@solongate/proxy 0.82.24 → 0.82.25

package/dist/commands/agents.d.ts

@@ -1,4 +1,4 @@
-/** `solongate agents` — the live feed. */
+/** `solongate agents` - the live feed. */
 export declare function runAgents(argv: string[]): Promise<number>;
-/** `solongate agent <id>` — deep detail for one agent. */
+/** `solongate agent <id>` - deep detail for one agent. */
 export declare function runAgent(argv: string[]): Promise<number>;

package/dist/commands/format.d.ts

@@ -8,6 +8,13 @@ export declare const green: (s: string) => string;
 export declare const red: (s: string) => string;
 export declare const yellow: (s: string) => string;
 export declare const cyan: (s: string) => string;
+/**
+ * Render a colored command usage block, matching the top-level `solongate --help`
+ * style: bold title, cyan command syntax, dim descriptions. `rows` are
+ * [syntax, description?] pairs; a syntax with no description prints on its own
+ * (used for long or continuation lines). Returns the whole block as one string.
+ */
+export declare function usage(title: string, tagline: string, rows: Array<[string, string?]>, footer?: string): string;
 /** Color a decision string (ALLOW green, DENY/DENIED red). */
 export declare function decisionColor(decision: string): string;
 /**

package/dist/commands/index.d.ts

@@ -1,6 +1,6 @@
 /**
  * Run a management command. `command` is the subcommand name (e.g. 'policy'),
- * `argv` are the tokens after it. Never throws — resolves to an exit code.
+ * `argv` are the tokens after it. Never throws - resolves to an exit code.
  */
 export declare function runCommand(command: string, argv: string[]): Promise<number>;
 /** The subcommand names this router owns (used by src/index.ts to route). */

package/dist/commands/index.js

@@ -418,6 +418,28 @@ var green = (s) => `${c.green}${s}${c.reset}`;
 var red = (s) => `${c.red}${s}${c.reset}`;
 var yellow = (s) => `${c.yellow}${s}${c.reset}`;
 var cyan = (s) => `${c.cyan}${s}${c.reset}`;
+function usage(title, tagline, rows, footer = "Add --json for machine-readable output.") {
+  const W = 40;
+  const lines = ["", `  ${c.bold}${c.blue4}${title}${c.reset}  ${c.dim}${tagline}${c.reset}`, ""];
+  for (const [syntax, desc] of rows) {
+    if (!syntax) {
+      lines.push("");
+      continue;
+    }
+    if (desc === void 0) {
+      lines.push(`    ${c.cyan}${syntax}${c.reset}`);
+      continue;
+    }
+    if (syntax.length <= W) {
+      lines.push(`    ${c.cyan}${syntax}${c.reset}${" ".repeat(W - syntax.length)}${c.dim}${desc}${c.reset}`);
+    } else {
+      lines.push(`    ${c.cyan}${syntax}${c.reset}`);
+      lines.push(`    ${" ".repeat(W)}${c.dim}${desc}${c.reset}`);
+    }
+  }
+  if (footer) lines.push("", `  ${c.dim}${footer}${c.reset}`);
+  return lines.join("\n");
+}
 function decisionColor(decision) {
   const d = decision.toUpperCase();
   if (d === "ALLOW") return green(d);
@@ -495,20 +517,16 @@ function flagBool(flags, name) {
 }
 
 // src/commands/policy.ts
-var USAGE = `${bold("solongate policy")} \u2014 manage cloud policies
-
-  policy list                          List all policies
-  policy show <id> [--version N]       Show one policy (rules, mode)
-  policy rules <id>                    List a policy's rules
-  policy allow <id> --tool <p> [--command|--path|--url <val>]
-                                       Append an ALLOW rule
-  policy revoke <id> <ruleId>          Remove a rule
-  policy active                        Show the resolved active policy
-  policy activate <id> | --clear       Pin / unpin the active policy
-  policy dry-run <id|file.json> [--limit N] [--mode denylist|whitelist]
-                                       Replay recent traffic against a policy's rules
-
-  Add --json to any read command for machine-readable output.`;
+var USAGE = usage("solongate policy", "manage cloud policies", [
+  ["policy list", "list all policies"],
+  ["policy show <id> [--version N]", "show one policy (rules, mode)"],
+  ["policy rules <id>", "list a policy's rules"],
+  ["policy allow <id> --tool <p> [--command|--path|--url <val>]", "append an ALLOW rule"],
+  ["policy revoke <id> <ruleId>", "remove a rule"],
+  ["policy active", "show the resolved active policy"],
+  ["policy activate <id> | --clear", "pin / unpin the active policy"],
+  ["policy dry-run <id|file.json> [--limit N] [--mode denylist|whitelist]", "replay recent traffic against rules"]
+], "Add --json to any read command for machine-readable output.");
 async function run(argv) {
   const { positionals, flags } = parse(argv);
   const sub = positionals[0];
@@ -533,7 +551,7 @@ async function run(argv) {
           p.mode === "whitelist" ? green("whitelist") : "denylist",
           String(p.rules?.length ?? 0),
           `v${p.version}`,
-          dim(truncate(p.created_by || "\u2014", 20))
+          dim(truncate(p.created_by || "-", 20))
         ])
       );
       return 0;
@@ -596,7 +614,7 @@ async function run(argv) {
       }
       err("");
       err(`  Active: ${bold(a.policy.name)} ${dim(`(${a.policy.id})`)}  v${a.version}`);
-      err(`  matched by: ${cyan(a.matched_by ?? "\u2014")}   self-protection: ${a.self_protection_enabled ? green("on") : dim("off")}`);
+      err(`  matched by: ${cyan(a.matched_by ?? "-")}   self-protection: ${a.self_protection_enabled ? green("on") : dim("off")}`);
       const rl = a.security?.rateLimit;
       if (rl) err(`  rate limit: ${rl.perMinute}/min  ${rl.perHour}/h  ${rl.perDay}/day`);
       if (a.security?.dlpBlock) err(`  DLP block: ${a.security.dlpBlock.patterns.length} patterns`);
@@ -651,7 +669,7 @@ function printRules(rules) {
       String(r.priority),
       cyan(truncate(r.toolPattern, 24)),
       dim(truncate(r.id, 22)),
-      truncate(r.description || "\u2014", 40)
+      truncate(r.description || "-", 40)
     ])
   );
 }
@@ -665,13 +683,11 @@ async function resolveRules(target) {
 }
 
 // src/commands/ratelimit.ts
-var USAGE2 = `${bold("solongate ratelimit")} \u2014 request throttling
-
-  ratelimit show                       Current limits + change history
-  ratelimit set --minute N [--hour N] [--day N] [--mode off|detect|block]
-  ratelimit history                    Recent limit changes
-
-  Add --json for machine-readable output.`;
+var USAGE2 = usage("solongate ratelimit", "request throttling", [
+  ["ratelimit show", "current limits + change history"],
+  ["ratelimit set --minute N [--hour N] [--day N] [--mode off|detect|block]"],
+  ["ratelimit history", "recent limit changes"]
+]);
 var modeColor = (m) => m === "block" ? green(m) : m === "detect" ? yellow(m) : dim(m);
 async function run2(argv) {
   const { positionals, flags } = parse(argv);
@@ -736,16 +752,14 @@ async function run2(argv) {
 }
 
 // src/commands/dlp.ts
-var USAGE3 = `${bold("solongate dlp")} \u2014 data-loss prevention
-
-  dlp show                             Current mode + enabled patterns
-  dlp mode <off|detect|block>          Set enforcement mode
-  dlp enable <pattern>                 Enable a built-in pattern
-  dlp disable <pattern>                Disable a built-in pattern
-  dlp add-custom --name X --re <regex> Add a custom pattern
-  dlp remove-custom <name>             Remove a custom pattern
-
-  Add --json for machine-readable output.`;
+var USAGE3 = usage("solongate dlp", "data-loss prevention", [
+  ["dlp show", "current mode + enabled patterns"],
+  ["dlp mode <off|detect|block>", "set enforcement mode"],
+  ["dlp enable <pattern>", "enable a built-in pattern"],
+  ["dlp disable <pattern>", "disable a built-in pattern"],
+  ["dlp add-custom --name X --re <regex>", "add a custom pattern"],
+  ["dlp remove-custom <name>", "remove a custom pattern"]
+]);
 var modeColor2 = (m) => m === "block" ? green(m) : m === "detect" ? yellow(m) : dim(m);
 async function run3(argv) {
   const { positionals, flags } = parse(argv);
@@ -817,13 +831,11 @@ async function run3(argv) {
 }
 
 // src/commands/stats.ts
-var USAGE4 = `${bold("solongate stats")} \u2014 traffic & security stats
-
-  stats                                Overview (totals, recent activity)
-  stats timeseries [--period 24h|7d|30d|all]
-  stats drift [--days N]               Denials rising/falling vs previous window
-
-  Add --json for machine-readable output.`;
+var USAGE4 = usage("solongate stats", "traffic & security stats", [
+  ["stats", "overview (totals, recent activity)"],
+  ["stats timeseries [--period 24h|7d|30d|all]"],
+  ["stats drift [--days N]", "denials rising/falling vs previous window"]
+]);
 async function run4(argv) {
   const { positionals, flags } = parse(argv);
   const sub = positionals[0] ?? "overview";
@@ -845,7 +857,7 @@ async function run4(argv) {
             decisionColor(a.decision),
             cyan(truncate(a.tool_name, 24)),
             dim(a.trust_level),
-            String(a.evaluation_time_ms ?? "\u2014"),
+            String(a.evaluation_time_ms ?? "-"),
             dim(a.created_at)
           ])
         );
@@ -876,8 +888,8 @@ async function run4(argv) {
           bold(String(r.current)),
           dim(String(r.previous)),
           r.is_new ? green("NEW") : r.spike ? red(`+${r.delta}`) : String(r.delta),
-          cyan(truncate(r.rule_id ?? "\u2014", 22)),
-          truncate(r.reason ?? r.last_tool ?? "\u2014", 36)
+          cyan(truncate(r.rule_id ?? "-", 22)),
+          truncate(r.reason ?? r.last_tool ?? "-", 36)
         ])
       );
       return 0;
@@ -888,14 +900,12 @@ async function run4(argv) {
 }
 
 // src/commands/audit.ts
-var USAGE5 = `${bold("solongate audit")} \u2014 audit log
-
-  audit [--filter ALLOW|DENY] [--tool <substr>] [--signal dlp|ratelimit]
-        [--search <text>] [--agent-name <name>] [--limit N]
-  audit whitelist <logId> [--scope exact|tool]
-                                       Turn a denied call into an ALLOW rule
-
-  Add --json for machine-readable output.`;
+var USAGE5 = usage("solongate audit", "audit log", [
+  ["audit [--filter ALLOW|DENY] [--tool <substr>] [--signal dlp|ratelimit]"],
+  ["      [--search <text>] [--agent-name <name>] [--limit N]"],
+  ["audit whitelist <logId> [--scope exact|tool]", "turn a denied call into an ALLOW rule"],
+  ["audit block <logId> [--scope exact|tool]", "turn a call into a DENY rule"]
+]);
 async function run5(argv) {
   const { positionals, flags } = parse(argv);
   const json = flagBool(flags, "json");
@@ -938,8 +948,8 @@ async function run5(argv) {
     res.entries.map((e) => [
       decisionColor(e.decision),
       cyan(truncate(e.tool_name, 22)),
-      dim(truncate(e.agent_name ?? "\u2014", 16)),
-      truncate(e.reason ?? "\u2014", 30),
+      dim(truncate(e.agent_name ?? "-", 16)),
+      truncate(e.reason ?? "-", 30),
       e.dlp_matches?.length ? red(String(e.dlp_matches.length)) : dim("0"),
       dim(e.created_at),
       dim(truncate(e.id, 10))
@@ -967,7 +977,7 @@ async function runAgents(argv) {
       a.denied_calls ? red(String(a.denied_calls)) : dim("0"),
       a.dlp_events ? red(String(a.dlp_events)) : dim("0"),
       `${a.trust_score}`,
-      dim(truncate(a.character || "\u2014", 22))
+      dim(truncate(a.character || "-", 22))
     ])
   );
   return 0;
@@ -983,7 +993,7 @@ async function runAgent(argv) {
   err(`  ${bold(a.agent_id)}   status: ${statusColor(String(a.status))}`);
   const base = a.baseline;
   if (base) {
-    err(`  ${dim(base.character ?? "")}   trust ${bold(String(base.trustScore ?? "\u2014"))}/100   deny-rate ${(Number(base.denyRate ?? 0) * 100).toFixed(0)}%`);
+    err(`  ${dim(base.character ?? "")}   trust ${bold(String(base.trustScore ?? "-"))}/100   deny-rate ${(Number(base.denyRate ?? 0) * 100).toFixed(0)}%`);
   }
   const feed = a.recent_feed ?? [];
   if (feed.length) {
@@ -993,7 +1003,7 @@ async function runAgent(argv) {
       feed.slice(0, 15).map((f) => [
         f.decision === "ALLOW" ? green("ALLOW") : red(String(f.decision)),
         cyan(truncate(String(f.tool), 22)),
-        truncate(String(f.reason ?? "\u2014"), 30),
+        truncate(String(f.reason ?? "-"), 30),
         dim(String(f.created_at))
       ])
     );
@@ -1011,7 +1021,7 @@ async function run6(argv) {
   const json = flagBool(flags, "json");
   const checks = [];
   if (!isAuthenticated()) {
-    checks.push({ name: "login", ok: false, detail: "not logged in \u2014 run `solongate`, add your account in the Accounts panel" });
+    checks.push({ name: "login", ok: false, detail: "not logged in - run `solongate`, add your account in the Accounts panel" });
   } else {
     const { apiUrl } = resolveCredentials();
     checks.push({ name: "login", ok: true, detail: `paired \xB7 ${apiUrl}` });
@@ -1020,7 +1030,7 @@ async function run6(argv) {
       if (active2.policy) {
         checks.push({ name: "active policy", ok: true, detail: `${active2.policy.name} v${active2.version} \xB7 ${active2.policy.mode ?? "denylist"} \xB7 matched by ${active2.matched_by}` });
       } else {
-        checks.push({ name: "active policy", ok: "warn", detail: "no policy resolves \u2014 every call falls back to default" });
+        checks.push({ name: "active policy", ok: "warn", detail: "no policy resolves - every call falls back to default" });
       }
       const sec = active2.security;
       checks.push({ name: "rate limit", ok: sec?.rateLimit ? true : "warn", detail: sec?.rateLimit ? `${sec.rateLimit.perMinute}/min` : "off" });
@@ -1040,7 +1050,7 @@ async function run6(argv) {
     const ageMin = (Date.now() - st.mtimeMs) / 6e4;
     checks.push({ name: "local logs", ok: true, detail: `on \xB7 ${(st.size / 1024).toFixed(0)}KB \xB7 last write ${ageMin < 1 ? "just now" : Math.round(ageMin) + "m ago"}` });
   } else {
-    checks.push({ name: "local logs", ok: "warn", detail: "off (logs go to cloud) \u2014 enable in dashboard \u2192 Settings" });
+    checks.push({ name: "local logs", ok: "warn", detail: "off (logs go to cloud) - enable in dashboard \u2192 Settings" });
   }
   if (json) return printJson(checks), checks.some((c2) => c2.ok === false) ? 1 : 0;
   err("");
@@ -1054,7 +1064,7 @@ async function run6(argv) {
   const bad = checks.filter((c2) => c2.ok === false).length;
   const warn = checks.filter((c2) => c2.ok === "warn").length;
   if (bad) err(`  ${red(`${bad} problem(s)`)}${warn ? dim(` \xB7 ${warn} warning(s)`) : ""}`);
-  else if (warn) err(`  ${yellow(`${warn} warning(s)`)} ${dim("\u2014 guard is working")}`);
+  else if (warn) err(`  ${yellow(`${warn} warning(s)`)} ${dim("- guard is working")}`);
   else err(`  ${green("all good")}`);
   return bad ? 1 : 0;
 }
@@ -1155,7 +1165,7 @@ async function run7(argv) {
     } catch {
     }
   };
-  if (!json) err(`  ${c.dim}watching guard stream \u2014 Ctrl+C to stop${c.reset}`);
+  if (!json) err(`  ${c.dim}watching guard stream - Ctrl+C to stop${c.reset}`);
   pollLocal();
   await pollCloud();
   first = false;
@@ -1166,14 +1176,12 @@ async function run7(argv) {
 }
 
 // src/commands/alerts.ts
-var USAGE6 = `${bold("solongate alerts")} \u2014 spike alerts (Telegram / email)
-
-  alerts list
-  alerts add --signal deny|dlp|ratelimit|any --threshold N --window S
-             (--email <a> | --telegram <chatId> | --slack <url>)
-  alerts remove <id>
-
-  Add --json for machine-readable output.`;
+var USAGE6 = usage("solongate alerts", "spike alerts (Telegram / email)", [
+  ["alerts list"],
+  ["alerts add --signal deny|dlp|ratelimit|any --threshold N --window S"],
+  ["             (--email <a> | --telegram <chatId> | --slack <url>)"],
+  ["alerts remove <id>"]
+]);
 async function run8(argv) {
   const { positionals, flags } = parse(argv);
   const sub = positionals[0] ?? "list";
@@ -1193,7 +1201,7 @@ async function run8(argv) {
           cyan(r.signal),
           `${r.threshold}`,
           `${r.windowSeconds}s`,
-          dim([...r.emails ?? [], ...(r.telegram ?? []).map((t) => "tg:" + t), ...(r.slackUrls ?? []).map(() => "slack")].join(" ") || "\u2014")
+          dim([...r.emails ?? [], ...(r.telegram ?? []).map((t) => "tg:" + t), ...(r.slackUrls ?? []).map(() => "slack")].join(" ") || "-")
         ])
       );
       return 0;
@@ -1227,13 +1235,11 @@ async function run8(argv) {
 }
 
 // src/commands/webhooks.ts
-var USAGE7 = `${bold("solongate webhooks")} \u2014 event webhooks
-
-  webhooks list
-  webhooks add --url <https://\u2026> [--events denials|allowed|all]
-  webhooks remove <id>
-
-  Add --json for machine-readable output.`;
+var USAGE7 = usage("solongate webhooks", "event webhooks", [
+  ["webhooks list"],
+  ["webhooks add --url <https://\u2026> [--events denials|allowed|all]"],
+  ["webhooks remove <id>"]
+]);
 async function run9(argv) {
   const { positionals, flags } = parse(argv);
   const sub = positionals[0] ?? "list";

package/dist/index.js

@@ -11326,6 +11326,28 @@ var init_tui = __esm({
 function printJson(value) {
   out(JSON.stringify(value, null, 2));
 }
+function usage(title, tagline, rows, footer = "Add --json for machine-readable output.") {
+  const W = 40;
+  const lines = ["", `  ${c.bold}${c.blue4}${title}${c.reset}  ${c.dim}${tagline}${c.reset}`, ""];
+  for (const [syntax, desc] of rows) {
+    if (!syntax) {
+      lines.push("");
+      continue;
+    }
+    if (desc === void 0) {
+      lines.push(`    ${c.cyan}${syntax}${c.reset}`);
+      continue;
+    }
+    if (syntax.length <= W) {
+      lines.push(`    ${c.cyan}${syntax}${c.reset}${" ".repeat(W - syntax.length)}${c.dim}${desc}${c.reset}`);
+    } else {
+      lines.push(`    ${c.cyan}${syntax}${c.reset}`);
+      lines.push(`    ${" ".repeat(W)}${c.dim}${desc}${c.reset}`);
+    }
+  }
+  if (footer) lines.push("", `  ${c.dim}${footer}${c.reset}`);
+  return lines.join("\n");
+}
 function decisionColor2(decision) {
   const d = decision.toUpperCase();
   if (d === "ALLOW") return green(d);
@@ -11445,7 +11467,7 @@ async function run(argv) {
           p.mode === "whitelist" ? green("whitelist") : "denylist",
           String(p.rules?.length ?? 0),
           `v${p.version}`,
-          dim(truncate3(p.created_by || "\u2014", 20))
+          dim(truncate3(p.created_by || "-", 20))
         ])
       );
       return 0;
@@ -11508,7 +11530,7 @@ async function run(argv) {
       }
       err("");
       err(`  Active: ${bold(a.policy.name)} ${dim(`(${a.policy.id})`)}  v${a.version}`);
-      err(`  matched by: ${cyan(a.matched_by ?? "\u2014")}   self-protection: ${a.self_protection_enabled ? green("on") : dim("off")}`);
+      err(`  matched by: ${cyan(a.matched_by ?? "-")}   self-protection: ${a.self_protection_enabled ? green("on") : dim("off")}`);
       const rl = a.security?.rateLimit;
       if (rl) err(`  rate limit: ${rl.perMinute}/min  ${rl.perHour}/h  ${rl.perDay}/day`);
       if (a.security?.dlpBlock) err(`  DLP block: ${a.security.dlpBlock.patterns.length} patterns`);
@@ -11563,7 +11585,7 @@ function printRules(rules) {
       String(r.priority),
       cyan(truncate3(r.toolPattern, 24)),
       dim(truncate3(r.id, 22)),
-      truncate3(r.description || "\u2014", 40)
+      truncate3(r.description || "-", 40)
     ])
   );
 }
@@ -11582,20 +11604,16 @@ var init_policy = __esm({
     init_api_client();
     init_args();
     init_format();
-    USAGE = `${bold("solongate policy")} \u2014 manage cloud policies
-
-  policy list                          List all policies
-  policy show <id> [--version N]       Show one policy (rules, mode)
-  policy rules <id>                    List a policy's rules
-  policy allow <id> --tool <p> [--command|--path|--url <val>]
-                                       Append an ALLOW rule
-  policy revoke <id> <ruleId>          Remove a rule
-  policy active                        Show the resolved active policy
-  policy activate <id> | --clear       Pin / unpin the active policy
-  policy dry-run <id|file.json> [--limit N] [--mode denylist|whitelist]
-                                       Replay recent traffic against a policy's rules
-
-  Add --json to any read command for machine-readable output.`;
+    USAGE = usage("solongate policy", "manage cloud policies", [
+      ["policy list", "list all policies"],
+      ["policy show <id> [--version N]", "show one policy (rules, mode)"],
+      ["policy rules <id>", "list a policy's rules"],
+      ["policy allow <id> --tool <p> [--command|--path|--url <val>]", "append an ALLOW rule"],
+      ["policy revoke <id> <ruleId>", "remove a rule"],
+      ["policy active", "show the resolved active policy"],
+      ["policy activate <id> | --clear", "pin / unpin the active policy"],
+      ["policy dry-run <id|file.json> [--limit N] [--mode denylist|whitelist]", "replay recent traffic against rules"]
+    ], "Add --json to any read command for machine-readable output.");
   }
 });
 
@@ -11668,13 +11686,11 @@ var init_ratelimit = __esm({
     init_api_client();
     init_args();
     init_format();
-    USAGE2 = `${bold("solongate ratelimit")} \u2014 request throttling
-
-  ratelimit show                       Current limits + change history
-  ratelimit set --minute N [--hour N] [--day N] [--mode off|detect|block]
-  ratelimit history                    Recent limit changes
-
-  Add --json for machine-readable output.`;
+    USAGE2 = usage("solongate ratelimit", "request throttling", [
+      ["ratelimit show", "current limits + change history"],
+      ["ratelimit set --minute N [--hour N] [--day N] [--mode off|detect|block]"],
+      ["ratelimit history", "recent limit changes"]
+    ]);
     modeColor2 = (m) => m === "block" ? green(m) : m === "detect" ? yellow(m) : dim(m);
   }
 });
@@ -11755,16 +11771,14 @@ var init_dlp = __esm({
     init_api_client();
     init_args();
     init_format();
-    USAGE3 = `${bold("solongate dlp")} \u2014 data-loss prevention
-
-  dlp show                             Current mode + enabled patterns
-  dlp mode <off|detect|block>          Set enforcement mode
-  dlp enable <pattern>                 Enable a built-in pattern
-  dlp disable <pattern>                Disable a built-in pattern
-  dlp add-custom --name X --re <regex> Add a custom pattern
-  dlp remove-custom <name>             Remove a custom pattern
-
-  Add --json for machine-readable output.`;
+    USAGE3 = usage("solongate dlp", "data-loss prevention", [
+      ["dlp show", "current mode + enabled patterns"],
+      ["dlp mode <off|detect|block>", "set enforcement mode"],
+      ["dlp enable <pattern>", "enable a built-in pattern"],
+      ["dlp disable <pattern>", "disable a built-in pattern"],
+      ["dlp add-custom --name X --re <regex>", "add a custom pattern"],
+      ["dlp remove-custom <name>", "remove a custom pattern"]
+    ]);
     modeColor3 = (m) => m === "block" ? green(m) : m === "detect" ? yellow(m) : dim(m);
   }
 });
@@ -11791,7 +11805,7 @@ async function run4(argv) {
             decisionColor2(a.decision),
             cyan(truncate3(a.tool_name, 24)),
             dim(a.trust_level),
-            String(a.evaluation_time_ms ?? "\u2014"),
+            String(a.evaluation_time_ms ?? "-"),
             dim(a.created_at)
           ])
         );
@@ -11822,8 +11836,8 @@ async function run4(argv) {
           bold(String(r.current)),
           dim(String(r.previous)),
           r.is_new ? green("NEW") : r.spike ? red(`+${r.delta}`) : String(r.delta),
-          cyan(truncate3(r.rule_id ?? "\u2014", 22)),
-          truncate3(r.reason ?? r.last_tool ?? "\u2014", 36)
+          cyan(truncate3(r.rule_id ?? "-", 22)),
+          truncate3(r.reason ?? r.last_tool ?? "-", 36)
         ])
       );
       return 0;
@@ -11839,13 +11853,11 @@ var init_stats2 = __esm({
     init_api_client();
     init_args();
     init_format();
-    USAGE4 = `${bold("solongate stats")} \u2014 traffic & security stats
-
-  stats                                Overview (totals, recent activity)
-  stats timeseries [--period 24h|7d|30d|all]
-  stats drift [--days N]               Denials rising/falling vs previous window
-
-  Add --json for machine-readable output.`;
+    USAGE4 = usage("solongate stats", "traffic & security stats", [
+      ["stats", "overview (totals, recent activity)"],
+      ["stats timeseries [--period 24h|7d|30d|all]"],
+      ["stats drift [--days N]", "denials rising/falling vs previous window"]
+    ]);
   }
 });
 
@@ -11892,8 +11904,8 @@ async function run5(argv) {
     res.entries.map((e) => [
       decisionColor2(e.decision),
       cyan(truncate3(e.tool_name, 22)),
-      dim(truncate3(e.agent_name ?? "\u2014", 16)),
-      truncate3(e.reason ?? "\u2014", 30),
+      dim(truncate3(e.agent_name ?? "-", 16)),
+      truncate3(e.reason ?? "-", 30),
       e.dlp_matches?.length ? red(String(e.dlp_matches.length)) : dim("0"),
       dim(e.created_at),
       dim(truncate3(e.id, 10))
@@ -11908,14 +11920,12 @@ var init_audit2 = __esm({
     init_api_client();
     init_args();
     init_format();
-    USAGE5 = `${bold("solongate audit")} \u2014 audit log
-
-  audit [--filter ALLOW|DENY] [--tool <substr>] [--signal dlp|ratelimit]
-        [--search <text>] [--agent-name <name>] [--limit N]
-  audit whitelist <logId> [--scope exact|tool]
-                                       Turn a denied call into an ALLOW rule
-
-  Add --json for machine-readable output.`;
+    USAGE5 = usage("solongate audit", "audit log", [
+      ["audit [--filter ALLOW|DENY] [--tool <substr>] [--signal dlp|ratelimit]"],
+      ["      [--search <text>] [--agent-name <name>] [--limit N]"],
+      ["audit whitelist <logId> [--scope exact|tool]", "turn a denied call into an ALLOW rule"],
+      ["audit block <logId> [--scope exact|tool]", "turn a call into a DENY rule"]
+    ]);
   }
 });
 
@@ -11937,7 +11947,7 @@ async function runAgents(argv) {
       a.denied_calls ? red(String(a.denied_calls)) : dim("0"),
       a.dlp_events ? red(String(a.dlp_events)) : dim("0"),
       `${a.trust_score}`,
-      dim(truncate3(a.character || "\u2014", 22))
+      dim(truncate3(a.character || "-", 22))
     ])
   );
   return 0;
@@ -11953,7 +11963,7 @@ async function runAgent(argv) {
   err(`  ${bold(a.agent_id)}   status: ${statusColor(String(a.status))}`);
   const base = a.baseline;
   if (base) {
-    err(`  ${dim(base.character ?? "")}   trust ${bold(String(base.trustScore ?? "\u2014"))}/100   deny-rate ${(Number(base.denyRate ?? 0) * 100).toFixed(0)}%`);
+    err(`  ${dim(base.character ?? "")}   trust ${bold(String(base.trustScore ?? "-"))}/100   deny-rate ${(Number(base.denyRate ?? 0) * 100).toFixed(0)}%`);
   }
   const feed = a.recent_feed ?? [];
   if (feed.length) {
@@ -11963,7 +11973,7 @@ async function runAgent(argv) {
       feed.slice(0, 15).map((f) => [
         f.decision === "ALLOW" ? green("ALLOW") : red(String(f.decision)),
         cyan(truncate3(String(f.tool), 22)),
-        truncate3(String(f.reason ?? "\u2014"), 30),
+        truncate3(String(f.reason ?? "-"), 30),
         dim(String(f.created_at))
       ])
     );
@@ -11990,7 +12000,7 @@ async function run6(argv) {
   const json = flagBool(flags, "json");
   const checks = [];
   if (!isAuthenticated()) {
-    checks.push({ name: "login", ok: false, detail: "not logged in \u2014 run `solongate`, add your account in the Accounts panel" });
+    checks.push({ name: "login", ok: false, detail: "not logged in - run `solongate`, add your account in the Accounts panel" });
   } else {
     const { apiUrl } = resolveCredentials();
     checks.push({ name: "login", ok: true, detail: `paired \xB7 ${apiUrl}` });
@@ -11999,7 +12009,7 @@ async function run6(argv) {
       if (active2.policy) {
         checks.push({ name: "active policy", ok: true, detail: `${active2.policy.name} v${active2.version} \xB7 ${active2.policy.mode ?? "denylist"} \xB7 matched by ${active2.matched_by}` });
       } else {
-        checks.push({ name: "active policy", ok: "warn", detail: "no policy resolves \u2014 every call falls back to default" });
+        checks.push({ name: "active policy", ok: "warn", detail: "no policy resolves - every call falls back to default" });
       }
       const sec = active2.security;
       checks.push({ name: "rate limit", ok: sec?.rateLimit ? true : "warn", detail: sec?.rateLimit ? `${sec.rateLimit.perMinute}/min` : "off" });
@@ -12019,7 +12029,7 @@ async function run6(argv) {
     const ageMin = (Date.now() - st.mtimeMs) / 6e4;
     checks.push({ name: "local logs", ok: true, detail: `on \xB7 ${(st.size / 1024).toFixed(0)}KB \xB7 last write ${ageMin < 1 ? "just now" : Math.round(ageMin) + "m ago"}` });
   } else {
-    checks.push({ name: "local logs", ok: "warn", detail: "off (logs go to cloud) \u2014 enable in dashboard \u2192 Settings" });
+    checks.push({ name: "local logs", ok: "warn", detail: "off (logs go to cloud) - enable in dashboard \u2192 Settings" });
   }
   if (json) return printJson(checks), checks.some((c2) => c2.ok === false) ? 1 : 0;
   err("");
@@ -12033,7 +12043,7 @@ async function run6(argv) {
   const bad = checks.filter((c2) => c2.ok === false).length;
   const warn = checks.filter((c2) => c2.ok === "warn").length;
   if (bad) err(`  ${red(`${bad} problem(s)`)}${warn ? dim(` \xB7 ${warn} warning(s)`) : ""}`);
-  else if (warn) err(`  ${yellow(`${warn} warning(s)`)} ${dim("\u2014 guard is working")}`);
+  else if (warn) err(`  ${yellow(`${warn} warning(s)`)} ${dim("- guard is working")}`);
   else err(`  ${green("all good")}`);
   return bad ? 1 : 0;
 }
@@ -12141,7 +12151,7 @@ async function run7(argv) {
     } catch {
     }
   };
-  if (!json) err(`  ${c.dim}watching guard stream \u2014 Ctrl+C to stop${c.reset}`);
+  if (!json) err(`  ${c.dim}watching guard stream - Ctrl+C to stop${c.reset}`);
   pollLocal();
   await pollCloud();
   first = false;
@@ -12184,7 +12194,7 @@ async function run8(argv) {
           cyan(r.signal),
           `${r.threshold}`,
           `${r.windowSeconds}s`,
-          dim([...r.emails ?? [], ...(r.telegram ?? []).map((t) => "tg:" + t), ...(r.slackUrls ?? []).map(() => "slack")].join(" ") || "\u2014")
+          dim([...r.emails ?? [], ...(r.telegram ?? []).map((t) => "tg:" + t), ...(r.slackUrls ?? []).map(() => "slack")].join(" ") || "-")
         ])
       );
       return 0;
@@ -12223,14 +12233,12 @@ var init_alerts = __esm({
     init_api_client();
     init_args();
     init_format();
-    USAGE6 = `${bold("solongate alerts")} \u2014 spike alerts (Telegram / email)
-
-  alerts list
-  alerts add --signal deny|dlp|ratelimit|any --threshold N --window S
-             (--email <a> | --telegram <chatId> | --slack <url>)
-  alerts remove <id>
-
-  Add --json for machine-readable output.`;
+    USAGE6 = usage("solongate alerts", "spike alerts (Telegram / email)", [
+      ["alerts list"],
+      ["alerts add --signal deny|dlp|ratelimit|any --threshold N --window S"],
+      ["             (--email <a> | --telegram <chatId> | --slack <url>)"],
+      ["alerts remove <id>"]
+    ]);
   }
 });
 
@@ -12277,13 +12285,11 @@ var init_webhooks = __esm({
     init_api_client();
     init_args();
     init_format();
-    USAGE7 = `${bold("solongate webhooks")} \u2014 event webhooks
-
-  webhooks list
-  webhooks add --url <https://\u2026> [--events denials|allowed|all]
-  webhooks remove <id>
-
-  Add --json for machine-readable output.`;
+    USAGE7 = usage("solongate webhooks", "event webhooks", [
+      ["webhooks list"],
+      ["webhooks add --url <https://\u2026> [--events denials|allowed|all]"],
+      ["webhooks remove <id>"]
+    ]);
   }
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.82.24",
+  "version": "0.82.25",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {