@solongate/proxy 0.83.43 → 0.83.45

package/dist/api-client/policies.d.ts

@@ -11,7 +11,7 @@ export declare function remove(id: string): Promise<{
 }>;
 export interface RuleSpec {
     toolPattern?: string;
-    kind?: 'command' | 'path' | 'url' | 'tool';
+    kind?: 'command' | 'path' | 'filename' | 'url' | 'tool';
     value?: string;
     effect?: 'ALLOW' | 'DENY';
     /** Scopes the rule to a class of call. Absent means every class. */

package/dist/commands/index.js

@@ -693,10 +693,12 @@ var USAGE = usage("solongate policy", "manage cloud policies", [
   ["policy create <name>", "create a new empty policy"],
   ["policy delete <id>", "delete a policy"],
   ["policy show <id>", "show one policy (rules, mode)"],
-  ["policy allow <id> [--command|--path|--url <val>]", "append an ALLOW rule"],
-  ["policy deny  <id> [--command|--path|--url <val>]", "append a DENY rule"],
+  ["policy allow <id> [--command|--path|--filename|--url <val>]", "append an ALLOW rule"],
+  ["policy deny  <id> [--command|--path|--filename|--url <val>]", "append a DENY rule"],
   ["policy revoke <id> <ruleId>", "remove a rule"],
   ["policy active", "show the resolved active policy"],
+  ["policy mode <id> <denylist|whitelist>", "switch deny-by-default / allow-by-default"],
+  ["policy rule <id> <ruleId> <enable|disable>", "turn one rule on or off without deleting it"],
   ["policy activate <id> | --off", "pin the active policy, or enforce nothing"],
   ["policy dry-run <id|file.json> [--limit N] [--mode denylist|whitelist]", "replay recent traffic against rules"]
 ], "Add --json to any read command for machine-readable output.");
@@ -761,11 +763,11 @@ async function run(argv) {
     case "deny": {
       const effect = sub === "allow" ? "ALLOW" : "DENY";
       const id = positionals[1];
-      if (!id) return err(`  Usage: policy ${sub} <id> [--command|--path|--url <val>]`), 1;
+      if (!id) return err(`  Usage: policy ${sub} <id> [--command|--path|--filename|--url <val>]`), 1;
       const toolPattern = "*";
       let kind = "tool";
       let value;
-      for (const k of ["command", "path", "url"]) {
+      for (const k of ["command", "path", "filename", "url"]) {
         const v = flagStr(flags, k);
         if (v !== void 0) {
           kind = k;
@@ -792,6 +794,45 @@ async function run(argv) {
       else err(green(`  \u2713 ${effect} rule added`) + dim(` (${res.rule?.id})`));
       return 0;
     }
+    case "mode": {
+      const id = positionals[1];
+      const mode = (positionals[2] ?? "").toLowerCase();
+      if (!id || mode !== "denylist" && mode !== "whitelist") {
+        return err("  Usage: policy mode <id> <denylist|whitelist>"), 1;
+      }
+      const p = await api.policies.get(id);
+      const saved = await api.policies.update(id, { ...p, mode });
+      if (json) return printJson(saved), 0;
+      err(green(`  \u2713 ${saved.id} is now a ${mode} policy`));
+      if (mode === "whitelist" && (saved.rules?.length ?? 0) === 0) {
+        err(dim("    It has no ALLOW rules, so it currently blocks everything."));
+      }
+      return 0;
+    }
+    case "rule": {
+      const id = positionals[1];
+      const ruleId = positionals[2];
+      const action = (positionals[3] ?? "").toLowerCase();
+      if (!id || !ruleId || action !== "enable" && action !== "disable") {
+        return err("  Usage: policy rule <id> <ruleId> <enable|disable>"), 1;
+      }
+      const p = await api.policies.get(id);
+      const rules = p.rules ?? [];
+      const target = rules.find((r) => r.id === ruleId);
+      if (!target) {
+        err(`  No rule "${ruleId}" in ${id}`);
+        if (rules.length) {
+          err(dim("  Rules in this policy:"));
+          for (const r of rules) err(`    ${dim("\u2022")} ${String(r.id)}`);
+        }
+        return 1;
+      }
+      const next = rules.map((r) => r.id === ruleId ? { ...r, enabled: action === "enable" } : r);
+      const saved = await api.policies.update(id, { ...p, rules: next });
+      if (json) return printJson(saved), 0;
+      err(green(`  \u2713 Rule ${ruleId} ${action}d`));
+      return 0;
+    }
     case "revoke": {
       const id = positionals[1];
       const ruleId = positionals[2];

package/dist/index.js

@@ -13055,11 +13055,11 @@ async function run2(argv) {
     case "deny": {
       const effect = sub === "allow" ? "ALLOW" : "DENY";
       const id = positionals[1];
-      if (!id) return err(`  Usage: policy ${sub} <id> [--command|--path|--url <val>]`), 1;
+      if (!id) return err(`  Usage: policy ${sub} <id> [--command|--path|--filename|--url <val>]`), 1;
       const toolPattern = "*";
       let kind = "tool";
       let value;
-      for (const k of ["command", "path", "url"]) {
+      for (const k of ["command", "path", "filename", "url"]) {
         const v = flagStr(flags, k);
         if (v !== void 0) {
           kind = k;
@@ -13086,6 +13086,45 @@ async function run2(argv) {
       else err(green(`  \u2713 ${effect} rule added`) + dim(` (${res.rule?.id})`));
       return 0;
     }
+    case "mode": {
+      const id = positionals[1];
+      const mode = (positionals[2] ?? "").toLowerCase();
+      if (!id || mode !== "denylist" && mode !== "whitelist") {
+        return err("  Usage: policy mode <id> <denylist|whitelist>"), 1;
+      }
+      const p = await api.policies.get(id);
+      const saved = await api.policies.update(id, { ...p, mode });
+      if (json) return printJson(saved), 0;
+      err(green(`  \u2713 ${saved.id} is now a ${mode} policy`));
+      if (mode === "whitelist" && (saved.rules?.length ?? 0) === 0) {
+        err(dim("    It has no ALLOW rules, so it currently blocks everything."));
+      }
+      return 0;
+    }
+    case "rule": {
+      const id = positionals[1];
+      const ruleId = positionals[2];
+      const action = (positionals[3] ?? "").toLowerCase();
+      if (!id || !ruleId || action !== "enable" && action !== "disable") {
+        return err("  Usage: policy rule <id> <ruleId> <enable|disable>"), 1;
+      }
+      const p = await api.policies.get(id);
+      const rules = p.rules ?? [];
+      const target = rules.find((r) => r.id === ruleId);
+      if (!target) {
+        err(`  No rule "${ruleId}" in ${id}`);
+        if (rules.length) {
+          err(dim("  Rules in this policy:"));
+          for (const r of rules) err(`    ${dim("\u2022")} ${String(r.id)}`);
+        }
+        return 1;
+      }
+      const next = rules.map((r) => r.id === ruleId ? { ...r, enabled: action === "enable" } : r);
+      const saved = await api.policies.update(id, { ...p, rules: next });
+      if (json) return printJson(saved), 0;
+      err(green(`  \u2713 Rule ${ruleId} ${action}d`));
+      return 0;
+    }
     case "revoke": {
       const id = positionals[1];
       const ruleId = positionals[2];
@@ -13181,10 +13220,12 @@ var init_policy = __esm({
       ["policy create <name>", "create a new empty policy"],
       ["policy delete <id>", "delete a policy"],
       ["policy show <id>", "show one policy (rules, mode)"],
-      ["policy allow <id> [--command|--path|--url <val>]", "append an ALLOW rule"],
-      ["policy deny  <id> [--command|--path|--url <val>]", "append a DENY rule"],
+      ["policy allow <id> [--command|--path|--filename|--url <val>]", "append an ALLOW rule"],
+      ["policy deny  <id> [--command|--path|--filename|--url <val>]", "append a DENY rule"],
       ["policy revoke <id> <ruleId>", "remove a rule"],
       ["policy active", "show the resolved active policy"],
+      ["policy mode <id> <denylist|whitelist>", "switch deny-by-default / allow-by-default"],
+      ["policy rule <id> <ruleId> <enable|disable>", "turn one rule on or off without deleting it"],
       ["policy activate <id> | --off", "pin the active policy, or enforce nothing"],
       ["policy dry-run <id|file.json> [--limit N] [--mode denylist|whitelist]", "replay recent traffic against rules"]
     ], "Add --json to any read command for machine-readable output.");
@@ -17739,9 +17780,11 @@ function printHelp() {
   cmd("policy create <name>", "create a new empty policy");
   cmd("policy delete <id>", "delete a policy");
   cmd("policy show <id>", "show one policy (rules, mode)");
-  cmd("policy allow <id> [--command|--path|--url <val>]", "add an ALLOW rule");
-  cmd("policy deny <id> [--command|--path|--url <val>]", "add a DENY rule");
+  cmd("policy allow <id> [--command|--path|--filename|--url <val>]", "add an ALLOW rule");
+  cmd("policy deny <id> [--command|--path|--filename|--url <val>]", "add a DENY rule");
   cmd("  --permission READ,WRITE,EXECUTE,NETWORK", "scope an allow/deny to a class of call");
+  cmd("policy mode <id> <denylist|whitelist>", "switch deny-by-default / allow-by-default");
+  cmd("policy rule <id> <ruleId> <enable|disable>", "turn one rule on or off without deleting it");
   cmd("policy revoke <id> <ruleId>", "remove a rule");
   cmd("policy activate <id> | --off", "pin the active policy, or enforce nothing");
   cmd("policy active", "show the resolved active policy");

package/hooks/guard.bundled.mjs

@@ -6579,7 +6579,7 @@ function sweepLegacyFlagDir() {
   } catch {
   }
 }
-var HOOK_VERSION = 82;
+var HOOK_VERSION = 83;
 var SG_REFRESH_ARG = process.argv.includes("--sg-refresh-policy");
 var SG_STDIN = SG_REFRESH_ARG ? "" : (() => {
   try {
@@ -6798,7 +6798,7 @@ function guessPermission(toolName) {
     return "EXECUTE";
   if (name.includes("fetch") || name.includes("http") || name.includes("request") || name.includes("curl") || name.includes("network") || name.includes("download") || name.includes("upload") || name === "websearch")
     return "NETWORK";
-  if (name.includes("write") || name.includes("create") || name.includes("delete") || name.includes("update") || name.includes("set") || name.includes("edit") || name.includes("remove") || name.includes("insert"))
+  if (name.includes("write") || name.includes("create") || name.includes("delete") || name.includes("update") || name.includes("set") || name.includes("edit") || name.includes("remove") || name.includes("insert") || name.includes("replace") || name.includes("patch") || name.includes("modify") || name.includes("append") || name.includes("overwrite") || name.includes("rename") || name.includes("move") || name.includes("mkdir") || name.includes("touch"))
     return "WRITE";
   return "READ";
 }

package/hooks/guard.mjs

@@ -82,7 +82,7 @@ import { createHash } from 'node:crypto';
 // the installed hook self-updates when the cloud version is higher (see
 // maybeSelfUpdate). This is what makes guard fixes propagate without a manual
 // reinstall — the same trust model as the OPA WASM this hook already runs.
-const HOOK_VERSION = 82;
+const HOOK_VERSION = 83;
 
 // ── The Go guard, when there is one and it is the right one ──────────────────
 //
@@ -443,7 +443,15 @@ function guessPermission(toolName) {
   if (name === 'apply_patch' || name === 'applypatch') return 'WRITE';
   if (name.includes('exec') || name.includes('shell') || name.includes('run') || name.includes('eval') || name === 'bash') return 'EXECUTE';
   if (name.includes('fetch') || name.includes('http') || name.includes('request') || name.includes('curl') || name.includes('network') || name.includes('download') || name.includes('upload') || name === 'websearch') return 'NETWORK';
-  if (name.includes('write') || name.includes('create') || name.includes('delete') || name.includes('update') || name.includes('set') || name.includes('edit') || name.includes('remove') || name.includes('insert')) return 'WRITE';
+  // `replace`, `patch` and `modify` are here because Antigravity's edit tool is
+  // `replace_file_content`, which matched none of the words above and fell
+  // through to READ. A WRITE-scoped rule therefore missed the tool the agent
+  // actually edits with: "deny writes under config/" left it free to rewrite
+  // config/ all day. The list is words a tool NAME uses for changing something,
+  // not an enumeration of known tools, and it errs wide because the name that
+  // classifies wrong is silently unguarded rather than loudly broken.
+  if (name.includes('write') || name.includes('create') || name.includes('delete') || name.includes('update') || name.includes('set') || name.includes('edit') || name.includes('remove') || name.includes('insert') ||
+      name.includes('replace') || name.includes('patch') || name.includes('modify') || name.includes('append') || name.includes('overwrite') || name.includes('rename') || name.includes('move') || name.includes('mkdir') || name.includes('touch')) return 'WRITE';
   return 'READ';
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.83.43",
+  "version": "0.83.45",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {
@@ -61,12 +61,12 @@
     "node": ">=20.0.0"
   },
   "optionalDependencies": {
-    "@solongate/guard-linux-x64": "0.83.43",
-    "@solongate/guard-linux-arm64": "0.83.43",
-    "@solongate/guard-darwin-x64": "0.83.43",
-    "@solongate/guard-darwin-arm64": "0.83.43",
-    "@solongate/guard-win32-x64": "0.83.43",
-    "@solongate/guard-win32-arm64": "0.83.43"
+    "@solongate/guard-linux-x64": "0.83.45",
+    "@solongate/guard-linux-arm64": "0.83.45",
+    "@solongate/guard-darwin-x64": "0.83.45",
+    "@solongate/guard-darwin-arm64": "0.83.45",
+    "@solongate/guard-win32-x64": "0.83.45",
+    "@solongate/guard-win32-arm64": "0.83.45"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.26.0",