolve6(file), policyId };
 }
 async function listPolicies(apiKey) {
   const res = await fetch(`${API_URL}/api/v1/policies`, {
@@ -8448,7 +7750,7 @@ async function pull(apiKey, file, policyId) {
   const policy = await fetchCloudPolicy(apiKey, API_URL, policyId);
   const { id: _id, ...policyWithoutId } = policy;
   const json = JSON.stringify(policyWithoutId, null, 2) + "\n";
-  writeFileSync7(file, json, "utf-8");
+  writeFileSync6(file, json, "utf-8");
   log4("");
   log4(green("  Saved to: ") + file);
   log4(`  ${dim("Name:")}    ${policy.name}`);
@@ -8460,7 +7762,7 @@ async function pull(apiKey, file, policyId) {
   log4("");
 }
 async function push(apiKey, file, policyId) {
-  if (!existsSync8(file)) {
+  if (!existsSync7(file)) {
     log4(red(`ERROR: File not found: ${file}`));
     process.exit(1);
   }
@@ -8477,7 +7779,7 @@ async function push(apiKey, file, policyId) {
     log4("  solongate-proxy list");
     process.exit(1);
   }
-  const content = readFileSync8(file, "utf-8");
+  const content = readFileSync7(file, "utf-8");
   let policy;
   try {
     policy = JSON.parse(content);
@@ -8520,7 +7822,7 @@ async function push(apiKey, file, policyId) {
   log4(`  ${dim("Method:")}    ${method === "PUT" ? "Updated existing" : "Created new"}`);
   log4("");
 }
-async function main5() {
+async function main4() {
   const { command, apiKey, file, policyId } = parseCliArgs();
   try {
     if (command === "pull") {
@@ -8565,7 +7867,7 @@ var init_pull_push = __esm({
     cyan = (s) => `\x1B[36m${s}\x1B[0m`;
     magenta = (s) => `\x1B[35m${s}\x1B[0m`;
     API_URL = "https://api.solongate.com";
-    main5();
+    main4();
   }
 });
 
@@ -10994,7 +10296,7 @@ var Mutex = class {
       this.locked = true;
       return;
     }
-    return new Promise((resolve8, reject) => {
+    return new Promise((resolve7, reject) => {
       const timer = setTimeout(() => {
         const idx = this.queue.indexOf(onReady);
         if (idx !== -1) this.queue.splice(idx, 1);
@@ -11002,7 +10304,7 @@ var Mutex = class {
       }, timeoutMs);
       const onReady = () => {
         clearTimeout(timer);
-        resolve8();
+        resolve7();
       };
       this.queue.push(onReady);
     });
@@ -11622,7 +10924,7 @@ ${msg.content.text}`;
 
 // src/index.ts
 init_cli_utils();
-var CLI_SUBCOMMANDS = /* @__PURE__ */ new Set(["init", "login", "logout", "create", "inject", "pull", "push", "list", "ls"]);
+var CLI_SUBCOMMANDS = /* @__PURE__ */ new Set(["login", "logout", "create", "inject", "pull", "push", "list", "ls"]);
 var IS_HUMAN_CLI = process.argv.length <= 2 || CLI_SUBCOMMANDS.has(process.argv[2] ?? "");
 if (!IS_HUMAN_CLI) {
   console.log = (...args) => {
@@ -11651,17 +10953,12 @@ function printWelcome() {
   console.log(`  ${c.cyan}https://dashboard.solongate.com${c.reset}`);
   console.log("");
 }
-async function main6() {
+async function main5() {
   const subcommand = process.argv[2];
   if (process.argv.length <= 2) {
     printWelcome();
     return;
   }
-  if (subcommand === "init") {
-    process.argv.splice(2, 1);
-    await Promise.resolve().then(() => (init_init(), init_exports));
-    return;
-  }
   if (subcommand === "login") {
     await Promise.resolve().then(() => (init_login(), login_exports));
     return;
@@ -11696,4 +10993,4 @@ async function main6() {
     process.exit(1);
   }
 }
-main6();
+main5();