@solongate/proxy 0.82.21 → 0.82.22

package/dist/index.js

@@ -3398,12 +3398,12 @@ ${ctx.indent}`;
       for (const {
         format,
         test,
-        resolve: resolve9
+        resolve: resolve7
       } of tags) {
         if (test) {
           const match = str.match(test);
           if (match) {
-            let res = resolve9.apply(null, match);
+            let res = resolve7.apply(null, match);
             if (!(res instanceof Scalar)) res = new Scalar(res);
             if (format) res.format = format;
             return res;
@@ -6507,18 +6507,6 @@ var init_src = __esm({
 });
 
 // src/cli-utils.ts
-function log3(msg) {
-  process.stderr.write(msg + "\n");
-}
-function printBanner(subtitle) {
-  log3("");
-  for (let i = 0; i < BANNER_FULL.length; i++) {
-    log3(`${c.bold}${BANNER_COLORS[i]}${BANNER_FULL[i]}${c.reset}`);
-  }
-  log3("");
-  log3(`  ${c.dim}${c.italic}${subtitle}${c.reset}`);
-  log3("");
-}
 var c, BANNER_FULL, BANNER_COLORS;
 var init_cli_utils = __esm({
   "src/cli-utils.ts"() {
@@ -6622,9 +6610,9 @@ async function fetchLatest() {
 function spawnGlobalInstall(version) {
   try {
     mkdirSync3(join4(homedir2(), ".solongate"), { recursive: true });
-    const log5 = openSync(LOG_FILE, "a");
+    const log4 = openSync(LOG_FILE, "a");
     const p = spawn("npm", ["install", "-g", `${PKG}@${version}`], {
-      stdio: ["ignore", log5, log5],
+      stdio: ["ignore", log4, log4],
       detached: true,
       windowsHide: true,
       shell: process.platform === "win32"
@@ -6638,7 +6626,7 @@ function spawnGlobalInstall(version) {
   }
 }
 function runGlobalInstall(version) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve7) => {
     try {
       mkdirSync3(join4(homedir2(), ".solongate"), { recursive: true });
       execFile(
@@ -6653,11 +6641,11 @@ ${stderr}
 `, { flag: "a" });
           } catch {
           }
-          resolve9(!err2);
+          resolve7(!err2);
         }
       );
     } catch {
-      resolve9(false);
+      resolve7(false);
     }
   });
 }
@@ -6772,11 +6760,11 @@ function startLogsServerDaemon() {
   }
   try {
     mkdirSync4(DIR, { recursive: true });
-    const log5 = openSync2(LOG_FILE2, "a");
+    const log4 = openSync2(LOG_FILE2, "a");
     const cli = join5(dirname2(fileURLToPath2(import.meta.url)), "index.js");
     const p = spawn2(process.execPath, [cli, "logs-server"], {
       detached: true,
-      stdio: ["ignore", log5, log5],
+      stdio: ["ignore", log4, log4],
       windowsHide: true
     });
     p.on("error", () => {
@@ -7854,7 +7842,7 @@ function LivePanel({ active: active2 }) {
   const [localBuf, setLocalBuf] = useState2([]);
   const [localOn, setLocalOn] = useState2(null);
   const [ring, setRing] = useState2(null);
-  const [log5, setLog] = useState2([]);
+  const [log4, setLog] = useState2([]);
   const [filter, setFilter] = useState2("all");
   const [signal, setSignal] = useState2("none");
   const [search, setSearch] = useState2("");
@@ -8698,7 +8686,7 @@ function LivePanel({ active: active2 }) {
       ] }),
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, overflow: "hidden", children: [
         /* @__PURE__ */ jsx2(PaneTitle, { label: "EVENT LOG", extra: "system heartbeat", width: colW }),
-        log5.slice(-(colH - 1)).map((l, i) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        log4.slice(-(colH - 1)).map((l, i) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
           /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
             hhmmss(l.ts),
             " "
@@ -12605,644 +12593,16 @@ var init_logs_server = __esm({
   }
 });
 
-// src/inject.ts
-var inject_exports = {};
-import { readFileSync as readFileSync12, writeFileSync as writeFileSync10, existsSync as existsSync7, copyFileSync } from "fs";
-import { resolve as resolve6 } from "path";
-import { execSync } from "child_process";
-function parseInjectArgs(argv) {
-  const args = argv.slice(2);
-  const opts = {
-    dryRun: false,
-    restore: false,
-    skipInstall: false
-  };
-  for (let i = 0; i < args.length; i++) {
-    switch (args[i]) {
-      case "--file":
-        opts.file = args[++i];
-        break;
-      case "--dry-run":
-        opts.dryRun = true;
-        break;
-      case "--restore":
-        opts.restore = true;
-        break;
-      case "--skip-install":
-        opts.skipInstall = true;
-        break;
-      case "--help":
-      case "-h":
-        printHelp();
-        process.exit(0);
-    }
-  }
-  return opts;
-}
-function printHelp() {
-  log3(`
-SolonGate Inject \u2014 Add security to your MCP server in seconds
-
-USAGE
-  npx @solongate/proxy inject [options]
-
-OPTIONS
-  --file <path>       Entry file to modify (default: auto-detect)
-  --dry-run           Preview changes without writing
-  --restore           Restore original file from backup
-  --skip-install      Don't install SDK package
-  -h, --help          Show this help message
-
-EXAMPLES
-  npx @solongate/proxy inject                    # Auto-detect and inject
-  npx @solongate/proxy inject --file src/main.ts # Specify entry file
-  npx @solongate/proxy inject --dry-run          # Preview changes
-  npx @solongate/proxy inject --restore          # Undo injection
-
-WHAT IT DOES
-  Replaces McpServer with SecureMcpServer (2 lines changed)
-  All tool() calls are automatically protected by SolonGate.
-`);
-}
-function detectProject() {
-  if (!existsSync7(resolve6("package.json"))) return false;
-  try {
-    const pkg = JSON.parse(readFileSync12(resolve6("package.json"), "utf-8"));
-    const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
-    return !!(allDeps["@modelcontextprotocol/sdk"] || allDeps["@modelcontextprotocol/server"]);
-  } catch {
-    return false;
-  }
-}
-function findTsEntryFile() {
-  try {
-    const pkg = JSON.parse(readFileSync12(resolve6("package.json"), "utf-8"));
-    if (pkg.bin) {
-      const binPath = typeof pkg.bin === "string" ? pkg.bin : Object.values(pkg.bin)[0];
-      if (typeof binPath === "string") {
-        const srcPath = binPath.replace(/^\.\/dist\//, "./src/").replace(/\.js$/, ".ts");
-        if (existsSync7(resolve6(srcPath))) return resolve6(srcPath);
-        if (existsSync7(resolve6(binPath))) return resolve6(binPath);
-      }
-    }
-    if (pkg.main) {
-      const srcPath = pkg.main.replace(/^\.\/dist\//, "./src/").replace(/\.js$/, ".ts");
-      if (existsSync7(resolve6(srcPath))) return resolve6(srcPath);
-    }
-  } catch {
-  }
-  const candidates = [
-    "src/index.ts",
-    "src/server.ts",
-    "src/main.ts",
-    "index.ts",
-    "server.ts",
-    "main.ts"
-  ];
-  for (const c2 of candidates) {
-    const full = resolve6(c2);
-    if (existsSync7(full)) {
-      try {
-        const content = readFileSync12(full, "utf-8");
-        if (content.includes("McpServer") || content.includes("McpServer")) {
-          return full;
-        }
-      } catch {
-      }
-    }
-  }
-  for (const c2 of candidates) {
-    if (existsSync7(resolve6(c2))) return resolve6(c2);
-  }
-  return null;
-}
-function detectPackageManager() {
-  if (existsSync7(resolve6("pnpm-lock.yaml"))) return "pnpm";
-  if (existsSync7(resolve6("yarn.lock"))) return "yarn";
-  return "npm";
-}
-function installSdk() {
-  try {
-    const pkg = JSON.parse(readFileSync12(resolve6("package.json"), "utf-8"));
-    const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
-    if (allDeps["@solongate/proxy"]) {
-      log3("  @solongate/proxy already installed");
-      return true;
-    }
-  } catch {
-  }
-  const pm = detectPackageManager();
-  const cmd = pm === "yarn" ? "yarn add @solongate/proxy" : `${pm} install @solongate/proxy`;
-  log3(`  Installing @solongate/proxy via ${pm}...`);
-  try {
-    execSync(cmd, { stdio: "pipe", cwd: process.cwd() });
-    return true;
-  } catch (err2) {
-    log3(`  Failed to install: ${err2 instanceof Error ? err2.message : String(err2)}`);
-    log3("  You can install manually: npm install @solongate/proxy");
-    return false;
-  }
-}
-function injectTypeScript(filePath) {
-  const original = readFileSync12(filePath, "utf-8");
-  const changes = [];
-  let modified = original;
-  if (modified.includes("SecureMcpServer")) {
-    return { file: filePath, changes: ["Already injected \u2014 skipping"], original, modified };
-  }
-  const mcpImportPatterns = [
-    // Solo import: import { McpServer } from '...'
-    /import\s*\{\s*McpServer\s*\}\s*from\s*['"][^'"]+['"]/,
-    // Import with others: import { McpServer, ... } from '...'
-    /import\s*\{[^}]*McpServer[^}]*\}\s*from\s*['"][^'"]+['"]/
-  ];
-  let importReplaced = false;
-  for (const pattern of mcpImportPatterns) {
-    const match = modified.match(pattern);
-    if (match) {
-      const importLine = match[0];
-      const namedImports = importLine.match(/\{([^}]+)\}/)?.[1] ?? "";
-      const importNames = namedImports.split(",").map((s) => s.trim()).filter(Boolean);
-      if (importNames.length === 1 && importNames[0] === "McpServer") {
-        modified = modified.replace(
-          importLine,
-          `import { SecureMcpServer } from '@solongate/proxy'`
-        );
-        changes.push("Replaced McpServer import with SecureMcpServer from @solongate/proxy");
-      } else {
-        const otherImports = importNames.filter((n) => n !== "McpServer");
-        const fromModule = importLine.match(/from\s*['"]([^'"]+)['"]/)?.[1] ?? "";
-        modified = modified.replace(
-          importLine,
-          `import { ${otherImports.join(", ")} } from '${fromModule}';
-import { SecureMcpServer } from '@solongate/proxy'`
-        );
-        changes.push("Removed McpServer from existing import, added SecureMcpServer import from @solongate/proxy");
-      }
-      importReplaced = true;
-      break;
-    }
-  }
-  if (!importReplaced) {
-    const insertPos = findImportInsertPosition(modified);
-    modified = modified.slice(0, insertPos) + `import { SecureMcpServer } from '@solongate/proxy';
-` + modified.slice(insertPos);
-    changes.push("Added SecureMcpServer import from @solongate/proxy");
-  }
-  const constructorPattern = /new\s+McpServer\s*\(/g;
-  const constructorCount = (modified.match(constructorPattern) || []).length;
-  if (constructorCount > 0) {
-    modified = modified.replace(constructorPattern, "new SecureMcpServer(");
-    changes.push(`Replaced ${constructorCount} McpServer constructor(s) with SecureMcpServer`);
-  }
-  return { file: filePath, changes, original, modified };
-}
-function findImportInsertPosition(content) {
-  let pos = 0;
-  if (content.startsWith("#!")) {
-    pos = content.indexOf("\n") + 1;
-  }
-  const lines = content.slice(pos).split("\n");
-  let offset = pos;
-  for (const line of lines) {
-    const trimmed = line.trim();
-    if (trimmed === "" || trimmed.startsWith("//") || trimmed.startsWith("/*") || trimmed.startsWith("*") || trimmed.startsWith("*/")) {
-      offset += line.length + 1;
-    } else {
-      break;
-    }
-  }
-  const importRegex = /^import\s+.+$/gm;
-  let lastImportEnd = offset;
-  let importMatch;
-  while ((importMatch = importRegex.exec(content)) !== null) {
-    lastImportEnd = importMatch.index + importMatch[0].length + 1;
-  }
-  return lastImportEnd > offset ? lastImportEnd : offset;
-}
-function showDiff(result) {
-  if (result.original === result.modified) {
-    log3("  No changes needed.");
-    return;
-  }
-  const origLines = result.original.split("\n");
-  const modLines = result.modified.split("\n");
-  log3("");
-  log3(`  File: ${result.file}`);
-  log3("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");
-  const maxLines = Math.max(origLines.length, modLines.length);
-  let diffCount = 0;
-  for (let i = 0; i < maxLines; i++) {
-    const orig = origLines[i];
-    const mod = modLines[i];
-    if (orig !== mod) {
-      if (diffCount < 30) {
-        if (orig !== void 0) log3(`  - ${orig}`);
-        if (mod !== void 0) log3(`  + ${mod}`);
-      }
-      diffCount++;
-    }
-  }
-  if (diffCount > 30) {
-    log3(`  ... and ${diffCount - 30} more line changes`);
-  }
-  log3("");
-}
-async function main() {
-  const opts = parseInjectArgs(process.argv);
-  printBanner("Inject SDK");
-  if (!detectProject()) {
-    log3("  Could not detect a TypeScript MCP server project.");
-    log3("  Make sure you are in a project directory with:");
-    log3("    package.json + @modelcontextprotocol/sdk in dependencies");
-    log3("");
-    log3("  To create a new MCP server: npx @solongate/proxy create <name>");
-    process.exit(1);
-  }
-  log3("  Language: TypeScript");
-  const entryFile = opts.file ? resolve6(opts.file) : findTsEntryFile();
-  if (!entryFile || !existsSync7(entryFile)) {
-    log3(`  Could not find entry file.${opts.file ? ` File not found: ${opts.file}` : ""}`);
-    log3("");
-    log3("  Specify it manually: --file <path>");
-    log3("");
-    log3("  Common entry points:");
-    log3("    src/index.ts, src/server.ts, index.ts");
-    process.exit(1);
-  }
-  log3(`  Entry:    ${entryFile}`);
-  log3("");
-  const backupPath = entryFile + ".solongate-backup";
-  if (opts.restore) {
-    if (!existsSync7(backupPath)) {
-      log3("  No backup found. Nothing to restore.");
-      process.exit(1);
-    }
-    copyFileSync(backupPath, entryFile);
-    log3(`  Restored original file from backup.`);
-    log3(`  Backup: ${backupPath}`);
-    process.exit(0);
-  }
-  if (!opts.skipInstall && !opts.dryRun) {
-    installSdk();
-    log3("");
-  }
-  const result = injectTypeScript(entryFile);
-  log3(`  Changes (${result.changes.length}):`);
-  for (const change of result.changes) {
-    log3(`    - ${change}`);
-  }
-  if (result.changes.length === 1 && result.changes[0].includes("Already injected")) {
-    log3("");
-    log3("  Your MCP server is already protected by SolonGate!");
-    process.exit(0);
-  }
-  if (result.original === result.modified) {
-    log3("");
-    log3("  No changes were made. The file may not contain recognizable MCP patterns.");
-    log3("  See docs: https://solongate.com/docs/integration");
-    process.exit(0);
-  }
-  if (opts.dryRun) {
-    log3("");
-    log3("  --- DRY RUN (no changes written) ---");
-    showDiff(result);
-    log3("  To apply: npx @solongate/proxy inject");
-    process.exit(0);
-  }
-  if (!existsSync7(backupPath)) {
-    copyFileSync(entryFile, backupPath);
-    log3("");
-    log3(`  Backup: ${backupPath}`);
-  }
-  writeFileSync10(entryFile, result.modified);
-  log3("");
-  log3("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
-  log3("  \u2502  SolonGate SDK injected successfully!         \u2502");
-  log3("  \u2502                                               \u2502");
-  log3("  \u2502  McpServer \u2192 SecureMcpServer                  \u2502");
-  log3("  \u2502  All tool() calls are now auto-protected.     \u2502");
-  log3("  \u2502                                               \u2502");
-  log3("  \u2502  Set your API key:                             \u2502");
-  log3("  \u2502    export SOLONGATE_API_KEY=sg_live_xxx        \u2502");
-  log3("  \u2502                                               \u2502");
-  log3("  \u2502  To undo:                                     \u2502");
-  log3("  \u2502    npx @solongate/proxy inject --restore       \u2502");
-  log3("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518");
-  log3("");
-}
-var init_inject = __esm({
-  "src/inject.ts"() {
-    "use strict";
-    init_cli_utils();
-    main().catch((err2) => {
-      log3(`Fatal: ${err2 instanceof Error ? err2.message : String(err2)}`);
-      process.exit(1);
-    });
-  }
-});
-
-// src/create.ts
-var create_exports = {};
-import { mkdirSync as mkdirSync10, writeFileSync as writeFileSync11, existsSync as existsSync8 } from "fs";
-import { resolve as resolve7, join as join16 } from "path";
-import { execSync as execSync2 } from "child_process";
-function withSpinner(message, fn) {
-  const frames = ["\u28FE", "\u28FD", "\u28FB", "\u28BF", "\u287F", "\u28DF", "\u28EF", "\u28F7"];
-  let i = 0;
-  const id = setInterval(() => {
-    const color = i % 2 === 0 ? c.blue3 : c.blue5;
-    process.stderr.write(`\r  ${color}${frames[i++ % frames.length]}${c.reset} ${c.dim}${message}${c.reset}`);
-  }, 80);
-  try {
-    const result = fn();
-    clearInterval(id);
-    process.stderr.write(`\r  ${c.green}\u2713${c.reset} ${message}${" ".repeat(20)}
-`);
-    return result;
-  } catch (err2) {
-    clearInterval(id);
-    process.stderr.write(`\r  ${c.red}\u2717${c.reset} ${message} \u2014 failed${" ".repeat(10)}
-`);
-    throw err2;
-  }
-}
-function parseCreateArgs(argv) {
-  const args = argv.slice(2);
-  const opts = {
-    name: "",
-    policy: "",
-    noInstall: false
-  };
-  for (let i = 0; i < args.length; i++) {
-    switch (args[i]) {
-      case "--policy":
-        opts.policy = args[++i];
-        break;
-      case "--no-install":
-        opts.noInstall = true;
-        break;
-      case "--help":
-      case "-h":
-        printHelp2();
-        process.exit(0);
-        break;
-      default:
-        if (!args[i].startsWith("-") && !opts.name) {
-          opts.name = args[i];
-        }
-    }
-  }
-  if (!opts.name) {
-    log3("");
-    log3("  Error: Project name required.");
-    log3("");
-    log3("  Usage: npx @solongate/proxy create <name>");
-    log3("");
-    log3("  Examples:");
-    log3("    npx @solongate/proxy create my-mcp-server");
-    log3("    npx @solongate/proxy create weather-api");
-    process.exit(1);
-  }
-  return opts;
-}
-function printHelp2() {
-  log3(`
-SolonGate Create \u2014 Scaffold a secure MCP server in seconds
-
-USAGE
-  npx @solongate/proxy create <name> [options]
-
-OPTIONS
-  --policy <file>     Policy JSON file (default: cloud-managed)
-  --no-install        Skip dependency installation
-  -h, --help          Show this help message
-
-EXAMPLES
-  npx @solongate/proxy create my-server
-  npx @solongate/proxy create db-tools --policy ./policy.json
-`);
-}
-function createProject(dir, name, _policy) {
-  writeFileSync11(
-    join16(dir, "package.json"),
-    JSON.stringify(
-      {
-        name,
-        version: "0.1.0",
-        type: "module",
-        private: true,
-        bin: { [name]: "./dist/index.js" },
-        scripts: {
-          build: "tsup src/index.ts --format esm",
-          dev: "tsx --env-file=.env src/index.ts",
-          start: "node --env-file=.env dist/index.js"
-        },
-        dependencies: {
-          "@modelcontextprotocol/sdk": "^1.26.0",
-          "@solongate/proxy": "latest",
-          zod: "^3.25.0"
-        },
-        devDependencies: {
-          "@types/node": "^22.0.0",
-          tsup: "^8.3.0",
-          tsx: "^4.19.0",
-          typescript: "^5.7.0"
-        }
-      },
-      null,
-      2
-    ) + "\n"
-  );
-  writeFileSync11(
-    join16(dir, "tsconfig.json"),
-    JSON.stringify(
-      {
-        compilerOptions: {
-          target: "ES2022",
-          module: "ESNext",
-          moduleResolution: "bundler",
-          esModuleInterop: true,
-          strict: true,
-          outDir: "dist",
-          rootDir: "src",
-          declaration: true,
-          skipLibCheck: true
-        },
-        include: ["src"]
-      },
-      null,
-      2
-    ) + "\n"
-  );
-  mkdirSync10(join16(dir, "src"), { recursive: true });
-  writeFileSync11(
-    join16(dir, "src", "index.ts"),
-    `#!/usr/bin/env node
-
-console.log = (...args: unknown[]) => {
-  process.stderr.write(args.map(String).join(' ') + '\\n');
-};
-
-import { SecureMcpServer } from '@solongate/proxy';
-import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { z } from 'zod';
-
-// Policy is managed from the SolonGate Dashboard (https://solongate.com)
-// No local policySet needed \u2014 it's fetched from the cloud via your API key.
-const server = new SecureMcpServer(
-  { name: '${name}', version: '0.1.0' },
-);
-
-server.tool(
-  'hello',
-  'Say hello to someone',
-  { name: z.string().describe('Name of the person to greet') },
-  async ({ name }: { name: string }) => ({
-    content: [{ type: 'text', text: \`Hello, \${name}! Welcome to ${name}.\` }],
-  }),
-);
-
-const transport = new StdioServerTransport();
-await server.connect(transport);
-console.log('');
-console.log('${name} is running (stdio mode)');
-console.log('');
-console.log('MCP servers communicate over stdin/stdout \u2014 not HTTP.');
-console.log('You need an MCP client to connect:');
-console.log('');
-console.log('  Claude Code    Open this folder, .mcp.json is auto-detected');
-console.log('  Antigravity    .agents/mcp_config.json (or ~/.gemini/config/mcp_config.json)');
-console.log('  OpenClaw       Uses openclaw.plugin.json config');
-console.log('');
-console.log('Press Ctrl+C to stop.');
-`
-  );
-  writeFileSync11(
-    join16(dir, ".mcp.json"),
-    JSON.stringify(
-      {
-        mcpServers: {
-          [name]: {
-            command: "node",
-            args: ["dist/index.js"],
-            env: {
-              SOLONGATE_API_KEY: "sg_live_YOUR_KEY_HERE"
-            }
-          }
-        }
-      },
-      null,
-      2
-    ) + "\n"
-  );
-  writeFileSync11(
-    join16(dir, ".env"),
-    `SOLONGATE_API_KEY=sg_live_YOUR_KEY_HERE
-`
-  );
-  writeFileSync11(
-    join16(dir, ".gitignore"),
-    `node_modules/
-dist/
-*.solongate-backup
-.env
-.env.local
-.mcp.json
-`
-  );
-}
-async function main2() {
-  const opts = parseCreateArgs(process.argv);
-  const dir = resolve7(opts.name);
-  printBanner("Create MCP Server");
-  if (existsSync8(dir)) {
-    log3(`  ${c.red}Error:${c.reset} Directory "${opts.name}" already exists.`);
-    process.exit(1);
-  }
-  withSpinner(`Setting up ${opts.name}...`, () => {
-    mkdirSync10(dir, { recursive: true });
-    createProject(dir, opts.name, opts.policy);
-  });
-  if (!opts.noInstall) {
-    withSpinner("Installing dependencies...", () => {
-      execSync2("npm install", { cwd: dir, stdio: "pipe" });
-    });
-  }
-  log3("");
-  const stripAnsi = (s) => s.replace(/\x1b\[[0-9;]*m/g, "");
-  const W = 52;
-  const hr = "\u2500".repeat(W + 2);
-  const bLine = (text) => {
-    const visible = stripAnsi(text);
-    const padding = W - visible.length;
-    log3(`  ${c.dim}\u2502${c.reset} ${text}${" ".repeat(Math.max(0, padding))} ${c.dim}\u2502${c.reset}`);
-  };
-  const bEmpty = () => log3(`  ${c.dim}\u2502${c.reset} ${" ".repeat(W)} ${c.dim}\u2502${c.reset}`);
-  log3(`  ${c.dim}\u256D${hr}\u256E${c.reset}`);
-  log3(`  ${c.dim}\u2502${c.reset} ${c.green}${c.bold}\u2714  MCP Server created successfully!${c.reset}${" ".repeat(W - 35)} ${c.dim}\u2502${c.reset}`);
-  log3(`  ${c.dim}\u251C${hr}\u2524${c.reset}`);
-  bEmpty();
-  bLine(`${c.yellow}Next steps:${c.reset}`);
-  bEmpty();
-  bLine(`  ${c.cyan}$${c.reset} cd ${c.bold}${opts.name}${c.reset}`);
-  bLine(`  ${c.cyan}$${c.reset} npm run build`);
-  bLine(`  ${c.cyan}$${c.reset} npm run dev          ${c.dim}# dev mode${c.reset}`);
-  bLine(`  ${c.cyan}$${c.reset} npm start            ${c.dim}# production${c.reset}`);
-  bEmpty();
-  log3(`  ${c.dim}\u251C${hr}\u2524${c.reset}`);
-  bEmpty();
-  bLine(`${c.yellow}Set your API key:${c.reset}`);
-  bEmpty();
-  bLine(`  ${c.cyan}$${c.reset} export SOLONGATE_API_KEY=${c.blue3}sg_live_xxx${c.reset}`);
-  bEmpty();
-  bLine(`${c.dim}https://dashboard.solongate.com/api-keys/${c.reset}`);
-  bEmpty();
-  log3(`  ${c.dim}\u251C${hr}\u2524${c.reset}`);
-  bEmpty();
-  bLine(`${c.yellow}Use with any MCP server:${c.reset}`);
-  bEmpty();
-  bLine(`  ${c.cyan}$${c.reset} solongate-proxy -- npx @modelcontextprotocol/server-filesystem .`);
-  bLine(`  ${c.cyan}$${c.reset} solongate-proxy -- npx @playwright/mcp@latest`);
-  bLine(`  ${c.dim}Wraps any MCP server or AI tool with SolonGate protection${c.reset}`);
-  bEmpty();
-  log3(`  ${c.dim}\u251C${hr}\u2524${c.reset}`);
-  bEmpty();
-  bLine(`${c.yellow}Use with Claude Code / MCP client:${c.reset}`);
-  bEmpty();
-  bLine(`  ${c.dim}1.${c.reset} Replace ${c.blue3}sg_live_YOUR_KEY_HERE${c.reset} in .mcp.json`);
-  bLine(`  ${c.dim}2.${c.reset} Open this folder in your MCP client`);
-  bLine(`  ${c.dim}3.${c.reset} .mcp.json is auto-detected on startup`);
-  bEmpty();
-  bLine(`${c.yellow}Direct test (without MCP client):${c.reset}`);
-  bEmpty();
-  bLine(`  ${c.dim}1.${c.reset} Replace ${c.blue3}sg_live_YOUR_KEY_HERE${c.reset} in .env`);
-  bLine(`  ${c.dim}2.${c.reset} ${c.cyan}$${c.reset} npm run build && npm start`);
-  bEmpty();
-  log3(`  ${c.dim}\u2570${hr}\u256F${c.reset}`);
-  log3("");
-}
-var init_create = __esm({
-  "src/create.ts"() {
-    "use strict";
-    init_cli_utils();
-    main2().catch((err2) => {
-      log3(`Fatal: ${err2 instanceof Error ? err2.message : String(err2)}`);
-      process.exit(1);
-    });
-  }
-});
-
 // src/pull-push.ts
 var pull_push_exports = {};
-import { readFileSync as readFileSync13, writeFileSync as writeFileSync12, existsSync as existsSync9 } from "fs";
-import { resolve as resolve8 } from "path";
+import { readFileSync as readFileSync12, writeFileSync as writeFileSync10, existsSync as existsSync7 } from "fs";
+import { resolve as resolve6 } from "path";
 function loadEnv() {
   if (process.env.SOLONGATE_API_KEY) return;
-  const envPath = resolve8(".env");
-  if (!existsSync9(envPath)) return;
+  const envPath = resolve6(".env");
+  if (!existsSync7(envPath)) return;
   try {
-    const content = readFileSync13(envPath, "utf-8");
+    const content = readFileSync12(envPath, "utf-8");
     for (const line of content.split("\n")) {
       const trimmed = line.trim();
       if (!trimmed || trimmed.startsWith("#")) continue;
@@ -13284,20 +12644,20 @@ function parseCliArgs() {
     }
   }
   if (!apiKey) {
-    log4(red2("ERROR: API key not found."));
-    log4("");
-    log4("Set it in .env file:");
-    log4("  SOLONGATE_API_KEY=sg_live_...");
-    log4("");
-    log4("Or pass via environment:");
-    log4(`  SOLONGATE_API_KEY=sg_live_... solongate-proxy ${command}`);
+    log3(red2("ERROR: API key not found."));
+    log3("");
+    log3("Set it in .env file:");
+    log3("  SOLONGATE_API_KEY=sg_live_...");
+    log3("");
+    log3("Or pass via environment:");
+    log3(`  SOLONGATE_API_KEY=sg_live_... solongate-proxy ${command}`);
     process.exit(1);
   }
   if (!apiKey.startsWith("sg_live_")) {
-    log4(red2("ERROR: Pull/push/list requires a live API key (sg_live_...)."));
+    log3(red2("ERROR: Pull/push/list requires a live API key (sg_live_...)."));
     process.exit(1);
   }
-  return { command, apiKey, file: resolve8(file), policyId };
+  return { command, apiKey, file: resolve6(file), policyId };
 }
 async function listPolicies(apiKey) {
   const res = await fetch(`${API_URL}/api/v1/policies`, {
@@ -13310,18 +12670,18 @@ async function listPolicies(apiKey) {
 async function list5(apiKey, policyId) {
   const policies = await listPolicies(apiKey);
   if (policies.length === 0) {
-    log4(yellow2("No policies found. Create one in the dashboard first."));
-    log4(dim2("  https://dashboard.solongate.com/policies"));
+    log3(yellow2("No policies found. Create one in the dashboard first."));
+    log3(dim2("  https://dashboard.solongate.com/policies"));
     return;
   }
   if (policyId) {
     const match = policies.find((p) => p.id === policyId);
     if (!match) {
-      log4(red2(`Policy not found: ${policyId}`));
-      log4("");
-      log4("Available policies:");
+      log3(red2(`Policy not found: ${policyId}`));
+      log3("");
+      log3("Available policies:");
       for (const p of policies) {
-        log4(`  ${dim2("\u2022")} ${p.id}`);
+        log3(`  ${dim2("\u2022")} ${p.id}`);
       }
       process.exit(1);
     }
@@ -13329,10 +12689,10 @@ async function list5(apiKey, policyId) {
     printPolicyDetail(full);
     return;
   }
-  log4("");
-  log4(bold2(`  Policies (${policies.length})`));
-  log4(dim2("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-  log4("");
+  log3("");
+  log3(bold2(`  Policies (${policies.length})`));
+  log3(dim2("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  log3("");
   const fullPolicies = await Promise.all(
     policies.map(
       (p) => fetchCloudPolicy(apiKey, API_URL, p.id).then((full) => ({ policy: p, rules: full.rules })).catch(() => ({ policy: p, rules: [] }))
@@ -13341,136 +12701,136 @@ async function list5(apiKey, policyId) {
   for (const { policy, rules } of fullPolicies) {
     printPolicySummary(policy, [...rules]);
   }
-  log4(dim2("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-  log4("");
-  log4(`  ${dim2("View details:")}  solongate-proxy list --policy-id <ID>`);
-  log4(`  ${dim2("Pull policy:")}   solongate-proxy pull --policy-id <ID>`);
-  log4(`  ${dim2("Push policy:")}   solongate-proxy push --policy-id <ID>`);
-  log4("");
+  log3(dim2("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  log3("");
+  log3(`  ${dim2("View details:")}  solongate-proxy list --policy-id <ID>`);
+  log3(`  ${dim2("Pull policy:")}   solongate-proxy pull --policy-id <ID>`);
+  log3(`  ${dim2("Push policy:")}   solongate-proxy push --policy-id <ID>`);
+  log3("");
 }
 function printPolicySummary(p, rules) {
   const ruleCount = rules.length;
   const allowCount = rules.filter((r) => r.effect === "ALLOW").length;
   const denyCount = rules.filter((r) => r.effect === "DENY").length;
-  log4(`  ${cyan2(p.id)}`);
-  log4(`    ${bold2(p.name)}  ${dim2(`v${p.version ?? "?"}`)}`);
-  log4(`    ${dim2("Rules:")} ${ruleCount}  ${green2(`${allowCount} ALLOW`)}  ${red2(`${denyCount} DENY`)}`);
+  log3(`  ${cyan2(p.id)}`);
+  log3(`    ${bold2(p.name)}  ${dim2(`v${p.version ?? "?"}`)}`);
+  log3(`    ${dim2("Rules:")} ${ruleCount}  ${green2(`${allowCount} ALLOW`)}  ${red2(`${denyCount} DENY`)}`);
   if (p.created_at) {
-    log4(`    ${dim2("Updated:")} ${new Date(p.created_at).toLocaleString()}`);
+    log3(`    ${dim2("Updated:")} ${new Date(p.created_at).toLocaleString()}`);
   }
-  log4("");
+  log3("");
 }
 function printPolicyDetail(policy) {
-  log4("");
-  log4(bold2(`  ${policy.name}`));
-  log4(`  ${dim2("ID:")} ${cyan2(policy.id)}  ${dim2("Version:")} ${policy.version}  ${dim2("Rules:")} ${policy.rules.length}`);
-  log4("");
+  log3("");
+  log3(bold2(`  ${policy.name}`));
+  log3(`  ${dim2("ID:")} ${cyan2(policy.id)}  ${dim2("Version:")} ${policy.version}  ${dim2("Rules:")} ${policy.rules.length}`);
+  log3("");
   if (policy.rules.length === 0) {
-    log4(yellow2("  No rules defined."));
-    log4("");
+    log3(yellow2("  No rules defined."));
+    log3("");
     return;
   }
-  log4(dim2("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  log3(dim2("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   for (const rule of policy.rules) {
     const effectColor = rule.effect === "ALLOW" ? green2 : red2;
-    log4("");
-    log4(`  ${effectColor(rule.effect.padEnd(5))}  ${bold2(rule.toolPattern)}  ${dim2(`P:${rule.priority}`)}`);
+    log3("");
+    log3(`  ${effectColor(rule.effect.padEnd(5))}  ${bold2(rule.toolPattern)}  ${dim2(`P:${rule.priority}`)}`);
     if (rule.description) {
-      log4(`         ${dim2(rule.description)}`);
+      log3(`         ${dim2(rule.description)}`);
     }
-    log4(`         ${dim2(`${rule.permission}  trust:${rule.minimumTrustLevel || "UNTRUSTED"}`)}`);
+    log3(`         ${dim2(`${rule.permission}  trust:${rule.minimumTrustLevel || "UNTRUSTED"}`)}`);
     if (rule.pathConstraints) {
       const pc = rule.pathConstraints;
-      if (pc.rootDirectory) log4(`         ${magenta("ROOT")} ${pc.rootDirectory}`);
-      if (pc.allowed?.length) log4(`         ${green2("PATHS")} ${pc.allowed.join(", ")}`);
-      if (pc.denied?.length) log4(`         ${red2("DENY")}  ${pc.denied.join(", ")}`);
+      if (pc.rootDirectory) log3(`         ${magenta("ROOT")} ${pc.rootDirectory}`);
+      if (pc.allowed?.length) log3(`         ${green2("PATHS")} ${pc.allowed.join(", ")}`);
+      if (pc.denied?.length) log3(`         ${red2("DENY")}  ${pc.denied.join(", ")}`);
     }
     if (rule.commandConstraints) {
       const cc = rule.commandConstraints;
-      if (cc.allowed?.length) log4(`         ${green2("CMDS")}  ${cc.allowed.join(", ")}`);
-      if (cc.denied?.length) log4(`         ${red2("DENY")}  ${cc.denied.join(", ")}`);
+      if (cc.allowed?.length) log3(`         ${green2("CMDS")}  ${cc.allowed.join(", ")}`);
+      if (cc.denied?.length) log3(`         ${red2("DENY")}  ${cc.denied.join(", ")}`);
     }
     if (rule.filenameConstraints) {
       const fc = rule.filenameConstraints;
-      if (fc.allowed?.length) log4(`         ${green2("FILES")} ${fc.allowed.join(", ")}`);
-      if (fc.denied?.length) log4(`         ${red2("DENY")}  ${fc.denied.join(", ")}`);
+      if (fc.allowed?.length) log3(`         ${green2("FILES")} ${fc.allowed.join(", ")}`);
+      if (fc.denied?.length) log3(`         ${red2("DENY")}  ${fc.denied.join(", ")}`);
     }
     if (rule.urlConstraints) {
       const uc = rule.urlConstraints;
-      if (uc.allowed?.length) log4(`         ${green2("URLS")}  ${uc.allowed.join(", ")}`);
-      if (uc.denied?.length) log4(`         ${red2("DENY")}  ${uc.denied.join(", ")}`);
+      if (uc.allowed?.length) log3(`         ${green2("URLS")}  ${uc.allowed.join(", ")}`);
+      if (uc.denied?.length) log3(`         ${red2("DENY")}  ${uc.denied.join(", ")}`);
     }
   }
-  log4("");
-  log4(dim2("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-  log4("");
+  log3("");
+  log3(dim2("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  log3("");
 }
 async function pull(apiKey, file, policyId) {
   if (!policyId) {
     const policies = await listPolicies(apiKey);
     if (policies.length === 0) {
-      log4(red2("No policies found. Create one in the dashboard first."));
+      log3(red2("No policies found. Create one in the dashboard first."));
       process.exit(1);
     }
     if (policies.length === 1) {
       policyId = policies[0].id;
-      log4(dim2(`Auto-selecting only policy: ${policyId}`));
+      log3(dim2(`Auto-selecting only policy: ${policyId}`));
     } else {
-      log4(yellow2(`Found ${policies.length} policies:`));
-      log4("");
+      log3(yellow2(`Found ${policies.length} policies:`));
+      log3("");
       for (const p of policies) {
-        log4(`  ${cyan2(p.id)}  ${p.name}  ${dim2(`v${p.version ?? "?"}`)}`);
+        log3(`  ${cyan2(p.id)}  ${p.name}  ${dim2(`v${p.version ?? "?"}`)}`);
       }
-      log4("");
-      log4("Use --policy-id <ID> to specify which one to pull.");
+      log3("");
+      log3("Use --policy-id <ID> to specify which one to pull.");
       process.exit(1);
     }
   }
-  log4(`Pulling ${cyan2(policyId)} from dashboard...`);
+  log3(`Pulling ${cyan2(policyId)} from dashboard...`);
   const policy = await fetchCloudPolicy(apiKey, API_URL, policyId);
   const { id: _id, ...policyWithoutId } = policy;
   const json = JSON.stringify(policyWithoutId, null, 2) + "\n";
-  writeFileSync12(file, json, "utf-8");
-  log4("");
-  log4(green2("  Saved to: ") + file);
-  log4(`  ${dim2("Name:")}    ${policy.name}`);
-  log4(`  ${dim2("Version:")} ${policy.version}`);
-  log4(`  ${dim2("Rules:")}   ${policy.rules.length}`);
-  log4("");
-  log4(dim2("The policy file does not contain an ID."));
-  log4(dim2("Use --policy-id to specify the target when pushing/pulling."));
-  log4("");
+  writeFileSync10(file, json, "utf-8");
+  log3("");
+  log3(green2("  Saved to: ") + file);
+  log3(`  ${dim2("Name:")}    ${policy.name}`);
+  log3(`  ${dim2("Version:")} ${policy.version}`);
+  log3(`  ${dim2("Rules:")}   ${policy.rules.length}`);
+  log3("");
+  log3(dim2("The policy file does not contain an ID."));
+  log3(dim2("Use --policy-id to specify the target when pushing/pulling."));
+  log3("");
 }
 async function push(apiKey, file, policyId) {
-  if (!existsSync9(file)) {
-    log4(red2(`ERROR: File not found: ${file}`));
+  if (!existsSync7(file)) {
+    log3(red2(`ERROR: File not found: ${file}`));
     process.exit(1);
   }
   if (!policyId) {
-    log4(red2("ERROR: --policy-id is required for push."));
-    log4("");
-    log4("This determines which cloud policy to update.");
-    log4("");
-    log4("Usage:");
-    log4("  solongate-proxy push --policy-id my-policy");
-    log4("  solongate-proxy push --policy-id my-policy --file custom.json");
-    log4("");
-    log4("List your policies:");
-    log4("  solongate-proxy list");
+    log3(red2("ERROR: --policy-id is required for push."));
+    log3("");
+    log3("This determines which cloud policy to update.");
+    log3("");
+    log3("Usage:");
+    log3("  solongate-proxy push --policy-id my-policy");
+    log3("  solongate-proxy push --policy-id my-policy --file custom.json");
+    log3("");
+    log3("List your policies:");
+    log3("  solongate-proxy list");
     process.exit(1);
   }
-  const content = readFileSync13(file, "utf-8");
+  const content = readFileSync12(file, "utf-8");
   let policy;
   try {
     policy = JSON.parse(content);
   } catch {
-    log4(red2(`ERROR: Invalid JSON in ${file}`));
+    log3(red2(`ERROR: Invalid JSON in ${file}`));
     process.exit(1);
   }
-  log4(`Pushing to ${cyan2(policyId)}...`);
-  log4(`  ${dim2("File:")}  ${file}`);
-  log4(`  ${dim2("Name:")}  ${policy.name || "Unnamed"}`);
-  log4(`  ${dim2("Rules:")} ${(policy.rules || []).length}`);
+  log3(`Pushing to ${cyan2(policyId)}...`);
+  log3(`  ${dim2("File:")}  ${file}`);
+  log3(`  ${dim2("Name:")}  ${policy.name || "Unnamed"}`);
+  log3(`  ${dim2("Rules:")} ${(policy.rules || []).length}`);
   const checkRes = await fetch(`${API_URL}/api/v1/policies/${policyId}`, {
     headers: { "Authorization": `Bearer ${apiKey}` }
   });
@@ -13492,17 +12852,17 @@ async function push(apiKey, file, policyId) {
   });
   if (!res.ok) {
     const body = await res.text().catch(() => "");
-    log4(red2(`ERROR: Push failed (${res.status}): ${body}`));
+    log3(red2(`ERROR: Push failed (${res.status}): ${body}`));
     process.exit(1);
   }
   const data = await res.json();
-  log4("");
-  log4(green2(`  Pushed to cloud: v${data._version ?? "created"}`));
-  log4(`  ${dim2("Policy ID:")} ${policyId}`);
-  log4(`  ${dim2("Method:")}    ${method === "PUT" ? "Updated existing" : "Created new"}`);
-  log4("");
+  log3("");
+  log3(green2(`  Pushed to cloud: v${data._version ?? "created"}`));
+  log3(`  ${dim2("Policy ID:")} ${policyId}`);
+  log3(`  ${dim2("Method:")}    ${method === "PUT" ? "Updated existing" : "Created new"}`);
+  log3("");
 }
-async function main3() {
+async function main() {
   const { command, apiKey, file, policyId } = parseCliArgs();
   try {
     if (command === "pull") {
@@ -13512,32 +12872,32 @@ async function main3() {
     } else if (command === "list" || command === "ls") {
       await list5(apiKey, policyId);
     } else {
-      log4(red2(`Unknown command: ${command}`));
-      log4("");
-      log4(bold2("Usage:"));
-      log4("  solongate-proxy list                          List all policies");
-      log4("  solongate-proxy list --policy-id <ID>         Show policy details");
-      log4("  solongate-proxy pull --policy-id <ID>         Pull policy to local file");
-      log4("  solongate-proxy push --policy-id <ID>         Push local file to cloud");
-      log4("");
-      log4(bold2("Flags:"));
-      log4("  --policy-id, --id <ID>    Cloud policy ID (required for push)");
-      log4("  --file, -f <path>         Local file path (default: policy.json)");
-      log4("  --api-key <key>           API key (or set SOLONGATE_API_KEY)");
-      log4("");
+      log3(red2(`Unknown command: ${command}`));
+      log3("");
+      log3(bold2("Usage:"));
+      log3("  solongate-proxy list                          List all policies");
+      log3("  solongate-proxy list --policy-id <ID>         Show policy details");
+      log3("  solongate-proxy pull --policy-id <ID>         Pull policy to local file");
+      log3("  solongate-proxy push --policy-id <ID>         Push local file to cloud");
+      log3("");
+      log3(bold2("Flags:"));
+      log3("  --policy-id, --id <ID>    Cloud policy ID (required for push)");
+      log3("  --file, -f <path>         Local file path (default: policy.json)");
+      log3("  --api-key <key>           API key (or set SOLONGATE_API_KEY)");
+      log3("");
       process.exit(1);
     }
   } catch (err2) {
-    log4(red2(`ERROR: ${err2 instanceof Error ? err2.message : String(err2)}`));
+    log3(red2(`ERROR: ${err2 instanceof Error ? err2.message : String(err2)}`));
     process.exit(1);
   }
 }
-var log4, dim2, bold2, green2, red2, yellow2, cyan2, magenta, API_URL;
+var log3, dim2, bold2, green2, red2, yellow2, cyan2, magenta, API_URL;
 var init_pull_push = __esm({
   "src/pull-push.ts"() {
     "use strict";
     init_config();
-    log4 = (...args) => process.stderr.write(`${args.map(String).join(" ")}
+    log3 = (...args) => process.stderr.write(`${args.map(String).join(" ")}
 `);
     dim2 = (s) => `\x1B[2m${s}\x1B[0m`;
     bold2 = (s) => `\x1B[1m${s}\x1B[0m`;
@@ -13547,15 +12907,15 @@ var init_pull_push = __esm({
     cyan2 = (s) => `\x1B[36m${s}\x1B[0m`;
     magenta = (s) => `\x1B[35m${s}\x1B[0m`;
     API_URL = "https://api.solongate.com";
-    main3();
+    main();
   }
 });
 
 // src/index.ts
 init_config();
-import { readFileSync as readFileSync14 } from "fs";
+import { readFileSync as readFileSync13 } from "fs";
 import { fileURLToPath as fileURLToPath4 } from "url";
-import { dirname as dirname4, join as join17 } from "path";
+import { dirname as dirname4, join as join16 } from "path";
 
 // src/proxy.ts
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
@@ -15979,7 +15339,7 @@ var Mutex = class {
       this.locked = true;
       return;
     }
-    return new Promise((resolve9, reject) => {
+    return new Promise((resolve7, reject) => {
       const timer = setTimeout(() => {
         const idx = this.queue.indexOf(onReady);
         if (idx !== -1) this.queue.splice(idx, 1);
@@ -15987,7 +15347,7 @@ var Mutex = class {
       }, timeoutMs);
       const onReady = () => {
         clearTimeout(timer);
-        resolve9();
+        resolve7();
       };
       this.queue.push(onReady);
     });
@@ -16578,7 +15938,7 @@ ${msg.content.text}`;
 
 // src/index.ts
 init_cli_utils();
-var CLI_SUBCOMMANDS = /* @__PURE__ */ new Set(["create", "inject", "pull", "push", "list", "ls", "logs-server", "local-logs", "policy", "ratelimit", "dlp", "stats", "audit", "agents", "agent", "doctor", "watch", "alerts", "webhooks", "dataroom"]);
+var CLI_SUBCOMMANDS = /* @__PURE__ */ new Set(["pull", "push", "list", "ls", "logs-server", "local-logs", "policy", "ratelimit", "dlp", "stats", "audit", "agents", "agent", "doctor", "watch", "alerts", "webhooks", "dataroom"]);
 var CLI_INFO_ARGS = /* @__PURE__ */ new Set(["login", "help", "--help", "-h", "--version", "-v", "version"]);
 var IS_HUMAN_CLI = process.argv.length <= 2 || CLI_SUBCOMMANDS.has(process.argv[2] ?? "") || CLI_INFO_ARGS.has(process.argv[2] ?? "");
 if (!IS_HUMAN_CLI) {
@@ -16597,8 +15957,8 @@ if (!IS_HUMAN_CLI) {
 }
 var PKG_VERSION = (() => {
   try {
-    const p = join17(dirname4(fileURLToPath4(import.meta.url)), "..", "package.json");
-    return JSON.parse(readFileSync14(p, "utf-8")).version || "unknown";
+    const p = join16(dirname4(fileURLToPath4(import.meta.url)), "..", "package.json");
+    return JSON.parse(readFileSync13(p, "utf-8")).version || "unknown";
   } catch {
     return "unknown";
   }
@@ -16617,7 +15977,7 @@ function printWelcome() {
   console.log(`  ${c.dim}Manage it at ${c.reset}${c.cyan}https://dashboard.solongate.com${c.reset}`);
   console.log("");
 }
-function printHelp3() {
+function printHelp() {
   const W = 46;
   const head = (t) => console.log(`
   ${c.bold}${t}${c.reset}`);
@@ -16640,7 +16000,6 @@ function printHelp3() {
   head("Setup & status");
   cmd("solongate", "open the dataroom UI (login, policies, audit, settings)");
   cmd("doctor [--json]", "health check: login, policy, guard, local logs");
-  cmd("create", "scaffold a guarded MCP server in this folder");
   cmd("logs-server", "serve local audit logs to the dashboard");
   head("Policies");
   cmd("policy list", "list all policies");
@@ -16687,10 +16046,10 @@ function printHelp3() {
   console.log(`  ${c.dim}Details for a command: ${c.reset}${c.cyan}solongate <command> help${c.reset}${c.dim}  \xB7  Dashboard: ${c.reset}${c.cyan}https://dashboard.solongate.com${c.reset}`);
   console.log("");
 }
-async function main4() {
+async function main2() {
   const subcommand = process.argv[2];
   if (subcommand === "--help" || subcommand === "-h" || subcommand === "help") {
-    printHelp3();
+    printHelp();
     return;
   }
   if (subcommand === "--version" || subcommand === "-v" || subcommand === "version") {
@@ -16740,16 +16099,6 @@ async function main4() {
     await runLogsServer2();
     return;
   }
-  if (subcommand === "inject") {
-    process.argv.splice(2, 1);
-    await Promise.resolve().then(() => (init_inject(), inject_exports));
-    return;
-  }
-  if (subcommand === "create") {
-    process.argv.splice(2, 1);
-    await Promise.resolve().then(() => (init_create(), create_exports));
-    return;
-  }
   if (subcommand === "pull" || subcommand === "push" || subcommand === "list" || subcommand === "ls") {
     await Promise.resolve().then(() => (init_pull_push(), pull_push_exports));
     return;
@@ -16776,4 +16125,4 @@ async function main4() {
     process.exit(1);
   }
 }
-main4();
+main2();