@solongate/proxy 0.83.44 → 0.83.45

package/dist/api-client/policies.d.ts

@@ -11,7 +11,7 @@ export declare function remove(id: string): Promise<{
 }>;
 export interface RuleSpec {
     toolPattern?: string;
-    kind?: 'command' | 'path' | 'url' | 'tool';
+    kind?: 'command' | 'path' | 'filename' | 'url' | 'tool';
     value?: string;
     effect?: 'ALLOW' | 'DENY';
     /** Scopes the rule to a class of call. Absent means every class. */

package/dist/commands/index.js

@@ -693,10 +693,12 @@ var USAGE = usage("solongate policy", "manage cloud policies", [
   ["policy create <name>", "create a new empty policy"],
   ["policy delete <id>", "delete a policy"],
   ["policy show <id>", "show one policy (rules, mode)"],
-  ["policy allow <id> [--command|--path|--url <val>]", "append an ALLOW rule"],
-  ["policy deny  <id> [--command|--path|--url <val>]", "append a DENY rule"],
+  ["policy allow <id> [--command|--path|--filename|--url <val>]", "append an ALLOW rule"],
+  ["policy deny  <id> [--command|--path|--filename|--url <val>]", "append a DENY rule"],
   ["policy revoke <id> <ruleId>", "remove a rule"],
   ["policy active", "show the resolved active policy"],
+  ["policy mode <id> <denylist|whitelist>", "switch deny-by-default / allow-by-default"],
+  ["policy rule <id> <ruleId> <enable|disable>", "turn one rule on or off without deleting it"],
   ["policy activate <id> | --off", "pin the active policy, or enforce nothing"],
   ["policy dry-run <id|file.json> [--limit N] [--mode denylist|whitelist]", "replay recent traffic against rules"]
 ], "Add --json to any read command for machine-readable output.");
@@ -761,11 +763,11 @@ async function run(argv) {
     case "deny": {
       const effect = sub === "allow" ? "ALLOW" : "DENY";
       const id = positionals[1];
-      if (!id) return err(`  Usage: policy ${sub} <id> [--command|--path|--url <val>]`), 1;
+      if (!id) return err(`  Usage: policy ${sub} <id> [--command|--path|--filename|--url <val>]`), 1;
       const toolPattern = "*";
       let kind = "tool";
       let value;
-      for (const k of ["command", "path", "url"]) {
+      for (const k of ["command", "path", "filename", "url"]) {
         const v = flagStr(flags, k);
         if (v !== void 0) {
           kind = k;
@@ -792,6 +794,45 @@ async function run(argv) {
       else err(green(`  \u2713 ${effect} rule added`) + dim(` (${res.rule?.id})`));
       return 0;
     }
+    case "mode": {
+      const id = positionals[1];
+      const mode = (positionals[2] ?? "").toLowerCase();
+      if (!id || mode !== "denylist" && mode !== "whitelist") {
+        return err("  Usage: policy mode <id> <denylist|whitelist>"), 1;
+      }
+      const p = await api.policies.get(id);
+      const saved = await api.policies.update(id, { ...p, mode });
+      if (json) return printJson(saved), 0;
+      err(green(`  \u2713 ${saved.id} is now a ${mode} policy`));
+      if (mode === "whitelist" && (saved.rules?.length ?? 0) === 0) {
+        err(dim("    It has no ALLOW rules, so it currently blocks everything."));
+      }
+      return 0;
+    }
+    case "rule": {
+      const id = positionals[1];
+      const ruleId = positionals[2];
+      const action = (positionals[3] ?? "").toLowerCase();
+      if (!id || !ruleId || action !== "enable" && action !== "disable") {
+        return err("  Usage: policy rule <id> <ruleId> <enable|disable>"), 1;
+      }
+      const p = await api.policies.get(id);
+      const rules = p.rules ?? [];
+      const target = rules.find((r) => r.id === ruleId);
+      if (!target) {
+        err(`  No rule "${ruleId}" in ${id}`);
+        if (rules.length) {
+          err(dim("  Rules in this policy:"));
+          for (const r of rules) err(`    ${dim("\u2022")} ${String(r.id)}`);
+        }
+        return 1;
+      }
+      const next = rules.map((r) => r.id === ruleId ? { ...r, enabled: action === "enable" } : r);
+      const saved = await api.policies.update(id, { ...p, rules: next });
+      if (json) return printJson(saved), 0;
+      err(green(`  \u2713 Rule ${ruleId} ${action}d`));
+      return 0;
+    }
     case "revoke": {
       const id = positionals[1];
       const ruleId = positionals[2];

package/dist/index.js

@@ -13055,11 +13055,11 @@ async function run2(argv) {
     case "deny": {
       const effect = sub === "allow" ? "ALLOW" : "DENY";
       const id = positionals[1];
-      if (!id) return err(`  Usage: policy ${sub} <id> [--command|--path|--url <val>]`), 1;
+      if (!id) return err(`  Usage: policy ${sub} <id> [--command|--path|--filename|--url <val>]`), 1;
       const toolPattern = "*";
       let kind = "tool";
       let value;
-      for (const k of ["command", "path", "url"]) {
+      for (const k of ["command", "path", "filename", "url"]) {
         const v = flagStr(flags, k);
         if (v !== void 0) {
           kind = k;
@@ -13086,6 +13086,45 @@ async function run2(argv) {
       else err(green(`  \u2713 ${effect} rule added`) + dim(` (${res.rule?.id})`));
       return 0;
     }
+    case "mode": {
+      const id = positionals[1];
+      const mode = (positionals[2] ?? "").toLowerCase();
+      if (!id || mode !== "denylist" && mode !== "whitelist") {
+        return err("  Usage: policy mode <id> <denylist|whitelist>"), 1;
+      }
+      const p = await api.policies.get(id);
+      const saved = await api.policies.update(id, { ...p, mode });
+      if (json) return printJson(saved), 0;
+      err(green(`  \u2713 ${saved.id} is now a ${mode} policy`));
+      if (mode === "whitelist" && (saved.rules?.length ?? 0) === 0) {
+        err(dim("    It has no ALLOW rules, so it currently blocks everything."));
+      }
+      return 0;
+    }
+    case "rule": {
+      const id = positionals[1];
+      const ruleId = positionals[2];
+      const action = (positionals[3] ?? "").toLowerCase();
+      if (!id || !ruleId || action !== "enable" && action !== "disable") {
+        return err("  Usage: policy rule <id> <ruleId> <enable|disable>"), 1;
+      }
+      const p = await api.policies.get(id);
+      const rules = p.rules ?? [];
+      const target = rules.find((r) => r.id === ruleId);
+      if (!target) {
+        err(`  No rule "${ruleId}" in ${id}`);
+        if (rules.length) {
+          err(dim("  Rules in this policy:"));
+          for (const r of rules) err(`    ${dim("\u2022")} ${String(r.id)}`);
+        }
+        return 1;
+      }
+      const next = rules.map((r) => r.id === ruleId ? { ...r, enabled: action === "enable" } : r);
+      const saved = await api.policies.update(id, { ...p, rules: next });
+      if (json) return printJson(saved), 0;
+      err(green(`  \u2713 Rule ${ruleId} ${action}d`));
+      return 0;
+    }
     case "revoke": {
       const id = positionals[1];
       const ruleId = positionals[2];
@@ -13181,10 +13220,12 @@ var init_policy = __esm({
       ["policy create <name>", "create a new empty policy"],
       ["policy delete <id>", "delete a policy"],
       ["policy show <id>", "show one policy (rules, mode)"],
-      ["policy allow <id> [--command|--path|--url <val>]", "append an ALLOW rule"],
-      ["policy deny  <id> [--command|--path|--url <val>]", "append a DENY rule"],
+      ["policy allow <id> [--command|--path|--filename|--url <val>]", "append an ALLOW rule"],
+      ["policy deny  <id> [--command|--path|--filename|--url <val>]", "append a DENY rule"],
       ["policy revoke <id> <ruleId>", "remove a rule"],
       ["policy active", "show the resolved active policy"],
+      ["policy mode <id> <denylist|whitelist>", "switch deny-by-default / allow-by-default"],
+      ["policy rule <id> <ruleId> <enable|disable>", "turn one rule on or off without deleting it"],
       ["policy activate <id> | --off", "pin the active policy, or enforce nothing"],
       ["policy dry-run <id|file.json> [--limit N] [--mode denylist|whitelist]", "replay recent traffic against rules"]
     ], "Add --json to any read command for machine-readable output.");
@@ -17739,9 +17780,11 @@ function printHelp() {
   cmd("policy create <name>", "create a new empty policy");
   cmd("policy delete <id>", "delete a policy");
   cmd("policy show <id>", "show one policy (rules, mode)");
-  cmd("policy allow <id> [--command|--path|--url <val>]", "add an ALLOW rule");
-  cmd("policy deny <id> [--command|--path|--url <val>]", "add a DENY rule");
+  cmd("policy allow <id> [--command|--path|--filename|--url <val>]", "add an ALLOW rule");
+  cmd("policy deny <id> [--command|--path|--filename|--url <val>]", "add a DENY rule");
   cmd("  --permission READ,WRITE,EXECUTE,NETWORK", "scope an allow/deny to a class of call");
+  cmd("policy mode <id> <denylist|whitelist>", "switch deny-by-default / allow-by-default");
+  cmd("policy rule <id> <ruleId> <enable|disable>", "turn one rule on or off without deleting it");
   cmd("policy revoke <id> <ruleId>", "remove a rule");
   cmd("policy activate <id> | --off", "pin the active policy, or enforce nothing");
   cmd("policy active", "show the resolved active policy");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.83.44",
+  "version": "0.83.45",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {
@@ -61,12 +61,12 @@
     "node": ">=20.0.0"
   },
   "optionalDependencies": {
-    "@solongate/guard-linux-x64": "0.83.44",
-    "@solongate/guard-linux-arm64": "0.83.44",
-    "@solongate/guard-darwin-x64": "0.83.44",
-    "@solongate/guard-darwin-arm64": "0.83.44",
-    "@solongate/guard-win32-x64": "0.83.44",
-    "@solongate/guard-win32-arm64": "0.83.44"
+    "@solongate/guard-linux-x64": "0.83.45",
+    "@solongate/guard-linux-arm64": "0.83.45",
+    "@solongate/guard-darwin-x64": "0.83.45",
+    "@solongate/guard-darwin-arm64": "0.83.45",
+    "@solongate/guard-win32-x64": "0.83.45",
+    "@solongate/guard-win32-arm64": "0.83.45"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.26.0",