@solongate/proxy 0.6.8 → 0.8.0

package/dist/init.js

@@ -67,18 +67,14 @@ function isAlreadyProtected(server) {
 function wrapServer(server, policy) {
   const env = { ...server.env ?? {} };
   env.SOLONGATE_API_KEY = "${SOLONGATE_API_KEY}";
+  const proxyArgs = ["-y", "@solongate/proxy"];
+  if (policy) {
+    proxyArgs.push("--policy", policy);
+  }
+  proxyArgs.push("--verbose", "--", server.command, ...server.args ?? []);
   return {
     command: "npx",
-    args: [
-      "-y",
-      "@solongate/proxy",
-      "--policy",
-      policy,
-      "--verbose",
-      "--",
-      server.command,
-      ...server.args ?? []
-    ],
+    args: proxyArgs,
     env
   };
 }
@@ -127,8 +123,7 @@ USAGE
 
 OPTIONS
   --config <path>     Path to MCP config file (default: auto-detect)
-  --policy <file>     Custom policy JSON file (default: restricted)
-                      Auto-detects policy.json in current directory
+  --policy <file>     Custom policy JSON file (auto-detects policy.json)
   --api-key <key>     SolonGate API key (sg_live_... or sg_test_...)
   --all               Protect all servers without prompting
   -h, --help          Show this help message
@@ -685,7 +680,7 @@ async function main() {
     console.log("  Invalid API key format. Must start with sg_live_ or sg_test_");
     process.exit(1);
   }
-  let policyValue = "restricted";
+  let policyValue;
   if (options.policy) {
     const policyPath = resolve(options.policy);
     if (existsSync(policyPath)) {
@@ -701,7 +696,7 @@ async function main() {
       policyValue = "./policy.json";
       console.log(`  Policy:  ${defaultPolicy} (auto-detected)`);
     } else {
-      console.log(`  Policy:  restricted (default)`);
+      console.log(`  Policy:  cloud-managed (fetched via API key)`);
     }
   }
   await sleep(300);

package/dist/pull-push.js

@@ -44,8 +44,15 @@ async function fetchCloudPolicy(apiKey, apiUrl, policyId) {
 }
 
 // src/pull-push.ts
-var log = (...args) => process.stderr.write(`[SolonGate] ${args.map(String).join(" ")}
+var log = (...args) => process.stderr.write(`${args.map(String).join(" ")}
 `);
+var dim = (s) => `\x1B[2m${s}\x1B[0m`;
+var bold = (s) => `\x1B[1m${s}\x1B[0m`;
+var green = (s) => `\x1B[32m${s}\x1B[0m`;
+var red = (s) => `\x1B[31m${s}\x1B[0m`;
+var yellow = (s) => `\x1B[33m${s}\x1B[0m`;
+var cyan = (s) => `\x1B[36m${s}\x1B[0m`;
+var magenta = (s) => `\x1B[35m${s}\x1B[0m`;
 function loadEnv() {
   if (process.env.SOLONGATE_API_KEY) return;
   const envPath = resolve2(".env");
@@ -93,7 +100,7 @@ function parseCliArgs() {
     }
   }
   if (!apiKey) {
-    log("ERROR: API key not found.");
+    log(red("ERROR: API key not found."));
     log("");
     log("Set it in .env file:");
     log("  SOLONGATE_API_KEY=sg_live_...");
@@ -103,53 +110,170 @@ function parseCliArgs() {
     process.exit(1);
   }
   if (!apiKey.startsWith("sg_live_")) {
-    log("ERROR: Pull/push requires a live API key (sg_live_...).");
+    log(red("ERROR: Pull/push/list requires a live API key (sg_live_...)."));
     process.exit(1);
   }
   return { command, apiKey, file: resolve2(file), policyId };
 }
+var API_URL = "https://api.solongate.com";
 async function listPolicies(apiKey) {
-  const res = await fetch("https://api.solongate.com/api/v1/policies", {
+  const res = await fetch(`${API_URL}/api/v1/policies`, {
     headers: { "Authorization": `Bearer ${apiKey}` }
   });
   if (!res.ok) throw new Error(`Failed to list policies (${res.status})`);
   const data = await res.json();
   return data.policies ?? [];
 }
+async function list(apiKey, policyId) {
+  const policies = await listPolicies(apiKey);
+  if (policies.length === 0) {
+    log(yellow("No policies found. Create one in the dashboard first."));
+    log(dim("  https://dashboard.solongate.com/policies"));
+    return;
+  }
+  if (policyId) {
+    const match = policies.find((p) => p.id === policyId);
+    if (!match) {
+      log(red(`Policy not found: ${policyId}`));
+      log("");
+      log("Available policies:");
+      for (const p of policies) {
+        log(`  ${dim("\u2022")} ${p.id}`);
+      }
+      process.exit(1);
+    }
+    const full = await fetchCloudPolicy(apiKey, API_URL, policyId);
+    printPolicyDetail(full);
+    return;
+  }
+  log("");
+  log(bold(`  Policies (${policies.length})`));
+  log(dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  log("");
+  for (const p of policies) {
+    try {
+      const full = await fetchCloudPolicy(apiKey, API_URL, p.id);
+      printPolicySummary(p, full.rules);
+    } catch {
+      printPolicySummary(p, []);
+    }
+  }
+  log(dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  log("");
+  log(`  ${dim("View details:")}  solongate-proxy list --policy-id <ID>`);
+  log(`  ${dim("Pull policy:")}   solongate-proxy pull --policy-id <ID>`);
+  log(`  ${dim("Push policy:")}   solongate-proxy push --policy-id <ID>`);
+  log("");
+}
+function printPolicySummary(p, rules) {
+  const ruleCount = rules.length;
+  const allowCount = rules.filter((r) => r.effect === "ALLOW").length;
+  const denyCount = rules.filter((r) => r.effect === "DENY").length;
+  log(`  ${cyan(p.id)}`);
+  log(`    ${bold(p.name)}  ${dim(`v${p.version ?? "?"}`)}`);
+  log(`    ${dim("Rules:")} ${ruleCount}  ${green(`${allowCount} ALLOW`)}  ${red(`${denyCount} DENY`)}`);
+  if (p.created_at) {
+    log(`    ${dim("Updated:")} ${new Date(p.created_at).toLocaleString()}`);
+  }
+  log("");
+}
+function printPolicyDetail(policy) {
+  log("");
+  log(bold(`  ${policy.name}`));
+  log(`  ${dim("ID:")} ${cyan(policy.id)}  ${dim("Version:")} ${policy.version}  ${dim("Rules:")} ${policy.rules.length}`);
+  log("");
+  if (policy.rules.length === 0) {
+    log(yellow("  No rules defined."));
+    log("");
+    return;
+  }
+  log(dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  for (const rule of policy.rules) {
+    const effectColor = rule.effect === "ALLOW" ? green : red;
+    log("");
+    log(`  ${effectColor(rule.effect.padEnd(5))}  ${bold(rule.toolPattern)}  ${dim(`P:${rule.priority}`)}`);
+    if (rule.description) {
+      log(`         ${dim(rule.description)}`);
+    }
+    log(`         ${dim(`${rule.permission}  trust:${rule.minimumTrustLevel || "UNTRUSTED"}`)}`);
+    if (rule.pathConstraints) {
+      const pc = rule.pathConstraints;
+      if (pc.rootDirectory) log(`         ${magenta("ROOT")} ${pc.rootDirectory}`);
+      if (pc.allowed?.length) log(`         ${green("PATHS")} ${pc.allowed.join(", ")}`);
+      if (pc.denied?.length) log(`         ${red("DENY")}  ${pc.denied.join(", ")}`);
+    }
+    if (rule.commandConstraints) {
+      const cc = rule.commandConstraints;
+      if (cc.allowed?.length) log(`         ${green("CMDS")}  ${cc.allowed.join(", ")}`);
+      if (cc.denied?.length) log(`         ${red("DENY")}  ${cc.denied.join(", ")}`);
+    }
+    if (rule.filenameConstraints) {
+      const fc = rule.filenameConstraints;
+      if (fc.allowed?.length) log(`         ${green("FILES")} ${fc.allowed.join(", ")}`);
+      if (fc.denied?.length) log(`         ${red("DENY")}  ${fc.denied.join(", ")}`);
+    }
+    if (rule.urlConstraints) {
+      const uc = rule.urlConstraints;
+      if (uc.allowed?.length) log(`         ${green("URLS")}  ${uc.allowed.join(", ")}`);
+      if (uc.denied?.length) log(`         ${red("DENY")}  ${uc.denied.join(", ")}`);
+    }
+  }
+  log("");
+  log(dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  log("");
+}
 async function pull(apiKey, file, policyId) {
-  const apiUrl = "https://api.solongate.com";
   if (!policyId) {
     const policies = await listPolicies(apiKey);
     if (policies.length === 0) {
-      log("No policies found. Create one in the dashboard first.");
+      log(red("No policies found. Create one in the dashboard first."));
       process.exit(1);
     }
-    if (policies.length > 1) {
-      log(`Found ${policies.length} policies:
-`);
+    if (policies.length === 1) {
+      policyId = policies[0].id;
+      log(dim(`Auto-selecting only policy: ${policyId}`));
+    } else {
+      log(yellow(`Found ${policies.length} policies:`));
+      log("");
       for (const p of policies) {
-        log(`  ${p.id}  ${p.name}  (${(p.rules || []).length} rules)`);
+        log(`  ${cyan(p.id)}  ${p.name}  ${dim(`v${p.version ?? "?"}`)}`);
       }
       log("");
       log("Use --policy-id <ID> to specify which one to pull.");
       process.exit(1);
     }
   }
-  log(`Pulling policy from dashboard...`);
-  const policy = await fetchCloudPolicy(apiKey, apiUrl, policyId);
-  const json = JSON.stringify(policy, null, 2) + "\n";
+  log(`Pulling ${cyan(policyId)} from dashboard...`);
+  const policy = await fetchCloudPolicy(apiKey, API_URL, policyId);
+  const { id: _id, ...policyWithoutId } = policy;
+  const json = JSON.stringify(policyWithoutId, null, 2) + "\n";
   writeFileSync(file, json, "utf-8");
-  log(`Saved: ${file}`);
-  log(`  Name: ${policy.name}`);
-  log(`  Version: ${policy.version}`);
-  log(`  Rules: ${policy.rules.length}`);
   log("");
-  log("Done. Policy pulled from dashboard to local file.");
+  log(green("  Saved to: ") + file);
+  log(`  ${dim("Name:")}    ${policy.name}`);
+  log(`  ${dim("Version:")} ${policy.version}`);
+  log(`  ${dim("Rules:")}   ${policy.rules.length}`);
+  log("");
+  log(dim("The policy file does not contain an ID."));
+  log(dim("Use --policy-id to specify the target when pushing/pulling."));
+  log("");
 }
-async function push(apiKey, file) {
-  const apiUrl = "https://api.solongate.com";
+async function push(apiKey, file, policyId) {
   if (!existsSync2(file)) {
-    log(`ERROR: File not found: ${file}`);
+    log(red(`ERROR: File not found: ${file}`));
+    process.exit(1);
+  }
+  if (!policyId) {
+    log(red("ERROR: --policy-id is required for push."));
+    log("");
+    log("This determines which cloud policy to update.");
+    log("");
+    log("Usage:");
+    log("  solongate-proxy push --policy-id my-policy");
+    log("  solongate-proxy push --policy-id my-policy --file custom.json");
+    log("");
+    log("List your policies:");
+    log("  solongate-proxy list");
     process.exit(1);
   }
   const content = readFileSync2(file, "utf-8");
@@ -157,21 +281,26 @@ async function push(apiKey, file) {
   try {
     policy = JSON.parse(content);
   } catch {
-    log(`ERROR: Invalid JSON in ${file}`);
+    log(red(`ERROR: Invalid JSON in ${file}`));
     process.exit(1);
   }
-  log(`Pushing policy to dashboard...`);
-  log(`  File: ${file}`);
-  log(`  Name: ${policy.name || "Unnamed"}`);
-  log(`  Rules: ${(policy.rules || []).length}`);
-  const res = await fetch(`${apiUrl}/api/v1/policies`, {
-    method: "POST",
+  log(`Pushing to ${cyan(policyId)}...`);
+  log(`  ${dim("File:")}  ${file}`);
+  log(`  ${dim("Name:")}  ${policy.name || "Unnamed"}`);
+  log(`  ${dim("Rules:")} ${(policy.rules || []).length}`);
+  const checkRes = await fetch(`${API_URL}/api/v1/policies/${policyId}`, {
+    headers: { "Authorization": `Bearer ${apiKey}` }
+  });
+  const method = checkRes.ok ? "PUT" : "POST";
+  const url = checkRes.ok ? `${API_URL}/api/v1/policies/${policyId}` : `${API_URL}/api/v1/policies`;
+  const res = await fetch(url, {
+    method,
     headers: {
       "Authorization": `Bearer ${apiKey}`,
       "Content-Type": "application/json"
     },
     body: JSON.stringify({
-      id: policy.id || "default",
+      id: policyId,
       name: policy.name || "Local Policy",
       description: policy.description || "Pushed from local file",
       version: policy.version || 1,
@@ -180,13 +309,15 @@ async function push(apiKey, file) {
   });
   if (!res.ok) {
     const body = await res.text().catch(() => "");
-    log(`ERROR: Push failed (${res.status}): ${body}`);
+    log(red(`ERROR: Push failed (${res.status}): ${body}`));
     process.exit(1);
   }
   const data = await res.json();
-  log(`  Cloud version: ${data._version ?? "created"}`);
   log("");
-  log("Done. Policy pushed from local file to dashboard.");
+  log(green(`  Pushed to cloud: v${data._version ?? "created"}`));
+  log(`  ${dim("Policy ID:")} ${policyId}`);
+  log(`  ${dim("Method:")}    ${method === "PUT" ? "Updated existing" : "Created new"}`);
+  log("");
 }
 async function main() {
   const { command, apiKey, file, policyId } = parseCliArgs();
@@ -194,14 +325,27 @@ async function main() {
     if (command === "pull") {
       await pull(apiKey, file, policyId);
     } else if (command === "push") {
-      await push(apiKey, file);
+      await push(apiKey, file, policyId);
+    } else if (command === "list" || command === "ls") {
+      await list(apiKey, policyId);
     } else {
-      log(`Unknown command: ${command}`);
-      log("Usage: solongate-proxy pull|push [--file policy.json]");
+      log(red(`Unknown command: ${command}`));
+      log("");
+      log(bold("Usage:"));
+      log("  solongate-proxy list                          List all policies");
+      log("  solongate-proxy list --policy-id <ID>         Show policy details");
+      log("  solongate-proxy pull --policy-id <ID>         Pull policy to local file");
+      log("  solongate-proxy push --policy-id <ID>         Push local file to cloud");
+      log("");
+      log(bold("Flags:"));
+      log("  --policy-id, --id <ID>    Cloud policy ID (required for push)");
+      log("  --file, -f <path>         Local file path (default: policy.json)");
+      log("  --api-key <key>           API key (or set SOLONGATE_API_KEY)");
+      log("");
       process.exit(1);
     }
   } catch (err) {
-    log(`ERROR: ${err instanceof Error ? err.message : String(err)}`);
+    log(red(`ERROR: ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.6.8",
+  "version": "0.8.0",
   "description": "MCP security proxy — protect any MCP server with customizable policies, path/command constraints, rate limiting, and audit logging. Zero code changes required.",
   "type": "module",
   "bin": {