@solongate/proxy 0.82.49 → 0.82.51

package/dist/index.js

@@ -9223,6 +9223,7 @@ function PoliciesPanel({ focused }) {
   const [editVal, setEditVal] = useState4("");
   const [status, setStatus] = useState4(null);
   const [pendingDel, setPendingDel] = useState4(null);
+  const [permCursor, setPermCursor] = useState4(0);
   const selected = policies[Math.min(pi, Math.max(0, policies.length - 1))];
   const detail = useLoader(() => selected ? api.policies.get(selected.id) : Promise.resolve(null), [selected?.id]);
   useEffect4(() => {
@@ -9365,7 +9366,7 @@ function PoliciesPanel({ focused }) {
         } else if (input === "m") {
           mutate(rules, mode === "denylist" ? "whitelist" : "denylist");
         } else if (input === "n") {
-          const nr = { id: `rule-${Date.now()}`, description: "", effect: "DENY", priority: 100, toolPattern: "*", minimumTrustLevel: "UNTRUSTED", enabled: true };
+          const nr = { id: `rule-${Date.now()}`, description: "", effect: "DENY", priority: 100, toolPattern: "*", minimumTrustLevel: "UNTRUSTED", enabled: true, commandConstraints: { denied: [] } };
           mutate([nr, ...rules]);
           setRi(0);
           setFi(0);
@@ -9393,13 +9394,21 @@ function PoliciesPanel({ focused }) {
         const dir = key.leftArrow ? -1 : 1;
         const nextT = CTYPES[(CTYPES.indexOf(currentCType(rule2)) + dir + CTYPES.length) % CTYPES.length];
         mutate(rules.map((r, i) => i === ri ? setCType(r, nextT) : r));
-      } else if (field.kind === "perms" && (input === "r" || input === "w" || input === "e" || input === "n")) {
-        const p = { r: "READ", w: "WRITE", e: "EXECUTE", n: "NETWORK" }[input];
+      } else if (field.kind === "perms" && key.leftArrow) {
+        setPermCursor((n) => (n + PERMS.length - 1) % PERMS.length);
+      } else if (field.kind === "perms" && key.rightArrow) {
+        setPermCursor((n) => (n + 1) % PERMS.length);
+      } else if (field.kind === "perms" && input === " ") {
+        const p = PERMS[permCursor % PERMS.length];
         mutate(rules.map((rr, i) => i === ri ? togglePerm(rr, p) : rr));
+      } else if (field.kind === "match" && input === "[") {
+        mutate(rules.map((rr, i) => i === ri ? toggleStar(rr, "left") : rr));
+      } else if (field.kind === "match" && input === "]") {
+        mutate(rules.map((rr, i) => i === ri ? toggleStar(rr, "right") : rr));
       } else if (field.kind === "priority" && (key.rightArrow || key.leftArrow)) {
         const d = key.rightArrow ? 1 : -1;
         mutate(rules.map((r, i) => i === ri ? { ...r, priority: Math.max(0, r.priority + d) } : r));
-      } else if (field.kind === "text" && key.return) {
+      } else if ((field.kind === "text" || field.kind === "match") && key.return) {
         setEditVal(field.get(rule2));
         setEditing(true);
       } else if (input === "s") void save();
@@ -9414,7 +9423,7 @@ function PoliciesPanel({ focused }) {
     const lWin = policies.slice(lStart, lStart + lBudget);
     const lAbove = lStart;
     const lBelow = Math.max(0, policies.length - (lStart + lBudget));
-    return /* @__PURE__ */ jsx4(DataView, { loading: list5.loading && !list5.data, error: list5.error, empty: !!list5.data && policies.length === 0, emptyText: "No policies.", children: /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
+    return /* @__PURE__ */ jsx4(DataView, { loading: list5.loading && !list5.data, error: list5.error, empty: !!list5.data && policies.length === 0 && creating === null, emptyText: "No policies yet \u2014 press n to create one.", children: /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
       /* @__PURE__ */ jsxs4(Box4, { children: [
         /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "active: " }),
         activeQ.loading && !activeQ.data ? /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "\u2026" }) : activeName ? /* @__PURE__ */ jsxs4(Fragment3, { children: [
@@ -9500,12 +9509,53 @@ function PoliciesPanel({ focused }) {
       /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: rule?.id ?? "" }),
       dirtyTag
     ] }),
-    /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "\u2191\u2193 field \xB7 enter edit text \xB7 space/\u2192 toggle \xB7 r/w/e/n perms \xB7 s save \xB7 \u2190 back" }),
+    /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "\u2191\u2193 field \xB7 enter edit \xB7 space toggle \xB7 \u2190\u2192 move/pick \xB7 [ ] wildcards \xB7 s save \xB7 \u2190 back" }),
     /* @__PURE__ */ jsx4(Box4, { marginTop: 1, flexDirection: "column", children: FIELDS.map((f, i) => {
-      const val = rule ? f.get(rule) : "";
       const active2 = i === fi;
+      const label = /* @__PURE__ */ jsx4(Text4, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + f.label.padEnd(13) });
+      if (f.kind === "perms" && rule) {
+        return /* @__PURE__ */ jsxs4(Box4, { children: [
+          label,
+          PERMS.map((p, pi2) => {
+            const on = permList(rule).includes(p);
+            const cur = active2 && pi2 === permCursor % PERMS.length;
+            return /* @__PURE__ */ jsxs4(Text4, { color: on ? theme.ok : theme.bad, inverse: cur, children: [
+              p,
+              pi2 < PERMS.length - 1 ? "  " : ""
+            ] }, p);
+          })
+        ] }, f.label);
+      }
+      if (f.kind === "match" && rule) {
+        if (active2 && editing) {
+          return /* @__PURE__ */ jsxs4(Box4, { children: [
+            label,
+            /* @__PURE__ */ jsx4(
+              TextInput3,
+              {
+                value: editVal,
+                onChange: setEditVal,
+                onSubmit: (v2) => {
+                  if (f.set) mutate(rules.map((r, idx) => idx === ri ? f.set(r, v2) : r));
+                  setEditing(false);
+                }
+              }
+            )
+          ] }, f.label);
+        }
+        const v = f.get(rule);
+        const lOn = starActive(rule, "left");
+        const rOn = starActive(rule, "right");
+        return /* @__PURE__ */ jsxs4(Box4, { children: [
+          label,
+          /* @__PURE__ */ jsx4(Text4, { color: lOn ? theme.ok : theme.dim, children: lOn ? "\u2731 " : "\xB7 " }),
+          /* @__PURE__ */ jsx4(Text4, { dimColor: !v, children: v || "\u2014" }),
+          /* @__PURE__ */ jsx4(Text4, { color: rOn ? theme.ok : theme.dim, children: rOn ? " \u2731" : " \xB7" })
+        ] }, f.label);
+      }
+      const val = rule ? f.get(rule) : "";
       return /* @__PURE__ */ jsxs4(Box4, { children: [
-        /* @__PURE__ */ jsx4(Text4, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + f.label.padEnd(13) }),
+        label,
         active2 && editing && f.kind === "text" ? /* @__PURE__ */ jsx4(
           TextInput3,
           {
@@ -9526,10 +9576,11 @@ function PoliciesPanel({ focused }) {
         )
       ] }, f.label);
     }) }),
+    /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "  * = wildcard (matches any run of chars). On Match: [ toggles a leading *, ] a trailing *  \xB7  e.g. *ping* matches any command containing ping" }),
     status ? /* @__PURE__ */ jsx4(Text4, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
   ] });
 }
-var CTYPES, CTYPE_GROUP, currentCType, clearConstraints, setCType, cValue, setCValue, migrateEffect, PERMS, permList, permIsAny, togglePerm, permDisplay, ruleHasValues, isBlanketRule, FIELDS;
+var CTYPES, CTYPE_GROUP, currentCType, clearConstraints, setCType, cValue, setCValue, matchItems, starActive, toggleStar, migrateEffect, PERMS, permList, permIsAny, togglePerm, permDisplay, ruleHasValues, isBlanketRule, FIELDS;
 var init_Policies = __esm({
   "src/tui/panels/Policies.tsx"() {
     "use strict";
@@ -9579,6 +9630,26 @@ var init_Policies = __esm({
       const listKey = r.effect === "ALLOW" ? "allowed" : "denied";
       return { ...r, [CTYPE_GROUP[t]]: { [listKey]: arr } };
     };
+    matchItems = (r) => {
+      const t = currentCType(r);
+      if (t === "none") return [];
+      const c2 = r[CTYPE_GROUP[t]];
+      return [...c2?.allowed ?? [], ...c2?.denied ?? []];
+    };
+    starActive = (r, side) => {
+      const items = matchItems(r);
+      return items.length > 0 && items.every((v) => side === "left" ? v.startsWith("*") : v.endsWith("*"));
+    };
+    toggleStar = (r, side) => {
+      const t = currentCType(r);
+      if (t === "none") return r;
+      const on = starActive(r, side);
+      const listKey = r.effect === "ALLOW" ? "allowed" : "denied";
+      const items = matchItems(r).map(
+        (v) => side === "left" ? on ? v.replace(/^\*+/, "") : "*" + v : on ? v.replace(/\*+$/, "") : v + "*"
+      );
+      return { ...r, [CTYPE_GROUP[t]]: { [listKey]: items } };
+    };
     migrateEffect = (r, nextEffect) => {
       const flipped = { ...r, effect: nextEffect };
       const t = currentCType(r);
@@ -9611,7 +9682,7 @@ var init_Policies = __esm({
       { label: "Permissions", kind: "perms", get: permDisplay },
       { label: "Priority", kind: "priority", get: (r) => String(r.priority) },
       { label: "Description", kind: "text", get: (r) => r.description ?? "", set: (r, v) => ({ ...r, description: v }) },
-      { label: "Match", kind: "text", get: cValue, set: setCValue }
+      { label: "Match", kind: "match", get: cValue, set: setCValue }
     ];
   }
 });

package/dist/tui/index.js

@@ -2460,6 +2460,26 @@ var setCValue = (r, val) => {
   const listKey = r.effect === "ALLOW" ? "allowed" : "denied";
   return { ...r, [CTYPE_GROUP[t]]: { [listKey]: arr } };
 };
+var matchItems = (r) => {
+  const t = currentCType(r);
+  if (t === "none") return [];
+  const c2 = r[CTYPE_GROUP[t]];
+  return [...c2?.allowed ?? [], ...c2?.denied ?? []];
+};
+var starActive = (r, side) => {
+  const items = matchItems(r);
+  return items.length > 0 && items.every((v) => side === "left" ? v.startsWith("*") : v.endsWith("*"));
+};
+var toggleStar = (r, side) => {
+  const t = currentCType(r);
+  if (t === "none") return r;
+  const on = starActive(r, side);
+  const listKey = r.effect === "ALLOW" ? "allowed" : "denied";
+  const items = matchItems(r).map(
+    (v) => side === "left" ? on ? v.replace(/^\*+/, "") : "*" + v : on ? v.replace(/\*+$/, "") : v + "*"
+  );
+  return { ...r, [CTYPE_GROUP[t]]: { [listKey]: items } };
+};
 var migrateEffect = (r, nextEffect) => {
   const flipped = { ...r, effect: nextEffect };
   const t = currentCType(r);
@@ -2492,7 +2512,7 @@ var FIELDS = [
   { label: "Permissions", kind: "perms", get: permDisplay },
   { label: "Priority", kind: "priority", get: (r) => String(r.priority) },
   { label: "Description", kind: "text", get: (r) => r.description ?? "", set: (r, v) => ({ ...r, description: v }) },
-  { label: "Match", kind: "text", get: cValue, set: setCValue }
+  { label: "Match", kind: "match", get: cValue, set: setCValue }
 ];
 function ruleSummary(r) {
   const bits = [];
@@ -2521,6 +2541,7 @@ function PoliciesPanel({ focused }) {
   const [editVal, setEditVal] = useState4("");
   const [status, setStatus] = useState4(null);
   const [pendingDel, setPendingDel] = useState4(null);
+  const [permCursor, setPermCursor] = useState4(0);
   const selected = policies[Math.min(pi, Math.max(0, policies.length - 1))];
   const detail = useLoader(() => selected ? api.policies.get(selected.id) : Promise.resolve(null), [selected?.id]);
   useEffect4(() => {
@@ -2663,7 +2684,7 @@ function PoliciesPanel({ focused }) {
         } else if (input === "m") {
           mutate(rules, mode === "denylist" ? "whitelist" : "denylist");
         } else if (input === "n") {
-          const nr = { id: `rule-${Date.now()}`, description: "", effect: "DENY", priority: 100, toolPattern: "*", minimumTrustLevel: "UNTRUSTED", enabled: true };
+          const nr = { id: `rule-${Date.now()}`, description: "", effect: "DENY", priority: 100, toolPattern: "*", minimumTrustLevel: "UNTRUSTED", enabled: true, commandConstraints: { denied: [] } };
           mutate([nr, ...rules]);
           setRi(0);
           setFi(0);
@@ -2691,13 +2712,21 @@ function PoliciesPanel({ focused }) {
         const dir = key.leftArrow ? -1 : 1;
         const nextT = CTYPES[(CTYPES.indexOf(currentCType(rule2)) + dir + CTYPES.length) % CTYPES.length];
         mutate(rules.map((r, i) => i === ri ? setCType(r, nextT) : r));
-      } else if (field.kind === "perms" && (input === "r" || input === "w" || input === "e" || input === "n")) {
-        const p = { r: "READ", w: "WRITE", e: "EXECUTE", n: "NETWORK" }[input];
+      } else if (field.kind === "perms" && key.leftArrow) {
+        setPermCursor((n) => (n + PERMS.length - 1) % PERMS.length);
+      } else if (field.kind === "perms" && key.rightArrow) {
+        setPermCursor((n) => (n + 1) % PERMS.length);
+      } else if (field.kind === "perms" && input === " ") {
+        const p = PERMS[permCursor % PERMS.length];
         mutate(rules.map((rr, i) => i === ri ? togglePerm(rr, p) : rr));
+      } else if (field.kind === "match" && input === "[") {
+        mutate(rules.map((rr, i) => i === ri ? toggleStar(rr, "left") : rr));
+      } else if (field.kind === "match" && input === "]") {
+        mutate(rules.map((rr, i) => i === ri ? toggleStar(rr, "right") : rr));
       } else if (field.kind === "priority" && (key.rightArrow || key.leftArrow)) {
         const d = key.rightArrow ? 1 : -1;
         mutate(rules.map((r, i) => i === ri ? { ...r, priority: Math.max(0, r.priority + d) } : r));
-      } else if (field.kind === "text" && key.return) {
+      } else if ((field.kind === "text" || field.kind === "match") && key.return) {
         setEditVal(field.get(rule2));
         setEditing(true);
       } else if (input === "s") void save();
@@ -2712,7 +2741,7 @@ function PoliciesPanel({ focused }) {
     const lWin = policies.slice(lStart, lStart + lBudget);
     const lAbove = lStart;
     const lBelow = Math.max(0, policies.length - (lStart + lBudget));
-    return /* @__PURE__ */ jsx4(DataView, { loading: list5.loading && !list5.data, error: list5.error, empty: !!list5.data && policies.length === 0, emptyText: "No policies.", children: /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
+    return /* @__PURE__ */ jsx4(DataView, { loading: list5.loading && !list5.data, error: list5.error, empty: !!list5.data && policies.length === 0 && creating === null, emptyText: "No policies yet \u2014 press n to create one.", children: /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
       /* @__PURE__ */ jsxs4(Box4, { children: [
         /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "active: " }),
         activeQ.loading && !activeQ.data ? /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "\u2026" }) : activeName ? /* @__PURE__ */ jsxs4(Fragment3, { children: [
@@ -2798,12 +2827,53 @@ function PoliciesPanel({ focused }) {
       /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: rule?.id ?? "" }),
       dirtyTag
     ] }),
-    /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "\u2191\u2193 field \xB7 enter edit text \xB7 space/\u2192 toggle \xB7 r/w/e/n perms \xB7 s save \xB7 \u2190 back" }),
+    /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "\u2191\u2193 field \xB7 enter edit \xB7 space toggle \xB7 \u2190\u2192 move/pick \xB7 [ ] wildcards \xB7 s save \xB7 \u2190 back" }),
     /* @__PURE__ */ jsx4(Box4, { marginTop: 1, flexDirection: "column", children: FIELDS.map((f, i) => {
-      const val = rule ? f.get(rule) : "";
       const active2 = i === fi;
+      const label = /* @__PURE__ */ jsx4(Text4, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + f.label.padEnd(13) });
+      if (f.kind === "perms" && rule) {
+        return /* @__PURE__ */ jsxs4(Box4, { children: [
+          label,
+          PERMS.map((p, pi2) => {
+            const on = permList(rule).includes(p);
+            const cur = active2 && pi2 === permCursor % PERMS.length;
+            return /* @__PURE__ */ jsxs4(Text4, { color: on ? theme.ok : theme.bad, inverse: cur, children: [
+              p,
+              pi2 < PERMS.length - 1 ? "  " : ""
+            ] }, p);
+          })
+        ] }, f.label);
+      }
+      if (f.kind === "match" && rule) {
+        if (active2 && editing) {
+          return /* @__PURE__ */ jsxs4(Box4, { children: [
+            label,
+            /* @__PURE__ */ jsx4(
+              TextInput3,
+              {
+                value: editVal,
+                onChange: setEditVal,
+                onSubmit: (v2) => {
+                  if (f.set) mutate(rules.map((r, idx) => idx === ri ? f.set(r, v2) : r));
+                  setEditing(false);
+                }
+              }
+            )
+          ] }, f.label);
+        }
+        const v = f.get(rule);
+        const lOn = starActive(rule, "left");
+        const rOn = starActive(rule, "right");
+        return /* @__PURE__ */ jsxs4(Box4, { children: [
+          label,
+          /* @__PURE__ */ jsx4(Text4, { color: lOn ? theme.ok : theme.dim, children: lOn ? "\u2731 " : "\xB7 " }),
+          /* @__PURE__ */ jsx4(Text4, { dimColor: !v, children: v || "\u2014" }),
+          /* @__PURE__ */ jsx4(Text4, { color: rOn ? theme.ok : theme.dim, children: rOn ? " \u2731" : " \xB7" })
+        ] }, f.label);
+      }
+      const val = rule ? f.get(rule) : "";
       return /* @__PURE__ */ jsxs4(Box4, { children: [
-        /* @__PURE__ */ jsx4(Text4, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + f.label.padEnd(13) }),
+        label,
         active2 && editing && f.kind === "text" ? /* @__PURE__ */ jsx4(
           TextInput3,
           {
@@ -2824,6 +2894,7 @@ function PoliciesPanel({ focused }) {
         )
       ] }, f.label);
     }) }),
+    /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "  * = wildcard (matches any run of chars). On Match: [ toggles a leading *, ] a trailing *  \xB7  e.g. *ping* matches any command containing ping" }),
     status ? /* @__PURE__ */ jsx4(Text4, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
   ] });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.82.49",
+  "version": "0.82.51",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {