@solongate/proxy 0.83.37 → 0.83.39

package/dist/api-client/policies.d.ts

@@ -14,6 +14,8 @@ export interface RuleSpec {
     kind?: 'command' | 'path' | 'url' | 'tool';
     value?: string;
     effect?: 'ALLOW' | 'DENY';
+    /** Scopes the rule to a class of call. Absent means every class. */
+    permission?: string[];
 }
 export declare function addRule(id: string, spec: RuleSpec): Promise<{
     ok: true;

package/dist/commands/index.js

@@ -772,7 +772,21 @@ async function run(argv) {
           value = v;
         }
       }
-      const res = await api.policies.addRule(id, { toolPattern, kind, value, effect });
+      let permission;
+      const rawPerm = flagStr(flags, "permission");
+      if (rawPerm !== void 0) {
+        const known = { read: "READ", write: "WRITE", execute: "EXECUTE", network: "NETWORK" };
+        const out2 = [];
+        for (const part of rawPerm.split(",")) {
+          const t = part.trim();
+          if (!t) continue;
+          const name = known[t.toLowerCase()];
+          if (!name) return err(`  Unknown permission "${t}". One or more of: READ, WRITE, EXECUTE, NETWORK`), 1;
+          if (!out2.includes(name)) out2.push(name);
+        }
+        if (out2.length) permission = out2;
+      }
+      const res = await api.policies.addRule(id, { toolPattern, kind, value, effect, permission });
       if (json) return printJson(res), 0;
       if (res.deduped) err(green("  \u2713 ") + dim(`Equivalent ${effect} rule already present.`));
       else err(green(`  \u2713 ${effect} rule added`) + dim(` (${res.rule?.id})`));

package/dist/index.js

@@ -13066,7 +13066,21 @@ async function run2(argv) {
           value = v;
         }
       }
-      const res = await api.policies.addRule(id, { toolPattern, kind, value, effect });
+      let permission;
+      const rawPerm = flagStr(flags, "permission");
+      if (rawPerm !== void 0) {
+        const known = { read: "READ", write: "WRITE", execute: "EXECUTE", network: "NETWORK" };
+        const out2 = [];
+        for (const part of rawPerm.split(",")) {
+          const t = part.trim();
+          if (!t) continue;
+          const name = known[t.toLowerCase()];
+          if (!name) return err(`  Unknown permission "${t}". One or more of: READ, WRITE, EXECUTE, NETWORK`), 1;
+          if (!out2.includes(name)) out2.push(name);
+        }
+        if (out2.length) permission = out2;
+      }
+      const res = await api.policies.addRule(id, { toolPattern, kind, value, effect, permission });
       if (json) return printJson(res), 0;
       if (res.deduped) err(green("  \u2713 ") + dim(`Equivalent ${effect} rule already present.`));
       else err(green(`  \u2713 ${effect} rule added`) + dim(` (${res.rule?.id})`));
@@ -17727,6 +17741,7 @@ function printHelp() {
   cmd("policy show <id>", "show one policy (rules, mode)");
   cmd("policy allow <id> [--command|--path|--url <val>]", "add an ALLOW rule");
   cmd("policy deny <id> [--command|--path|--url <val>]", "add a DENY rule");
+  cmd("  --permission READ,WRITE,EXECUTE,NETWORK", "scope an allow/deny to a class of call");
   cmd("policy revoke <id> <ruleId>", "remove a rule");
   cmd("policy activate <id> | --off", "pin the active policy, or enforce nothing");
   cmd("policy active", "show the resolved active policy");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.83.37",
+  "version": "0.83.39",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {
@@ -61,12 +61,12 @@
     "node": ">=20.0.0"
   },
   "optionalDependencies": {
-    "@solongate/guard-linux-x64": "0.83.37",
-    "@solongate/guard-linux-arm64": "0.83.37",
-    "@solongate/guard-darwin-x64": "0.83.37",
-    "@solongate/guard-darwin-arm64": "0.83.37",
-    "@solongate/guard-win32-x64": "0.83.37",
-    "@solongate/guard-win32-arm64": "0.83.37"
+    "@solongate/guard-linux-x64": "0.83.39",
+    "@solongate/guard-linux-arm64": "0.83.39",
+    "@solongate/guard-darwin-x64": "0.83.39",
+    "@solongate/guard-darwin-arm64": "0.83.39",
+    "@solongate/guard-win32-x64": "0.83.39",
+    "@solongate/guard-win32-arm64": "0.83.39"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.26.0",