@solongate/proxy 0.82.37 → 0.82.38

package/dist/commands/index.js

@@ -525,6 +525,7 @@ var USAGE = usage("solongate policy", "manage cloud policies", [
   ["policy list", "list all policies"],
   ["policy show <id>", "show one policy (rules, mode)"],
   ["policy allow <id> --tool <p> [--command|--path|--url <val>]", "append an ALLOW rule"],
+  ["policy deny  <id> --tool <p> [--command|--path|--url <val>]", "append a DENY rule"],
   ["policy revoke <id> <ruleId>", "remove a rule"],
   ["policy active", "show the resolved active policy"],
   ["policy activate <id> | --clear", "pin / unpin the active policy"],
@@ -547,13 +548,12 @@ async function run(argv) {
         return 0;
       }
       table(
-        ["ID", "NAME", "MODE", "RULES", "VER", "UPDATED BY"],
+        ["ID", "NAME", "MODE", "RULES", "UPDATED BY"],
         policies.map((p) => [
           cyan(p.id),
           truncate(p.name, 28),
           p.mode === "whitelist" ? green("whitelist") : "denylist",
           String(p.rules?.length ?? 0),
-          `v${p.version}`,
           dim(truncate(p.created_by || "-", 20))
         ])
       );
@@ -565,16 +565,18 @@ async function run(argv) {
       const p = await api.policies.get(id);
       if (json) return printJson(p), 0;
       err("");
-      err(`  ${bold(p.name)} ${dim(`(${p.id})`)}  v${p._version}`);
+      err(`  ${bold(p.name)} ${dim(`(${p.id})`)}`);
       if (p.description) err(`  ${dim(p.description)}`);
       err(`  mode: ${p.mode === "whitelist" ? green("whitelist") : "denylist"}   rules: ${p.rules.length}`);
       err("");
       printRules(p.rules);
       return 0;
     }
-    case "allow": {
+    case "allow":
+    case "deny": {
+      const effect = sub === "allow" ? "ALLOW" : "DENY";
       const id = positionals[1];
-      if (!id) return err("  Usage: policy allow <id> --tool <pattern> [--command|--path|--url <val>]"), 1;
+      if (!id) return err(`  Usage: policy ${sub} <id> --tool <pattern> [--command|--path|--url <val>]`), 1;
       const toolPattern = flagStr(flags, "tool") ?? "*";
       let kind = "tool";
       let value;
@@ -585,10 +587,10 @@ async function run(argv) {
           value = v;
         }
       }
-      const res = await api.policies.addRule(id, { toolPattern, kind, value });
+      const res = await api.policies.addRule(id, { toolPattern, kind, value, effect });
       if (json) return printJson(res), 0;
-      if (res.deduped) err(green("  \u2713 ") + dim("Equivalent ALLOW rule already present."));
-      else err(green(`  \u2713 Rule added`) + dim(` (${res.rule?.id}) \u2192 v${res.policy_version}`));
+      if (res.deduped) err(green("  \u2713 ") + dim(`Equivalent ${effect} rule already present.`));
+      else err(green(`  \u2713 ${effect} rule added`) + dim(` (${res.rule?.id})`));
       return 0;
     }
     case "revoke": {
@@ -597,7 +599,7 @@ async function run(argv) {
       if (!id || !ruleId) return err("  Usage: policy revoke <id> <ruleId>"), 1;
       const res = await api.policies.revokeRule(id, ruleId);
       if (json) return printJson(res), 0;
-      err(green(`  \u2713 Revoked ${ruleId}`) + dim(` \u2192 v${res.policy_version}`));
+      err(green(`  \u2713 Revoked ${ruleId}`));
       return 0;
     }
     case "active": {
@@ -608,7 +610,7 @@ async function run(argv) {
         return 0;
       }
       err("");
-      err(`  Active: ${bold(a.policy.name)} ${dim(`(${a.policy.id})`)}  v${a.version}`);
+      err(`  Active: ${bold(a.policy.name)} ${dim(`(${a.policy.id})`)}`);
       err(`  matched by: ${cyan(a.matched_by ?? "-")}   self-protection: ${a.self_protection_enabled ? green("on") : dim("off")}`);
       const rl = a.security?.rateLimit;
       if (rl) err(`  rate limit: ${rl.perMinute}/min  ${rl.perHour}/h  ${rl.perDay}/day`);

package/dist/index.js

@@ -11727,13 +11727,12 @@ async function run(argv) {
         return 0;
       }
       table(
-        ["ID", "NAME", "MODE", "RULES", "VER", "UPDATED BY"],
+        ["ID", "NAME", "MODE", "RULES", "UPDATED BY"],
         policies.map((p) => [
           cyan(p.id),
           truncate3(p.name, 28),
           p.mode === "whitelist" ? green("whitelist") : "denylist",
           String(p.rules?.length ?? 0),
-          `v${p.version}`,
           dim(truncate3(p.created_by || "-", 20))
         ])
       );
@@ -11745,16 +11744,18 @@ async function run(argv) {
       const p = await api.policies.get(id);
       if (json) return printJson(p), 0;
       err("");
-      err(`  ${bold(p.name)} ${dim(`(${p.id})`)}  v${p._version}`);
+      err(`  ${bold(p.name)} ${dim(`(${p.id})`)}`);
       if (p.description) err(`  ${dim(p.description)}`);
       err(`  mode: ${p.mode === "whitelist" ? green("whitelist") : "denylist"}   rules: ${p.rules.length}`);
       err("");
       printRules(p.rules);
       return 0;
     }
-    case "allow": {
+    case "allow":
+    case "deny": {
+      const effect = sub === "allow" ? "ALLOW" : "DENY";
       const id = positionals[1];
-      if (!id) return err("  Usage: policy allow <id> --tool <pattern> [--command|--path|--url <val>]"), 1;
+      if (!id) return err(`  Usage: policy ${sub} <id> --tool <pattern> [--command|--path|--url <val>]`), 1;
       const toolPattern = flagStr(flags, "tool") ?? "*";
       let kind = "tool";
       let value;
@@ -11765,10 +11766,10 @@ async function run(argv) {
           value = v;
         }
       }
-      const res = await api.policies.addRule(id, { toolPattern, kind, value });
+      const res = await api.policies.addRule(id, { toolPattern, kind, value, effect });
       if (json) return printJson(res), 0;
-      if (res.deduped) err(green("  \u2713 ") + dim("Equivalent ALLOW rule already present."));
-      else err(green(`  \u2713 Rule added`) + dim(` (${res.rule?.id}) \u2192 v${res.policy_version}`));
+      if (res.deduped) err(green("  \u2713 ") + dim(`Equivalent ${effect} rule already present.`));
+      else err(green(`  \u2713 ${effect} rule added`) + dim(` (${res.rule?.id})`));
       return 0;
     }
     case "revoke": {
@@ -11777,7 +11778,7 @@ async function run(argv) {
       if (!id || !ruleId) return err("  Usage: policy revoke <id> <ruleId>"), 1;
       const res = await api.policies.revokeRule(id, ruleId);
       if (json) return printJson(res), 0;
-      err(green(`  \u2713 Revoked ${ruleId}`) + dim(` \u2192 v${res.policy_version}`));
+      err(green(`  \u2713 Revoked ${ruleId}`));
       return 0;
     }
     case "active": {
@@ -11788,7 +11789,7 @@ async function run(argv) {
         return 0;
       }
       err("");
-      err(`  Active: ${bold(a.policy.name)} ${dim(`(${a.policy.id})`)}  v${a.version}`);
+      err(`  Active: ${bold(a.policy.name)} ${dim(`(${a.policy.id})`)}`);
       err(`  matched by: ${cyan(a.matched_by ?? "-")}   self-protection: ${a.self_protection_enabled ? green("on") : dim("off")}`);
       const rl = a.security?.rateLimit;
       if (rl) err(`  rate limit: ${rl.perMinute}/min  ${rl.perHour}/h  ${rl.perDay}/day`);
@@ -11867,6 +11868,7 @@ var init_policy = __esm({
       ["policy list", "list all policies"],
       ["policy show <id>", "show one policy (rules, mode)"],
       ["policy allow <id> --tool <p> [--command|--path|--url <val>]", "append an ALLOW rule"],
+      ["policy deny  <id> --tool <p> [--command|--path|--url <val>]", "append a DENY rule"],
       ["policy revoke <id> <ruleId>", "remove a rule"],
       ["policy active", "show the resolved active policy"],
       ["policy activate <id> | --clear", "pin / unpin the active policy"],
@@ -16244,6 +16246,7 @@ function printHelp() {
   cmd("policy list", "list all policies");
   cmd("policy show <id>", "show one policy (rules, mode)");
   cmd("policy allow <id> --tool <p> [--command|--path|--url <val>]", "add an ALLOW rule");
+  cmd("policy deny <id> --tool <p> [--command|--path|--url <val>]", "add a DENY rule");
   cmd("policy revoke <id> <ruleId>", "remove a rule");
   cmd("policy activate <id> | --clear", "pin / unpin the active policy");
   cmd("policy active", "show the resolved active policy");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.82.37",
+  "version": "0.82.38",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {