@solongate/proxy 0.6.7 → 0.7.0

package/dist/index.js

@@ -88,6 +88,7 @@ function parseArgs(argv) {
   let upstreamUrl;
   let upstreamTransport;
   let port;
+  let policyId;
   let separatorIndex = args.indexOf("--");
   const flags = separatorIndex >= 0 ? args.slice(0, separatorIndex) : args;
   const upstreamArgs = separatorIndex >= 0 ? args.slice(separatorIndex + 1) : [];
@@ -126,6 +127,10 @@ function parseArgs(argv) {
       case "--port":
         port = parseInt(flags[++i], 10);
         break;
+      case "--policy-id":
+      case "--id":
+        policyId = flags[++i];
+        break;
     }
   }
   if (apiKey && /^\$\{.+\}$/.test(apiKey)) {
@@ -173,7 +178,8 @@ function parseArgs(argv) {
       apiKey: apiKey ?? fileConfig.apiKey,
       apiUrl: apiUrl ?? fileConfig.apiUrl,
       port: port ?? fileConfig.port,
-      policyPath: resolvePolicyPath(cfgPolicySource) ?? void 0
+      policyPath: resolvePolicyPath(cfgPolicySource) ?? void 0,
+      policyId: policyId ?? fileConfig.policyId
     };
   }
   if (upstreamUrl) {
@@ -193,7 +199,8 @@ function parseArgs(argv) {
       apiKey,
       apiUrl,
       port,
-      policyPath: resolvedPolicyPath ?? void 0
+      policyPath: resolvedPolicyPath ?? void 0,
+      policyId
     };
   }
   if (upstreamArgs.length === 0) {
@@ -217,7 +224,8 @@ function parseArgs(argv) {
     apiKey,
     apiUrl,
     port,
-    policyPath: resolvedPolicyPath ?? void 0
+    policyPath: resolvedPolicyPath ?? void 0,
+    policyId
   };
 }
 function resolvePolicyPath(source) {
@@ -2053,7 +2061,7 @@ function parseCliArgs() {
     }
   }
   if (!apiKey) {
-    log5("ERROR: API key not found.");
+    log5(red("ERROR: API key not found."));
     log5("");
     log5("Set it in .env file:");
     log5("  SOLONGATE_API_KEY=sg_live_...");
@@ -2063,53 +2071,169 @@ function parseCliArgs() {
     process.exit(1);
   }
   if (!apiKey.startsWith("sg_live_")) {
-    log5("ERROR: Pull/push requires a live API key (sg_live_...).");
+    log5(red("ERROR: Pull/push/list requires a live API key (sg_live_...)."));
     process.exit(1);
   }
   return { command, apiKey, file: resolve5(file), policyId };
 }
 async function listPolicies(apiKey) {
-  const res = await fetch("https://api.solongate.com/api/v1/policies", {
+  const res = await fetch(`${API_URL}/api/v1/policies`, {
     headers: { "Authorization": `Bearer ${apiKey}` }
   });
   if (!res.ok) throw new Error(`Failed to list policies (${res.status})`);
   const data = await res.json();
   return data.policies ?? [];
 }
+async function list(apiKey, policyId) {
+  const policies = await listPolicies(apiKey);
+  if (policies.length === 0) {
+    log5(yellow("No policies found. Create one in the dashboard first."));
+    log5(dim("  https://dashboard.solongate.com/policies"));
+    return;
+  }
+  if (policyId) {
+    const match = policies.find((p) => p.id === policyId);
+    if (!match) {
+      log5(red(`Policy not found: ${policyId}`));
+      log5("");
+      log5("Available policies:");
+      for (const p of policies) {
+        log5(`  ${dim("\u2022")} ${p.id}`);
+      }
+      process.exit(1);
+    }
+    const full = await fetchCloudPolicy(apiKey, API_URL, policyId);
+    printPolicyDetail(full);
+    return;
+  }
+  log5("");
+  log5(bold(`  Policies (${policies.length})`));
+  log5(dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  log5("");
+  for (const p of policies) {
+    try {
+      const full = await fetchCloudPolicy(apiKey, API_URL, p.id);
+      printPolicySummary(p, full.rules);
+    } catch {
+      printPolicySummary(p, []);
+    }
+  }
+  log5(dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  log5("");
+  log5(`  ${dim("View details:")}  solongate-proxy list --policy-id <ID>`);
+  log5(`  ${dim("Pull policy:")}   solongate-proxy pull --policy-id <ID>`);
+  log5(`  ${dim("Push policy:")}   solongate-proxy push --policy-id <ID>`);
+  log5("");
+}
+function printPolicySummary(p, rules) {
+  const ruleCount = rules.length;
+  const allowCount = rules.filter((r) => r.effect === "ALLOW").length;
+  const denyCount = rules.filter((r) => r.effect === "DENY").length;
+  log5(`  ${cyan(p.id)}`);
+  log5(`    ${bold(p.name)}  ${dim(`v${p.version ?? "?"}`)}`);
+  log5(`    ${dim("Rules:")} ${ruleCount}  ${green(`${allowCount} ALLOW`)}  ${red(`${denyCount} DENY`)}`);
+  if (p.created_at) {
+    log5(`    ${dim("Updated:")} ${new Date(p.created_at).toLocaleString()}`);
+  }
+  log5("");
+}
+function printPolicyDetail(policy) {
+  log5("");
+  log5(bold(`  ${policy.name}`));
+  log5(`  ${dim("ID:")} ${cyan(policy.id)}  ${dim("Version:")} ${policy.version}  ${dim("Rules:")} ${policy.rules.length}`);
+  log5("");
+  if (policy.rules.length === 0) {
+    log5(yellow("  No rules defined."));
+    log5("");
+    return;
+  }
+  log5(dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  for (const rule of policy.rules) {
+    const effectColor = rule.effect === "ALLOW" ? green : red;
+    log5("");
+    log5(`  ${effectColor(rule.effect.padEnd(5))}  ${bold(rule.toolPattern)}  ${dim(`P:${rule.priority}`)}`);
+    if (rule.description) {
+      log5(`         ${dim(rule.description)}`);
+    }
+    log5(`         ${dim(`${rule.permission}  trust:${rule.minimumTrustLevel || "UNTRUSTED"}`)}`);
+    if (rule.pathConstraints) {
+      const pc = rule.pathConstraints;
+      if (pc.rootDirectory) log5(`         ${magenta("ROOT")} ${pc.rootDirectory}`);
+      if (pc.allowed?.length) log5(`         ${green("PATHS")} ${pc.allowed.join(", ")}`);
+      if (pc.denied?.length) log5(`         ${red("DENY")}  ${pc.denied.join(", ")}`);
+    }
+    if (rule.commandConstraints) {
+      const cc = rule.commandConstraints;
+      if (cc.allowed?.length) log5(`         ${green("CMDS")}  ${cc.allowed.join(", ")}`);
+      if (cc.denied?.length) log5(`         ${red("DENY")}  ${cc.denied.join(", ")}`);
+    }
+    if (rule.filenameConstraints) {
+      const fc = rule.filenameConstraints;
+      if (fc.allowed?.length) log5(`         ${green("FILES")} ${fc.allowed.join(", ")}`);
+      if (fc.denied?.length) log5(`         ${red("DENY")}  ${fc.denied.join(", ")}`);
+    }
+    if (rule.urlConstraints) {
+      const uc = rule.urlConstraints;
+      if (uc.allowed?.length) log5(`         ${green("URLS")}  ${uc.allowed.join(", ")}`);
+      if (uc.denied?.length) log5(`         ${red("DENY")}  ${uc.denied.join(", ")}`);
+    }
+  }
+  log5("");
+  log5(dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  log5("");
+}
 async function pull(apiKey, file, policyId) {
-  const apiUrl = "https://api.solongate.com";
   if (!policyId) {
     const policies = await listPolicies(apiKey);
     if (policies.length === 0) {
-      log5("No policies found. Create one in the dashboard first.");
+      log5(red("No policies found. Create one in the dashboard first."));
       process.exit(1);
     }
-    if (policies.length > 1) {
-      log5(`Found ${policies.length} policies:
-`);
+    if (policies.length === 1) {
+      policyId = policies[0].id;
+      log5(dim(`Auto-selecting only policy: ${policyId}`));
+    } else {
+      log5(yellow(`Found ${policies.length} policies:`));
+      log5("");
       for (const p of policies) {
-        log5(`  ${p.id}  ${p.name}  (${(p.rules || []).length} rules)`);
+        log5(`  ${cyan(p.id)}  ${p.name}  ${dim(`v${p.version ?? "?"}`)}`);
       }
       log5("");
       log5("Use --policy-id <ID> to specify which one to pull.");
       process.exit(1);
     }
   }
-  log5(`Pulling policy from dashboard...`);
-  const policy = await fetchCloudPolicy(apiKey, apiUrl, policyId);
-  const json = JSON.stringify(policy, null, 2) + "\n";
+  log5(`Pulling ${cyan(policyId)} from dashboard...`);
+  const policy = await fetchCloudPolicy(apiKey, API_URL, policyId);
+  const { id: _id, ...policyWithoutId } = policy;
+  const json = JSON.stringify(policyWithoutId, null, 2) + "\n";
   writeFileSync5(file, json, "utf-8");
-  log5(`Saved: ${file}`);
-  log5(`  Name: ${policy.name}`);
-  log5(`  Version: ${policy.version}`);
-  log5(`  Rules: ${policy.rules.length}`);
   log5("");
-  log5("Done. Policy pulled from dashboard to local file.");
+  log5(green("  Saved to: ") + file);
+  log5(`  ${dim("Name:")}    ${policy.name}`);
+  log5(`  ${dim("Version:")} ${policy.version}`);
+  log5(`  ${dim("Rules:")}   ${policy.rules.length}`);
+  log5("");
+  log5(dim("The policy file does not contain an ID."));
+  log5(dim("Use --policy-id to specify the target when pushing/pulling."));
+  log5("");
 }
-async function push(apiKey, file) {
-  const apiUrl = "https://api.solongate.com";
+async function push(apiKey, file, policyId) {
   if (!existsSync6(file)) {
-    log5(`ERROR: File not found: ${file}`);
+    log5(red(`ERROR: File not found: ${file}`));
+    process.exit(1);
+  }
+  if (!policyId) {
+    log5(red("ERROR: --policy-id is required for push."));
+    log5("");
+    log5("This determines which cloud policy to update.");
+    log5("");
+    log5("Usage:");
+    log5("  solongate-proxy push --policy-id my-policy");
+    log5("  solongate-proxy push --policy-id my-policy --file custom.json");
+    log5("");
+    log5("List your policies:");
+    log5("  solongate-proxy list");
     process.exit(1);
   }
   const content = readFileSync5(file, "utf-8");
@@ -2117,21 +2241,26 @@ async function push(apiKey, file) {
   try {
     policy = JSON.parse(content);
   } catch {
-    log5(`ERROR: Invalid JSON in ${file}`);
+    log5(red(`ERROR: Invalid JSON in ${file}`));
     process.exit(1);
   }
-  log5(`Pushing policy to dashboard...`);
-  log5(`  File: ${file}`);
-  log5(`  Name: ${policy.name || "Unnamed"}`);
-  log5(`  Rules: ${(policy.rules || []).length}`);
-  const res = await fetch(`${apiUrl}/api/v1/policies`, {
-    method: "POST",
+  log5(`Pushing to ${cyan(policyId)}...`);
+  log5(`  ${dim("File:")}  ${file}`);
+  log5(`  ${dim("Name:")}  ${policy.name || "Unnamed"}`);
+  log5(`  ${dim("Rules:")} ${(policy.rules || []).length}`);
+  const checkRes = await fetch(`${API_URL}/api/v1/policies/${policyId}`, {
+    headers: { "Authorization": `Bearer ${apiKey}` }
+  });
+  const method = checkRes.ok ? "PUT" : "POST";
+  const url = checkRes.ok ? `${API_URL}/api/v1/policies/${policyId}` : `${API_URL}/api/v1/policies`;
+  const res = await fetch(url, {
+    method,
     headers: {
       "Authorization": `Bearer ${apiKey}`,
       "Content-Type": "application/json"
     },
     body: JSON.stringify({
-      id: policy.id || "default",
+      id: policyId,
       name: policy.name || "Local Policy",
       description: policy.description || "Pushed from local file",
       version: policy.version || 1,
@@ -2140,13 +2269,15 @@ async function push(apiKey, file) {
   });
   if (!res.ok) {
     const body = await res.text().catch(() => "");
-    log5(`ERROR: Push failed (${res.status}): ${body}`);
+    log5(red(`ERROR: Push failed (${res.status}): ${body}`));
     process.exit(1);
   }
   const data = await res.json();
-  log5(`  Cloud version: ${data._version ?? "created"}`);
   log5("");
-  log5("Done. Policy pushed from local file to dashboard.");
+  log5(green(`  Pushed to cloud: v${data._version ?? "created"}`));
+  log5(`  ${dim("Policy ID:")} ${policyId}`);
+  log5(`  ${dim("Method:")}    ${method === "PUT" ? "Updated existing" : "Created new"}`);
+  log5("");
 }
 async function main4() {
   const { command, apiKey, file, policyId } = parseCliArgs();
@@ -2154,24 +2285,45 @@ async function main4() {
     if (command === "pull") {
       await pull(apiKey, file, policyId);
     } else if (command === "push") {
-      await push(apiKey, file);
+      await push(apiKey, file, policyId);
+    } else if (command === "list" || command === "ls") {
+      await list(apiKey, policyId);
     } else {
-      log5(`Unknown command: ${command}`);
-      log5("Usage: solongate-proxy pull|push [--file policy.json]");
+      log5(red(`Unknown command: ${command}`));
+      log5("");
+      log5(bold("Usage:"));
+      log5("  solongate-proxy list                          List all policies");
+      log5("  solongate-proxy list --policy-id <ID>         Show policy details");
+      log5("  solongate-proxy pull --policy-id <ID>         Pull policy to local file");
+      log5("  solongate-proxy push --policy-id <ID>         Push local file to cloud");
+      log5("");
+      log5(bold("Flags:"));
+      log5("  --policy-id, --id <ID>    Cloud policy ID (required for push)");
+      log5("  --file, -f <path>         Local file path (default: policy.json)");
+      log5("  --api-key <key>           API key (or set SOLONGATE_API_KEY)");
+      log5("");
       process.exit(1);
     }
   } catch (err) {
-    log5(`ERROR: ${err instanceof Error ? err.message : String(err)}`);
+    log5(red(`ERROR: ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
 }
-var log5;
+var log5, dim, bold, green, red, yellow, cyan, magenta, API_URL;
 var init_pull_push = __esm({
   "src/pull-push.ts"() {
     "use strict";
     init_config();
-    log5 = (...args) => process.stderr.write(`[SolonGate] ${args.map(String).join(" ")}
+    log5 = (...args) => process.stderr.write(`${args.map(String).join(" ")}
 `);
+    dim = (s) => `\x1B[2m${s}\x1B[0m`;
+    bold = (s) => `\x1B[1m${s}\x1B[0m`;
+    green = (s) => `\x1B[32m${s}\x1B[0m`;
+    red = (s) => `\x1B[31m${s}\x1B[0m`;
+    yellow = (s) => `\x1B[33m${s}\x1B[0m`;
+    cyan = (s) => `\x1B[36m${s}\x1B[0m`;
+    magenta = (s) => `\x1B[35m${s}\x1B[0m`;
+    API_URL = "https://api.solongate.com";
     main4();
   }
 });
@@ -3736,10 +3888,13 @@ var PolicySyncManager = class {
   pollTimer = null;
   watcher = null;
   isLiveKey;
+  /** The cloud policy ID from --policy-id flag. This is the ONLY source of truth for which cloud policy to use. */
+  policyId;
   constructor(opts) {
     this.localPath = opts.localPath;
     this.apiKey = opts.apiKey;
     this.apiUrl = opts.apiUrl;
+    this.policyId = opts.policyId;
     this.pollIntervalMs = opts.pollIntervalMs ?? 6e4;
     this.onPolicyUpdate = opts.onPolicyUpdate;
     this.currentPolicy = opts.initialPolicy;
@@ -3841,7 +3996,7 @@ var PolicySyncManager = class {
    */
   async onPollTick() {
     try {
-      const cloudPolicy = await fetchCloudPolicy(this.apiKey, this.apiUrl);
+      const cloudPolicy = await fetchCloudPolicy(this.apiKey, this.apiUrl, this.policyId);
       const cloudVer = cloudPolicy.version ?? 0;
       if (cloudVer <= this.localVersion && this.policiesEqual(cloudPolicy, this.currentPolicy)) {
         return;
@@ -3862,17 +4017,24 @@ var PolicySyncManager = class {
   }
   /**
    * Push policy to cloud API.
+   * Uses this.policyId (from --policy-id CLI flag) as the cloud policy ID.
+   * Falls back to policy.id from local file only if --policy-id was not set.
    */
   async pushToCloud(policy) {
-    const url = `${this.apiUrl}/api/v1/policies`;
+    const cloudId = this.policyId || policy.id || "default";
+    const existingRes = await fetch(`${this.apiUrl}/api/v1/policies/${cloudId}`, {
+      headers: { "Authorization": `Bearer ${this.apiKey}` }
+    });
+    const method = existingRes.ok ? "PUT" : "POST";
+    const url = existingRes.ok ? `${this.apiUrl}/api/v1/policies/${cloudId}` : `${this.apiUrl}/api/v1/policies`;
     const res = await fetch(url, {
-      method: "POST",
+      method,
       headers: {
         "Authorization": `Bearer ${this.apiKey}`,
         "Content-Type": "application/json"
       },
       body: JSON.stringify({
-        id: policy.id || "default",
+        id: cloudId,
         name: policy.name || "Default Policy",
         description: policy.description || "Synced from proxy",
         version: policy.version || 1,
@@ -3888,12 +4050,14 @@ var PolicySyncManager = class {
   }
   /**
    * Write policy to local file (with loop prevention).
+   * Does NOT write the 'id' field — cloud ID is managed by --policy-id flag.
    */
   writeToFile(policy) {
     if (!this.localPath) return;
     this.skipNextWatch = true;
     try {
-      const json = JSON.stringify(policy, null, 2) + "\n";
+      const { id: _id, ...rest } = policy;
+      const json = JSON.stringify(rest, null, 2) + "\n";
       writeFileSync(this.localPath, json, "utf-8");
     } catch (err) {
       log(`File write error: ${err instanceof Error ? err.message : String(err)}`);
@@ -3901,10 +4065,10 @@ var PolicySyncManager = class {
     }
   }
   /**
-   * Compare two policies by rules content (ignoring timestamps).
+   * Compare two policies by rules content (ignoring timestamps and id).
    */
   policiesEqual(a, b) {
-    if (a.id !== b.id || a.name !== b.name || a.rules.length !== b.rules.length) return false;
+    if (a.name !== b.name || a.rules.length !== b.rules.length) return false;
     return JSON.stringify(a.rules) === JSON.stringify(b.rules);
   }
 };
@@ -3995,7 +4159,7 @@ var SolonGateProxy = class {
       }
       if (!this.config.apiKey.startsWith("sg_test_")) {
         try {
-          const cloudPolicy = await fetchCloudPolicy(this.config.apiKey, apiUrl);
+          const cloudPolicy = await fetchCloudPolicy(this.config.apiKey, apiUrl, this.config.policyId);
           this.config.policy = cloudPolicy;
           log2(`Loaded cloud policy: ${cloudPolicy.name} (${cloudPolicy.rules.length} rules)`);
         } catch (err) {
@@ -4310,6 +4474,7 @@ var SolonGateProxy = class {
       apiUrl,
       pollIntervalMs: 6e4,
       initialPolicy: this.config.policy,
+      policyId: this.config.policyId,
       onPolicyUpdate: (policy) => {
         this.config.policy = policy;
         this.gate.loadPolicy(policy);
@@ -4385,7 +4550,7 @@ async function main5() {
     await Promise.resolve().then(() => (init_create(), create_exports));
     return;
   }
-  if (subcommand === "pull" || subcommand === "push") {
+  if (subcommand === "pull" || subcommand === "push" || subcommand === "list" || subcommand === "ls") {
     await Promise.resolve().then(() => (init_pull_push(), pull_push_exports));
     return;
   }

package/dist/pull-push.js

@@ -44,8 +44,15 @@ async function fetchCloudPolicy(apiKey, apiUrl, policyId) {
 }
 
 // src/pull-push.ts
-var log = (...args) => process.stderr.write(`[SolonGate] ${args.map(String).join(" ")}
+var log = (...args) => process.stderr.write(`${args.map(String).join(" ")}
 `);
+var dim = (s) => `\x1B[2m${s}\x1B[0m`;
+var bold = (s) => `\x1B[1m${s}\x1B[0m`;
+var green = (s) => `\x1B[32m${s}\x1B[0m`;
+var red = (s) => `\x1B[31m${s}\x1B[0m`;
+var yellow = (s) => `\x1B[33m${s}\x1B[0m`;
+var cyan = (s) => `\x1B[36m${s}\x1B[0m`;
+var magenta = (s) => `\x1B[35m${s}\x1B[0m`;
 function loadEnv() {
   if (process.env.SOLONGATE_API_KEY) return;
   const envPath = resolve2(".env");
@@ -93,7 +100,7 @@ function parseCliArgs() {
     }
   }
   if (!apiKey) {
-    log("ERROR: API key not found.");
+    log(red("ERROR: API key not found."));
     log("");
     log("Set it in .env file:");
     log("  SOLONGATE_API_KEY=sg_live_...");
@@ -103,53 +110,170 @@ function parseCliArgs() {
     process.exit(1);
   }
   if (!apiKey.startsWith("sg_live_")) {
-    log("ERROR: Pull/push requires a live API key (sg_live_...).");
+    log(red("ERROR: Pull/push/list requires a live API key (sg_live_...)."));
     process.exit(1);
   }
   return { command, apiKey, file: resolve2(file), policyId };
 }
+var API_URL = "https://api.solongate.com";
 async function listPolicies(apiKey) {
-  const res = await fetch("https://api.solongate.com/api/v1/policies", {
+  const res = await fetch(`${API_URL}/api/v1/policies`, {
     headers: { "Authorization": `Bearer ${apiKey}` }
   });
   if (!res.ok) throw new Error(`Failed to list policies (${res.status})`);
   const data = await res.json();
   return data.policies ?? [];
 }
+async function list(apiKey, policyId) {
+  const policies = await listPolicies(apiKey);
+  if (policies.length === 0) {
+    log(yellow("No policies found. Create one in the dashboard first."));
+    log(dim("  https://dashboard.solongate.com/policies"));
+    return;
+  }
+  if (policyId) {
+    const match = policies.find((p) => p.id === policyId);
+    if (!match) {
+      log(red(`Policy not found: ${policyId}`));
+      log("");
+      log("Available policies:");
+      for (const p of policies) {
+        log(`  ${dim("\u2022")} ${p.id}`);
+      }
+      process.exit(1);
+    }
+    const full = await fetchCloudPolicy(apiKey, API_URL, policyId);
+    printPolicyDetail(full);
+    return;
+  }
+  log("");
+  log(bold(`  Policies (${policies.length})`));
+  log(dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  log("");
+  for (const p of policies) {
+    try {
+      const full = await fetchCloudPolicy(apiKey, API_URL, p.id);
+      printPolicySummary(p, full.rules);
+    } catch {
+      printPolicySummary(p, []);
+    }
+  }
+  log(dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  log("");
+  log(`  ${dim("View details:")}  solongate-proxy list --policy-id <ID>`);
+  log(`  ${dim("Pull policy:")}   solongate-proxy pull --policy-id <ID>`);
+  log(`  ${dim("Push policy:")}   solongate-proxy push --policy-id <ID>`);
+  log("");
+}
+function printPolicySummary(p, rules) {
+  const ruleCount = rules.length;
+  const allowCount = rules.filter((r) => r.effect === "ALLOW").length;
+  const denyCount = rules.filter((r) => r.effect === "DENY").length;
+  log(`  ${cyan(p.id)}`);
+  log(`    ${bold(p.name)}  ${dim(`v${p.version ?? "?"}`)}`);
+  log(`    ${dim("Rules:")} ${ruleCount}  ${green(`${allowCount} ALLOW`)}  ${red(`${denyCount} DENY`)}`);
+  if (p.created_at) {
+    log(`    ${dim("Updated:")} ${new Date(p.created_at).toLocaleString()}`);
+  }
+  log("");
+}
+function printPolicyDetail(policy) {
+  log("");
+  log(bold(`  ${policy.name}`));
+  log(`  ${dim("ID:")} ${cyan(policy.id)}  ${dim("Version:")} ${policy.version}  ${dim("Rules:")} ${policy.rules.length}`);
+  log("");
+  if (policy.rules.length === 0) {
+    log(yellow("  No rules defined."));
+    log("");
+    return;
+  }
+  log(dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  for (const rule of policy.rules) {
+    const effectColor = rule.effect === "ALLOW" ? green : red;
+    log("");
+    log(`  ${effectColor(rule.effect.padEnd(5))}  ${bold(rule.toolPattern)}  ${dim(`P:${rule.priority}`)}`);
+    if (rule.description) {
+      log(`         ${dim(rule.description)}`);
+    }
+    log(`         ${dim(`${rule.permission}  trust:${rule.minimumTrustLevel || "UNTRUSTED"}`)}`);
+    if (rule.pathConstraints) {
+      const pc = rule.pathConstraints;
+      if (pc.rootDirectory) log(`         ${magenta("ROOT")} ${pc.rootDirectory}`);
+      if (pc.allowed?.length) log(`         ${green("PATHS")} ${pc.allowed.join(", ")}`);
+      if (pc.denied?.length) log(`         ${red("DENY")}  ${pc.denied.join(", ")}`);
+    }
+    if (rule.commandConstraints) {
+      const cc = rule.commandConstraints;
+      if (cc.allowed?.length) log(`         ${green("CMDS")}  ${cc.allowed.join(", ")}`);
+      if (cc.denied?.length) log(`         ${red("DENY")}  ${cc.denied.join(", ")}`);
+    }
+    if (rule.filenameConstraints) {
+      const fc = rule.filenameConstraints;
+      if (fc.allowed?.length) log(`         ${green("FILES")} ${fc.allowed.join(", ")}`);
+      if (fc.denied?.length) log(`         ${red("DENY")}  ${fc.denied.join(", ")}`);
+    }
+    if (rule.urlConstraints) {
+      const uc = rule.urlConstraints;
+      if (uc.allowed?.length) log(`         ${green("URLS")}  ${uc.allowed.join(", ")}`);
+      if (uc.denied?.length) log(`         ${red("DENY")}  ${uc.denied.join(", ")}`);
+    }
+  }
+  log("");
+  log(dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  log("");
+}
 async function pull(apiKey, file, policyId) {
-  const apiUrl = "https://api.solongate.com";
   if (!policyId) {
     const policies = await listPolicies(apiKey);
     if (policies.length === 0) {
-      log("No policies found. Create one in the dashboard first.");
+      log(red("No policies found. Create one in the dashboard first."));
       process.exit(1);
     }
-    if (policies.length > 1) {
-      log(`Found ${policies.length} policies:
-`);
+    if (policies.length === 1) {
+      policyId = policies[0].id;
+      log(dim(`Auto-selecting only policy: ${policyId}`));
+    } else {
+      log(yellow(`Found ${policies.length} policies:`));
+      log("");
       for (const p of policies) {
-        log(`  ${p.id}  ${p.name}  (${(p.rules || []).length} rules)`);
+        log(`  ${cyan(p.id)}  ${p.name}  ${dim(`v${p.version ?? "?"}`)}`);
       }
       log("");
       log("Use --policy-id <ID> to specify which one to pull.");
       process.exit(1);
     }
   }
-  log(`Pulling policy from dashboard...`);
-  const policy = await fetchCloudPolicy(apiKey, apiUrl, policyId);
-  const json = JSON.stringify(policy, null, 2) + "\n";
+  log(`Pulling ${cyan(policyId)} from dashboard...`);
+  const policy = await fetchCloudPolicy(apiKey, API_URL, policyId);
+  const { id: _id, ...policyWithoutId } = policy;
+  const json = JSON.stringify(policyWithoutId, null, 2) + "\n";
   writeFileSync(file, json, "utf-8");
-  log(`Saved: ${file}`);
-  log(`  Name: ${policy.name}`);
-  log(`  Version: ${policy.version}`);
-  log(`  Rules: ${policy.rules.length}`);
   log("");
-  log("Done. Policy pulled from dashboard to local file.");
+  log(green("  Saved to: ") + file);
+  log(`  ${dim("Name:")}    ${policy.name}`);
+  log(`  ${dim("Version:")} ${policy.version}`);
+  log(`  ${dim("Rules:")}   ${policy.rules.length}`);
+  log("");
+  log(dim("The policy file does not contain an ID."));
+  log(dim("Use --policy-id to specify the target when pushing/pulling."));
+  log("");
 }
-async function push(apiKey, file) {
-  const apiUrl = "https://api.solongate.com";
+async function push(apiKey, file, policyId) {
   if (!existsSync2(file)) {
-    log(`ERROR: File not found: ${file}`);
+    log(red(`ERROR: File not found: ${file}`));
+    process.exit(1);
+  }
+  if (!policyId) {
+    log(red("ERROR: --policy-id is required for push."));
+    log("");
+    log("This determines which cloud policy to update.");
+    log("");
+    log("Usage:");
+    log("  solongate-proxy push --policy-id my-policy");
+    log("  solongate-proxy push --policy-id my-policy --file custom.json");
+    log("");
+    log("List your policies:");
+    log("  solongate-proxy list");
     process.exit(1);
   }
   const content = readFileSync2(file, "utf-8");
@@ -157,21 +281,26 @@ async function push(apiKey, file) {
   try {
     policy = JSON.parse(content);
   } catch {
-    log(`ERROR: Invalid JSON in ${file}`);
+    log(red(`ERROR: Invalid JSON in ${file}`));
     process.exit(1);
   }
-  log(`Pushing policy to dashboard...`);
-  log(`  File: ${file}`);
-  log(`  Name: ${policy.name || "Unnamed"}`);
-  log(`  Rules: ${(policy.rules || []).length}`);
-  const res = await fetch(`${apiUrl}/api/v1/policies`, {
-    method: "POST",
+  log(`Pushing to ${cyan(policyId)}...`);
+  log(`  ${dim("File:")}  ${file}`);
+  log(`  ${dim("Name:")}  ${policy.name || "Unnamed"}`);
+  log(`  ${dim("Rules:")} ${(policy.rules || []).length}`);
+  const checkRes = await fetch(`${API_URL}/api/v1/policies/${policyId}`, {
+    headers: { "Authorization": `Bearer ${apiKey}` }
+  });
+  const method = checkRes.ok ? "PUT" : "POST";
+  const url = checkRes.ok ? `${API_URL}/api/v1/policies/${policyId}` : `${API_URL}/api/v1/policies`;
+  const res = await fetch(url, {
+    method,
     headers: {
       "Authorization": `Bearer ${apiKey}`,
       "Content-Type": "application/json"
     },
     body: JSON.stringify({
-      id: policy.id || "default",
+      id: policyId,
       name: policy.name || "Local Policy",
       description: policy.description || "Pushed from local file",
       version: policy.version || 1,
@@ -180,13 +309,15 @@ async function push(apiKey, file) {
   });
   if (!res.ok) {
     const body = await res.text().catch(() => "");
-    log(`ERROR: Push failed (${res.status}): ${body}`);
+    log(red(`ERROR: Push failed (${res.status}): ${body}`));
     process.exit(1);
   }
   const data = await res.json();
-  log(`  Cloud version: ${data._version ?? "created"}`);
   log("");
-  log("Done. Policy pushed from local file to dashboard.");
+  log(green(`  Pushed to cloud: v${data._version ?? "created"}`));
+  log(`  ${dim("Policy ID:")} ${policyId}`);
+  log(`  ${dim("Method:")}    ${method === "PUT" ? "Updated existing" : "Created new"}`);
+  log("");
 }
 async function main() {
   const { command, apiKey, file, policyId } = parseCliArgs();
@@ -194,14 +325,27 @@ async function main() {
     if (command === "pull") {
       await pull(apiKey, file, policyId);
     } else if (command === "push") {
-      await push(apiKey, file);
+      await push(apiKey, file, policyId);
+    } else if (command === "list" || command === "ls") {
+      await list(apiKey, policyId);
     } else {
-      log(`Unknown command: ${command}`);
-      log("Usage: solongate-proxy pull|push [--file policy.json]");
+      log(red(`Unknown command: ${command}`));
+      log("");
+      log(bold("Usage:"));
+      log("  solongate-proxy list                          List all policies");
+      log("  solongate-proxy list --policy-id <ID>         Show policy details");
+      log("  solongate-proxy pull --policy-id <ID>         Pull policy to local file");
+      log("  solongate-proxy push --policy-id <ID>         Push local file to cloud");
+      log("");
+      log(bold("Flags:"));
+      log("  --policy-id, --id <ID>    Cloud policy ID (required for push)");
+      log("  --file, -f <path>         Local file path (default: policy.json)");
+      log("  --api-key <key>           API key (or set SOLONGATE_API_KEY)");
+      log("");
       process.exit(1);
     }
   } catch (err) {
-    log(`ERROR: ${err instanceof Error ? err.message : String(err)}`);
+    log(red(`ERROR: ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.6.7",
+  "version": "0.7.0",
   "description": "MCP security proxy — protect any MCP server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {