@solongate/proxy 0.82.39 → 0.82.41

package/dist/tui/index.js

@@ -2359,8 +2359,7 @@ function PoliciesPanel({ focused }) {
             { header: "ON", width: 2 },
             { header: "EFFECT", width: 7 },
             { header: "PRIO", width: 4 },
-            { header: "TOOL", width: 12 },
-            { header: "DESCRIPTION", width: 30 },
+            { header: "DESCRIPTION", width: 38 },
             { header: "CONSTRAINTS", width: 14 }
           ],
           rows: rWin.map((r, wi) => {
@@ -2370,8 +2369,7 @@ function PoliciesPanel({ focused }) {
               { value: r.enabled ? "\u25CF" : "\u25CB", color: r.enabled ? theme.ok : theme.dim },
               { value: r.effect, color: r.effect === "ALLOW" ? theme.ok : theme.bad, dim: !r.enabled },
               { value: String(r.priority), dim: true },
-              { value: truncate(r.toolPattern, 12), color: theme.accent, dim: !r.enabled },
-              { value: truncate(r.description || "-", 30), dim: !r.enabled },
+              { value: truncate(r.description || "-", 38), dim: !r.enabled },
               { value: ruleSummary(r) || "-", dim: true }
             ];
           })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.82.39",
+  "version": "0.82.41",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {

package/dist/pull-push.d.ts

@@ -1,17 +0,0 @@
-#!/usr/bin/env node
-/**
- * solongate-proxy pull  — Pull a policy from dashboard to local file
- * solongate-proxy push  — Push a local policy file to dashboard
- * solongate-proxy list  — List all policies with details
- *
- * Usage:
- *   solongate-proxy list
- *   solongate-proxy list --policy-id <ID>
- *   solongate-proxy pull --policy-id <ID>
- *   solongate-proxy push --policy-id <ID>
- *   solongate-proxy pull --policy-id <ID> --file my-policy.json
- *
- * The --policy-id flag determines WHICH cloud policy to work with.
- * API key is read from .env file (SOLONGATE_API_KEY) or environment variable.
- */
-export {};

package/dist/pull-push.js

@@ -1,358 +0,0 @@
-#!/usr/bin/env node
-
-// src/pull-push.ts
-import { readFileSync as readFileSync2, writeFileSync, existsSync as existsSync2 } from "fs";
-import { resolve as resolve2 } from "path";
-
-// src/config.ts
-import { readFileSync, existsSync } from "fs";
-import { appendFile } from "fs/promises";
-import { resolve, join } from "path";
-import { homedir } from "os";
-async function fetchCloudPolicy(apiKey, apiUrl, policyId) {
-  let resolvedId = policyId;
-  if (!resolvedId) {
-    const listRes = await fetch(`${apiUrl}/api/v1/policies`, {
-      headers: { "Authorization": `Bearer ${apiKey}` },
-      signal: AbortSignal.timeout(1e4)
-    });
-    if (!listRes.ok) {
-      const body = await listRes.text().catch(() => "");
-      throw new Error(`Failed to list policies from cloud (${listRes.status}): ${body}`);
-    }
-    const listData = await listRes.json();
-    const policies = listData.policies ?? [];
-    if (policies.length === 0) {
-      throw new Error("No policies found in cloud. Create one in the dashboard first.");
-    }
-    resolvedId = policies[0].id;
-  }
-  const url = `${apiUrl}/api/v1/policies/${resolvedId}`;
-  const res = await fetch(url, {
-    headers: { "Authorization": `Bearer ${apiKey}` },
-    signal: AbortSignal.timeout(1e4)
-  });
-  if (!res.ok) {
-    const body = await res.text().catch(() => "");
-    throw new Error(`Failed to fetch policy from cloud (${res.status}): ${body}`);
-  }
-  const data = await res.json();
-  return {
-    id: String(data.id ?? "cloud"),
-    name: String(data.name ?? "Cloud Policy"),
-    description: String(data.description ?? ""),
-    version: Number(data._version ?? 1),
-    rules: data.rules ?? [],
-    createdAt: String(data._created_at ?? ""),
-    updatedAt: ""
-  };
-}
-var AUDIT_LOG_BACKUP_PATH = resolve(".solongate-audit-backup.jsonl");
-
-// src/pull-push.ts
-var log = (...args) => process.stderr.write(`${args.map(String).join(" ")}
-`);
-var dim = (s) => `\x1B[2m${s}\x1B[0m`;
-var bold = (s) => `\x1B[1m${s}\x1B[0m`;
-var green = (s) => `\x1B[32m${s}\x1B[0m`;
-var red = (s) => `\x1B[31m${s}\x1B[0m`;
-var yellow = (s) => `\x1B[33m${s}\x1B[0m`;
-var cyan = (s) => `\x1B[36m${s}\x1B[0m`;
-var magenta = (s) => `\x1B[35m${s}\x1B[0m`;
-function loadEnv() {
-  if (process.env.SOLONGATE_API_KEY) return;
-  const envPath = resolve2(".env");
-  if (!existsSync2(envPath)) return;
-  try {
-    const content = readFileSync2(envPath, "utf-8");
-    for (const line of content.split("\n")) {
-      const trimmed = line.trim();
-      if (!trimmed || trimmed.startsWith("#")) continue;
-      const eq = trimmed.indexOf("=");
-      if (eq === -1) continue;
-      const key = trimmed.slice(0, eq).trim();
-      const val = trimmed.slice(eq + 1).trim().replace(/^["']|["']$/g, "");
-      if (key === "SOLONGATE_API_KEY") {
-        process.env.SOLONGATE_API_KEY = val;
-        return;
-      }
-    }
-  } catch {
-  }
-}
-function parseCliArgs() {
-  loadEnv();
-  const args = process.argv.slice(2);
-  const command = args[0];
-  let apiKey = process.env.SOLONGATE_API_KEY || "";
-  let file = "policy.json";
-  let policyId;
-  for (let i = 1; i < args.length; i++) {
-    switch (args[i]) {
-      case "--api-key":
-        apiKey = args[++i];
-        break;
-      case "--policy":
-      case "--output":
-      case "--file":
-      case "-f":
-      case "-o":
-        file = args[++i];
-        break;
-      case "--policy-id":
-      case "--id":
-        policyId = args[++i];
-        break;
-    }
-  }
-  if (!apiKey) {
-    log(red("ERROR: API key not found."));
-    log("");
-    log("Set it in .env file:");
-    log("  SOLONGATE_API_KEY=sg_live_...");
-    log("");
-    log("Or pass via environment:");
-    log(`  SOLONGATE_API_KEY=sg_live_... solongate-proxy ${command}`);
-    process.exit(1);
-  }
-  if (!apiKey.startsWith("sg_live_")) {
-    log(red("ERROR: Pull/push/list requires a live API key (sg_live_...)."));
-    process.exit(1);
-  }
-  return { command, apiKey, file: resolve2(file), policyId };
-}
-var API_URL = "https://api.solongate.com";
-async function listPolicies(apiKey) {
-  const res = await fetch(`${API_URL}/api/v1/policies`, {
-    headers: { "Authorization": `Bearer ${apiKey}` }
-  });
-  if (!res.ok) throw new Error(`Failed to list policies (${res.status})`);
-  const data = await res.json();
-  return data.policies ?? [];
-}
-async function list(apiKey, policyId) {
-  const policies = await listPolicies(apiKey);
-  if (policies.length === 0) {
-    log(yellow("No policies found. Create one in the dashboard first."));
-    log(dim("  https://dashboard.solongate.com/policies"));
-    return;
-  }
-  if (policyId) {
-    const match = policies.find((p) => p.id === policyId);
-    if (!match) {
-      log(red(`Policy not found: ${policyId}`));
-      log("");
-      log("Available policies:");
-      for (const p of policies) {
-        log(`  ${dim("\u2022")} ${p.id}`);
-      }
-      process.exit(1);
-    }
-    const full = await fetchCloudPolicy(apiKey, API_URL, policyId);
-    printPolicyDetail(full);
-    return;
-  }
-  log("");
-  log(bold(`  Policies (${policies.length})`));
-  log(dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-  log("");
-  const fullPolicies = await Promise.all(
-    policies.map(
-      (p) => fetchCloudPolicy(apiKey, API_URL, p.id).then((full) => ({ policy: p, rules: full.rules })).catch(() => ({ policy: p, rules: [] }))
-    )
-  );
-  for (const { policy, rules } of fullPolicies) {
-    printPolicySummary(policy, [...rules]);
-  }
-  log(dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-  log("");
-  log(`  ${dim("View details:")}  solongate-proxy list --policy-id <ID>`);
-  log(`  ${dim("Pull policy:")}   solongate-proxy pull --policy-id <ID>`);
-  log(`  ${dim("Push policy:")}   solongate-proxy push --policy-id <ID>`);
-  log("");
-}
-function printPolicySummary(p, rules) {
-  const ruleCount = rules.length;
-  const allowCount = rules.filter((r) => r.effect === "ALLOW").length;
-  const denyCount = rules.filter((r) => r.effect === "DENY").length;
-  log(`  ${cyan(p.id)}`);
-  log(`    ${bold(p.name)}  ${dim(`v${p.version ?? "?"}`)}`);
-  log(`    ${dim("Rules:")} ${ruleCount}  ${green(`${allowCount} ALLOW`)}  ${red(`${denyCount} DENY`)}`);
-  if (p.created_at) {
-    log(`    ${dim("Updated:")} ${new Date(p.created_at).toLocaleString()}`);
-  }
-  log("");
-}
-function printPolicyDetail(policy) {
-  log("");
-  log(bold(`  ${policy.name}`));
-  log(`  ${dim("ID:")} ${cyan(policy.id)}  ${dim("Version:")} ${policy.version}  ${dim("Rules:")} ${policy.rules.length}`);
-  log("");
-  if (policy.rules.length === 0) {
-    log(yellow("  No rules defined."));
-    log("");
-    return;
-  }
-  log(dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-  for (const rule of policy.rules) {
-    const effectColor = rule.effect === "ALLOW" ? green : red;
-    log("");
-    log(`  ${effectColor(rule.effect.padEnd(5))}  ${bold(rule.toolPattern)}  ${dim(`P:${rule.priority}`)}`);
-    if (rule.description) {
-      log(`         ${dim(rule.description)}`);
-    }
-    log(`         ${dim(`${rule.permission}  trust:${rule.minimumTrustLevel || "UNTRUSTED"}`)}`);
-    if (rule.pathConstraints) {
-      const pc = rule.pathConstraints;
-      if (pc.rootDirectory) log(`         ${magenta("ROOT")} ${pc.rootDirectory}`);
-      if (pc.allowed?.length) log(`         ${green("PATHS")} ${pc.allowed.join(", ")}`);
-      if (pc.denied?.length) log(`         ${red("DENY")}  ${pc.denied.join(", ")}`);
-    }
-    if (rule.commandConstraints) {
-      const cc = rule.commandConstraints;
-      if (cc.allowed?.length) log(`         ${green("CMDS")}  ${cc.allowed.join(", ")}`);
-      if (cc.denied?.length) log(`         ${red("DENY")}  ${cc.denied.join(", ")}`);
-    }
-    if (rule.filenameConstraints) {
-      const fc = rule.filenameConstraints;
-      if (fc.allowed?.length) log(`         ${green("FILES")} ${fc.allowed.join(", ")}`);
-      if (fc.denied?.length) log(`         ${red("DENY")}  ${fc.denied.join(", ")}`);
-    }
-    if (rule.urlConstraints) {
-      const uc = rule.urlConstraints;
-      if (uc.allowed?.length) log(`         ${green("URLS")}  ${uc.allowed.join(", ")}`);
-      if (uc.denied?.length) log(`         ${red("DENY")}  ${uc.denied.join(", ")}`);
-    }
-  }
-  log("");
-  log(dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-  log("");
-}
-async function pull(apiKey, file, policyId) {
-  if (!policyId) {
-    const policies = await listPolicies(apiKey);
-    if (policies.length === 0) {
-      log(red("No policies found. Create one in the dashboard first."));
-      process.exit(1);
-    }
-    if (policies.length === 1) {
-      policyId = policies[0].id;
-      log(dim(`Auto-selecting only policy: ${policyId}`));
-    } else {
-      log(yellow(`Found ${policies.length} policies:`));
-      log("");
-      for (const p of policies) {
-        log(`  ${cyan(p.id)}  ${p.name}  ${dim(`v${p.version ?? "?"}`)}`);
-      }
-      log("");
-      log("Use --policy-id <ID> to specify which one to pull.");
-      process.exit(1);
-    }
-  }
-  log(`Pulling ${cyan(policyId)} from dashboard...`);
-  const policy = await fetchCloudPolicy(apiKey, API_URL, policyId);
-  const { id: _id, ...policyWithoutId } = policy;
-  const json = JSON.stringify(policyWithoutId, null, 2) + "\n";
-  writeFileSync(file, json, "utf-8");
-  log("");
-  log(green("  Saved to: ") + file);
-  log(`  ${dim("Name:")}    ${policy.name}`);
-  log(`  ${dim("Version:")} ${policy.version}`);
-  log(`  ${dim("Rules:")}   ${policy.rules.length}`);
-  log("");
-  log(dim("The policy file does not contain an ID."));
-  log(dim("Use --policy-id to specify the target when pushing/pulling."));
-  log("");
-}
-async function push(apiKey, file, policyId) {
-  if (!existsSync2(file)) {
-    log(red(`ERROR: File not found: ${file}`));
-    process.exit(1);
-  }
-  if (!policyId) {
-    log(red("ERROR: --policy-id is required for push."));
-    log("");
-    log("This determines which cloud policy to update.");
-    log("");
-    log("Usage:");
-    log("  solongate-proxy push --policy-id my-policy");
-    log("  solongate-proxy push --policy-id my-policy --file custom.json");
-    log("");
-    log("List your policies:");
-    log("  solongate-proxy list");
-    process.exit(1);
-  }
-  const content = readFileSync2(file, "utf-8");
-  let policy;
-  try {
-    policy = JSON.parse(content);
-  } catch {
-    log(red(`ERROR: Invalid JSON in ${file}`));
-    process.exit(1);
-  }
-  log(`Pushing to ${cyan(policyId)}...`);
-  log(`  ${dim("File:")}  ${file}`);
-  log(`  ${dim("Name:")}  ${policy.name || "Unnamed"}`);
-  log(`  ${dim("Rules:")} ${(policy.rules || []).length}`);
-  const checkRes = await fetch(`${API_URL}/api/v1/policies/${policyId}`, {
-    headers: { "Authorization": `Bearer ${apiKey}` }
-  });
-  const method = checkRes.ok ? "PUT" : "POST";
-  const url = checkRes.ok ? `${API_URL}/api/v1/policies/${policyId}` : `${API_URL}/api/v1/policies`;
-  const res = await fetch(url, {
-    method,
-    headers: {
-      "Authorization": `Bearer ${apiKey}`,
-      "Content-Type": "application/json"
-    },
-    body: JSON.stringify({
-      id: policyId,
-      name: policy.name || "Local Policy",
-      description: policy.description || "Pushed from local file",
-      version: policy.version || 1,
-      rules: policy.rules || []
-    })
-  });
-  if (!res.ok) {
-    const body = await res.text().catch(() => "");
-    log(red(`ERROR: Push failed (${res.status}): ${body}`));
-    process.exit(1);
-  }
-  const data = await res.json();
-  log("");
-  log(green(`  Pushed to cloud: v${data._version ?? "created"}`));
-  log(`  ${dim("Policy ID:")} ${policyId}`);
-  log(`  ${dim("Method:")}    ${method === "PUT" ? "Updated existing" : "Created new"}`);
-  log("");
-}
-async function main() {
-  const { command, apiKey, file, policyId } = parseCliArgs();
-  try {
-    if (command === "pull") {
-      await pull(apiKey, file, policyId);
-    } else if (command === "push") {
-      await push(apiKey, file, policyId);
-    } else if (command === "list" || command === "ls") {
-      await list(apiKey, policyId);
-    } else {
-      log(red(`Unknown command: ${command}`));
-      log("");
-      log(bold("Usage:"));
-      log("  solongate-proxy list                          List all policies");
-      log("  solongate-proxy list --policy-id <ID>         Show policy details");
-      log("  solongate-proxy pull --policy-id <ID>         Pull policy to local file");
-      log("  solongate-proxy push --policy-id <ID>         Push local file to cloud");
-      log("");
-      log(bold("Flags:"));
-      log("  --policy-id, --id <ID>    Cloud policy ID (required for push)");
-      log("  --file, -f <path>         Local file path (default: policy.json)");
-      log("  --api-key <key>           API key (or set SOLONGATE_API_KEY)");
-      log("");
-      process.exit(1);
-    }
-  } catch (err) {
-    log(red(`ERROR: ${err instanceof Error ? err.message : String(err)}`));
-    process.exit(1);
-  }
-}
-main();