@solongate/proxy 0.82.18 → 0.82.20

package/dist/index.js

@@ -13964,6 +13964,9 @@ var init_pull_push = __esm({
 
 // src/index.ts
 init_config();
+import { readFileSync as readFileSync15 } from "fs";
+import { fileURLToPath as fileURLToPath4 } from "url";
+import { dirname as dirname4, join as join17 } from "path";
 
 // src/proxy.ts
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
@@ -16987,7 +16990,8 @@ ${msg.content.text}`;
 // src/index.ts
 init_cli_utils();
 var CLI_SUBCOMMANDS = /* @__PURE__ */ new Set(["shield", "create", "inject", "pull", "push", "list", "ls", "logs-server", "local-logs", "policy", "ratelimit", "dlp", "stats", "audit", "agents", "agent", "doctor", "watch", "keys", "mcp", "alerts", "webhooks", "dataroom"]);
-var IS_HUMAN_CLI = process.argv.length <= 2 || CLI_SUBCOMMANDS.has(process.argv[2] ?? "");
+var CLI_INFO_ARGS = /* @__PURE__ */ new Set(["login", "help", "--help", "-h", "--version", "-v", "version"]);
+var IS_HUMAN_CLI = process.argv.length <= 2 || CLI_SUBCOMMANDS.has(process.argv[2] ?? "") || CLI_INFO_ARGS.has(process.argv[2] ?? "");
 if (!IS_HUMAN_CLI) {
   console.log = (...args) => {
     process.stderr.write(`[SolonGate] ${args.map(String).join(" ")}
@@ -17002,24 +17006,113 @@ if (!IS_HUMAN_CLI) {
 `);
   };
 }
+var PKG_VERSION = (() => {
+  try {
+    const p = join17(dirname4(fileURLToPath4(import.meta.url)), "..", "package.json");
+    return JSON.parse(readFileSync15(p, "utf-8")).version || "unknown";
+  } catch {
+    return "unknown";
+  }
+})();
 function printWelcome() {
   console.log("");
-  console.log(`  ${c.bold}${c.blue4}SolonGate${c.reset} ${c.dim}\u2014 secure gateway for your AI agents${c.reset}`);
+  console.log(`  ${c.bold}${c.blue4}SolonGate${c.reset} ${c.dim}secure gateway for your AI agents${c.reset}`);
   console.log("");
   console.log("  Get started with one command:");
   console.log("");
-  console.log(`    ${c.cyan}solongate${c.reset}`);
+  console.log(`    ${c.cyan}solongate${c.reset}             ${c.dim}open the dataroom (login, policies, audit, settings)${c.reset}`);
+  console.log(`    ${c.cyan}solongate --help${c.reset}      ${c.dim}list every command${c.reset}`);
   console.log("");
-  console.log(`  ${c.dim}This opens the dataroom; log in from the Accounts panel to pair this${c.reset}`);
-  console.log(`  ${c.dim}device and protect every Claude Code session with your cloud policy.${c.reset}`);
+  console.log(`  ${c.dim}Open the dataroom, log in from the Accounts panel to pair this${c.reset}`);
+  console.log(`  ${c.dim}device, then the guard protects every AI session with your policy.${c.reset}`);
   console.log(`  ${c.dim}Manage it at ${c.reset}${c.cyan}https://dashboard.solongate.com${c.reset}`);
   console.log("");
-  console.log(`  ${c.dim}Using local log storage? Show it live in the dashboard with${c.reset}`);
-  console.log(`    ${c.cyan}solongate logs-server${c.reset}`);
+}
+function printHelp3() {
+  const W = 46;
+  const head = (t) => console.log(`
+  ${c.bold}${t}${c.reset}`);
+  const cmd = (syntax, desc = "") => {
+    if (!desc) {
+      console.log(`    ${c.cyan}${syntax}${c.reset}`);
+      return;
+    }
+    if (syntax.length <= W) {
+      console.log(`    ${c.cyan}${syntax}${c.reset}${" ".repeat(W - syntax.length)}${c.dim}${desc}${c.reset}`);
+    } else {
+      console.log(`    ${c.cyan}${syntax}${c.reset}`);
+      console.log(`    ${" ".repeat(W)}${c.dim}${desc}${c.reset}`);
+    }
+  };
+  console.log("");
+  console.log(`  ${c.bold}${c.blue4}SolonGate${c.reset} ${c.dim}secure gateway for your AI agents${c.reset}  ${c.dim}v${PKG_VERSION}${c.reset}`);
+  console.log("");
+  console.log(`  ${c.dim}Usage:${c.reset} ${c.cyan}solongate${c.reset} ${c.dim}[command]${c.reset}   ${c.dim}(no command opens the dataroom: all of this in a terminal UI)${c.reset}`);
+  head("Setup & status");
+  cmd("solongate", "open the dataroom UI (login, policies, audit, settings)");
+  cmd("doctor [--json]", "health check: login, policy, guard, local logs");
+  cmd("create", "scaffold a guarded MCP server in this folder");
+  cmd("logs-server", "serve local audit logs to the dashboard");
+  head("Policies");
+  cmd("policy list", "list all policies");
+  cmd("policy show <id> [--version N]", "show one policy (rules, mode)");
+  cmd("policy rules <id>", "list a policy's rules");
+  cmd("policy allow <id> --tool <p> [--command|--path|--url <val>]", "add an ALLOW rule");
+  cmd("policy revoke <id> <ruleId>", "remove a rule");
+  cmd("policy activate <id> | --clear", "pin / unpin the active policy");
+  cmd("policy rollback <id> <version>", "roll back to a version");
+  cmd("policy versions <id>", "version history");
+  cmd("policy active", "show the resolved active policy");
+  cmd("policy dry-run <id|file.json> [--mode denylist|whitelist]", "replay recent traffic against rules");
+  head("Rate limits");
+  cmd("ratelimit show", "current limits + change history");
+  cmd("ratelimit set --minute N [--hour N] [--day N] [--mode off|detect|block]", "edit limits (unset fields kept)");
+  cmd("ratelimit history", "recent limit changes");
+  head("DLP (secrets)");
+  cmd("dlp show", "current mode + enabled patterns");
+  cmd("dlp mode <off|detect|block>", "set enforcement mode");
+  cmd("dlp enable <pattern>", "enable a built-in pattern");
+  cmd("dlp disable <pattern>", "disable a built-in pattern");
+  cmd("dlp add-custom --name X --re <regex>", "add a custom pattern");
+  cmd("dlp remove-custom <name>", "remove a custom pattern");
+  head("Monitoring");
+  cmd("audit [--filter ALLOW|DENY] [--tool <s>] [--signal dlp|ratelimit] [--limit N]", "browse the audit log");
+  cmd("audit whitelist <logId> [--scope exact|tool]", "turn a denial into an ALLOW rule");
+  cmd("audit block <logId> [--scope exact|tool]", "turn a call into a DENY rule");
+  cmd("stats [timeseries|drift]", "traffic & security statistics");
+  cmd("watch [--filter DENY] [--tool <s>]", "live-tail tool calls (Ctrl+C to stop)");
+  cmd("agents [--all]", "live agent feed");
+  cmd("agent <agent_id>", "one-agent detail");
+  head("Alerts & webhooks");
+  cmd("alerts list");
+  cmd("alerts add --signal deny|dlp|ratelimit|any --threshold N --window S (--email <a> | --telegram <id> | --slack <url>)", "spike alert");
+  cmd("alerts remove <id>");
+  cmd("webhooks list");
+  cmd("webhooks add --url <https://\u2026> [--events denials|allowed|all]", "event webhook");
+  cmd("webhooks remove <id>");
+  head("Keys, MCP & advanced");
+  cmd("keys list", "list API keys (prefix only)");
+  cmd("keys create --name <name>", "create a key (secret shown once)");
+  cmd("keys revoke <id>", "revoke a key");
+  cmd("mcp", "list protected MCP servers");
+  cmd("shield -- <command>", "wrap a command with LLM-path secret redaction");
+  cmd("pull --policy-id <ID> [--file f]", "pull a cloud policy to a local file");
+  cmd("push --policy-id <ID> [--file f]", "push a local policy file to the cloud");
+  console.log("");
+  console.log(`  ${c.dim}Add ${c.reset}${c.cyan}--json${c.reset}${c.dim} to most read commands for machine output.${c.reset}`);
+  console.log(`  ${c.dim}Details for a command: ${c.reset}${c.cyan}solongate <command> help${c.reset}${c.dim}  \xB7  Dashboard: ${c.reset}${c.cyan}https://dashboard.solongate.com${c.reset}`);
   console.log("");
 }
 async function main4() {
   const subcommand = process.argv[2];
+  if (subcommand === "--help" || subcommand === "-h" || subcommand === "help") {
+    printHelp3();
+    return;
+  }
+  if (subcommand === "--version" || subcommand === "-v" || subcommand === "version") {
+    console.log(PKG_VERSION);
+    return;
+  }
   if (IS_HUMAN_CLI) {
     const tuiBound = subcommand === "dataroom" || process.argv.length <= 2 && process.stdout.isTTY && process.stdin.isTTY;
     if (!tuiBound) {
@@ -17054,7 +17147,7 @@ async function main4() {
   if (subcommand === "login") {
     console.log("");
     console.log(`  ${c.dim}\`solongate login\` was removed.${c.reset} Run ${c.cyan}solongate${c.reset} and add your`);
-    console.log(`  account from the Accounts panel \u2014 the guard installs and updates from there.`);
+    console.log(`  account from the Accounts panel. The guard installs and updates from there.`);
     console.log("");
     return;
   }
@@ -17082,6 +17175,17 @@ async function main4() {
     await Promise.resolve().then(() => (init_pull_push(), pull_push_exports));
     return;
   }
+  const hasProxySeparator = process.argv.includes("--");
+  const looksLikeProxyFlag = (subcommand ?? "").startsWith("-");
+  if (subcommand && !hasProxySeparator && !looksLikeProxyFlag) {
+    process.stdout.write(`
+  Unknown command: ${subcommand}
+`);
+    process.stdout.write(`  Run \`solongate --help\` to see every command, or \`solongate\` for the dataroom.
+
+`);
+    process.exit(1);
+  }
   try {
     const config = parseArgs(process.argv);
     const proxy = new SolonGateProxy(config);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.82.18",
+  "version": "0.82.20",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {