@tameflare/cli 0.9.0 → 0.10.0

package/dist/commands/init.js

@@ -2,195 +2,92 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.initCommand = initCommand;
 const commander_1 = require("commander");
-const child_process_1 = require("child_process");
 const fs_1 = require("fs");
-const path_1 = require("path");
 const readline_1 = require("readline");
 const utils_1 = require("../utils");
-const https_1 = require("https");
-const http_1 = require("http");
 const login_1 = require("./login");
-const GATEWAY_VERSION = "0.8.0";
-const GITHUB_REPO = "tameflare/tameflare";
+const PROXY_HOST = "proxy.tameflare.com";
 function initCommand() {
     const cmd = new commander_1.Command("init")
-        .description("Initialize TameFlare gateway in the current directory")
-        .option("--port <port>", "Gateway port", "9443")
-        .option("--enforcement <level>", "Enforcement level: monitor, soft_enforce, full_enforce", "monitor")
-        .option("--platform <name>", "Platform template: openclaw, langchain, n8n, claude-code")
-        .option("--dashboard-url <url>", "Dashboard URL for config phone-home (e.g. https://tameflare.com)")
-        .option("--gateway-id <id>", "Gateway ID from dashboard")
-        .option("--gateway-token <token>", "Gateway auth token from dashboard")
+        .description("Connect this directory to a TameFlare cloud gateway")
+        .option("--dashboard-url <url>", "Dashboard URL (default: https://tameflare.com)")
+        .option("--gateway-id <id>", "Gateway ID from dashboard (for CI/CD)")
+        .option("--gateway-token <token>", "Gateway auth token from dashboard (for CI/CD)")
         .option("--list", "List your gateways and pick one (requires tf login first)")
         .action(async (opts) => {
         const tfDir = (0, utils_1.getTfDir)();
-        // If --list or no gateway credentials provided, try to auto-detect from tf login
-        const creds = (0, login_1.loadCredentials)();
-        if ((opts.list || (!opts.gatewayId && !opts.gatewayToken)) && creds?.token) {
-            const dashUrl = opts.dashboardUrl || creds.dashboard_url;
-            const picked = await pickGatewayInteractive(dashUrl, creds.token, opts.list);
-            if (picked) {
-                opts.dashboardUrl = dashUrl;
-                opts.gatewayId = picked.id;
-                opts.gatewayToken = picked.gateway_token;
-                console.log(`[TF] Selected gateway: ${picked.name} (${picked.id})`);
-            }
-            else if (opts.list) {
-                // --list was explicit but no gateway picked
-                process.exit(1);
+        // If already initialized, show current config
+        if ((0, utils_1.isInitialized)() && !opts.list && !opts.gatewayId) {
+            const cfg = (0, utils_1.loadConfig)();
+            if (cfg) {
+                console.log("[TF] Already initialized at", tfDir);
+                console.log(`[TF] Gateway: ${cfg.gateway_id}`);
+                console.log(`[TF] Proxy:   https://${PROXY_HOST}`);
+                console.log("");
+                console.log("  Run your agent:  tf run -- node agent.js");
+                console.log("  Reconfigure:     tf init --list");
+                return;
             }
-            // If not --list and auto-detect failed, fall through to manual mode
         }
-        if ((0, utils_1.isGatewayInitialized)()) {
-            console.log("[TF] Already initialized at", tfDir);
-            console.log("[TF] Starting gateway...");
-        }
-        else {
-            console.log("[TF] Initializing TameFlare...");
-            // Create .tf directory
-            (0, fs_1.mkdirSync)(tfDir, { recursive: true });
-            // Apply platform template enforcement level
-            const enforcement = opts.platform
-                ? "full_enforce"
-                : opts.enforcement;
-            // Write config (persist dashboard credentials so they survive restarts)
-            const configLines = [
-                "gateway:",
-                `  port: ${opts.port}`,
-                "  dashboard_port: 3000",
-                `  enforcement_level: ${enforcement}`,
-                "  proxy_mode: standard",
-                "",
-                "database:",
-                `  url: "file:${(0, path_1.join)(tfDir, "local.db").replace(/\\/g, "/")}"`,
-                "",
-                "tls:",
-                `  ca_cert: "${(0, path_1.join)(tfDir, "ca.crt").replace(/\\/g, "/")}"`,
-                `  ca_key: "${(0, path_1.join)(tfDir, "ca.key").replace(/\\/g, "/")}"`,
-            ];
-            if (opts.dashboardUrl || opts.gatewayId || opts.gatewayToken) {
-                configLines.push("");
-                configLines.push("dashboard:");
-                if (opts.dashboardUrl)
-                    configLines.push(`  url: "${opts.dashboardUrl}"`);
-                if (opts.gatewayId)
-                    configLines.push(`  gateway_id: "${opts.gatewayId}"`);
-                if (opts.gatewayToken)
-                    configLines.push(`  gateway_token: "${opts.gatewayToken}"`);
-            }
-            const config = configLines.join("\n");
-            (0, fs_1.writeFileSync)((0, utils_1.getConfigPath)(), config, "utf-8");
-            console.log("[TF] Config created at", (0, utils_1.getConfigPath)());
-            // Write platform template
-            if (opts.platform) {
-                const template = getPlatformTemplate(opts.platform);
-                if (template) {
-                    const templatePath = (0, path_1.join)(tfDir, "platform.json");
-                    (0, fs_1.writeFileSync)(templatePath, JSON.stringify(template, null, 2), "utf-8");
-                    console.log(`[TF] Platform template: ${opts.platform}`);
-                    console.log(`[TF] Enforcement: full_enforce (platform default)`);
-                    console.log(`[TF] After gateway starts, run the setup commands below:`);
-                    console.log();
-                    for (const cmd of template.setup_commands) {
-                        console.log(`  ${cmd}`);
-                    }
-                    console.log();
-                }
-                else {
-                    console.error(`[TF] Unknown platform: ${opts.platform}`);
-                    console.error(`[TF] Available: openclaw, langchain, n8n, claude-code`);
+        // Resolve gateway credentials: --list / auto-detect / manual flags
+        const creds = (0, login_1.loadCredentials)();
+        let dashUrl = opts.dashboardUrl || creds?.dashboard_url || "https://tameflare.com";
+        let gwId = opts.gatewayId;
+        let gwToken = opts.gatewayToken;
+        if (!gwId || !gwToken) {
+            if (!creds?.token) {
+                if (opts.list) {
+                    console.error("[TF] Not logged in. Run 'tf login' first.");
                     process.exit(1);
                 }
-            }
-        }
-        // Find or download the gateway binary
-        let gatewayBin = findGatewayBinary();
-        if (!gatewayBin) {
-            console.log("[TF] Gateway binary not found. Downloading...");
-            try {
-                gatewayBin = await downloadGatewayBinary(tfDir);
-            }
-            catch (err) {
-                console.error(`[TF] Failed to download gateway: ${err.message}`);
-                console.error("[TF] You can manually download from: https://github.com/tameflare/tameflare/releases");
+                console.error("[TF] No gateway configured.");
+                console.error("  Run 'tf login' then 'tf init' to select a gateway.");
+                console.error("  Or pass --gateway-id and --gateway-token for CI/CD.");
                 process.exit(1);
             }
-        }
-        // Build environment variables for the gateway binary.
-        // Priority: CLI flags > config file > tf login credentials
-        const gatewayEnv = { ...process.env };
-        let dashUrl = opts.dashboardUrl;
-        let gwId = opts.gatewayId;
-        let gwToken = opts.gatewayToken;
-        // Try reading from config file
-        if (!dashUrl || !gwId || !gwToken) {
-            try {
-                const cfgText = (0, fs_1.readFileSync)((0, utils_1.getConfigPath)(), "utf-8");
-                const dashSection = cfgText.split(/^dashboard:/m)[1] ?? "";
-                if (!dashUrl) {
-                    const m = dashSection.match(/^\s+url:\s*"(.+?)"/m);
-                    if (m)
-                        dashUrl = m[1];
-                }
-                if (!gwId) {
-                    const m = dashSection.match(/gateway_id:\s*"(.+?)"/);
-                    if (m)
-                        gwId = m[1];
-                }
-                if (!gwToken) {
-                    const m = dashSection.match(/gateway_token:\s*"(.+?)"/);
-                    if (m)
-                        gwToken = m[1];
-                }
+            const picked = await pickGatewayInteractive(dashUrl, creds.token, opts.list ?? false);
+            if (!picked) {
+                process.exit(1);
             }
-            catch { }
-        }
-        // Fall back to tf login credentials for dashboard URL
-        if (!dashUrl && creds?.dashboard_url) {
-            dashUrl = creds.dashboard_url;
+            gwId = picked.id;
+            gwToken = picked.gateway_token;
+            console.log(`[TF] Selected gateway: ${picked.name} (${picked.id})`);
         }
-        if (dashUrl)
-            gatewayEnv.TF_DASHBOARD_URL = dashUrl;
-        if (gwId)
-            gatewayEnv.TF_GATEWAY_ID = gwId;
-        if (gwToken)
-            gatewayEnv.TF_GATEWAY_TOKEN = gwToken;
-        if (dashUrl && gwId && gwToken) {
-            console.log(`[TF] Dashboard: ${dashUrl} (gateway: ${gwId})`);
-        }
-        else if (!gwId || !gwToken) {
-            console.log("[TF] No gateway credentials configured. Run 'tf login' then 'tf init --list' to select a gateway.");
-        }
-        console.log("[TF] Starting gateway...");
-        const gateway = (0, child_process_1.spawn)(gatewayBin, ["--config", (0, utils_1.getConfigPath)()], {
-            stdio: "inherit",
-            detached: false,
-            env: gatewayEnv,
-        });
-        gateway.on("error", (err) => {
-            console.error("[TF] Failed to start gateway:", err.message);
+        if (!gwToken) {
+            console.error("[TF] Gateway has no token. Recreate it in the dashboard.");
             process.exit(1);
-        });
-        // Write PID file for stop command
-        const pidFile = (0, path_1.join)(tfDir, "gateway.pid");
-        if (gateway.pid) {
-            (0, fs_1.writeFileSync)(pidFile, String(gateway.pid), "utf-8");
         }
-        // Handle clean shutdown
-        process.on("SIGINT", () => {
-            gateway.kill("SIGTERM");
-            process.exit(0);
-        });
-        process.on("SIGTERM", () => {
-            gateway.kill("SIGTERM");
-            process.exit(0);
-        });
+        // Write config
+        (0, fs_1.mkdirSync)(tfDir, { recursive: true });
+        const config = [
+            "# TameFlare gateway configuration",
+            `# Generated by tf init`,
+            "",
+            "dashboard:",
+            `  url: "${dashUrl}"`,
+            `  gateway_id: "${gwId}"`,
+            `  gateway_token: "${gwToken}"`,
+            "",
+            "proxy:",
+            `  host: "${PROXY_HOST}"`,
+        ].join("\n");
+        (0, fs_1.writeFileSync)((0, utils_1.getConfigPath)(), config, "utf-8");
+        console.log("");
+        console.log("[TF] Initialized successfully!");
+        console.log(`[TF] Config: ${(0, utils_1.getConfigPath)()}`);
+        console.log(`[TF] Gateway: ${gwId}`);
+        console.log(`[TF] Proxy:   https://${PROXY_HOST}`);
+        console.log("");
+        console.log("  Next steps:");
+        console.log("    tf run -- node agent.js       # Run your agent through the gateway");
+        console.log("    tf status                     # Check gateway status");
+        console.log("    tf logs                       # View traffic logs");
     });
     return cmd;
 }
 async function pickGatewayInteractive(dashboardUrl, token, explicit) {
     try {
-        const res = await fetch(`${dashboardUrl}/api/cli/gateways`, {
+        const res = await fetch(`${dashboardUrl}/api/cli/gateways?token=${encodeURIComponent(token)}`, {
             headers: { Authorization: `Bearer ${token}` },
         });
         if (!res.ok) {
@@ -205,7 +102,8 @@ async function pickGatewayInteractive(dashboardUrl, token, explicit) {
         const data = await res.json();
         const gws = data.gateways ?? [];
         if (gws.length === 0) {
-            console.log("[TF] No gateways found. Create one at the dashboard first.");
+            console.log("[TF] No gateways found. Create one at the dashboard:");
+            console.log(`  ${dashboardUrl}/dashboard/gateways/new`);
             return null;
         }
         // Auto-select if only one gateway
@@ -236,187 +134,8 @@ async function pickGatewayInteractive(dashboardUrl, token, explicit) {
     }
     catch (err) {
         if (!explicit)
-            return null; // Silent fail for auto-detect
+            return null;
         console.error(`[TF] Failed to list gateways: ${err.message}`);
         return null;
     }
 }
-function getPlatformTemplate(platform) {
-    const templates = {
-        openclaw: {
-            name: "OpenClaw",
-            description: "AI agent framework - blocks all unknown domains, pre-allows LLM APIs",
-            connectors: ["openai", "anthropic"],
-            setup_commands: [
-                'npx tf connector add openai --token $OPENAI_API_KEY',
-                'npx tf connector add anthropic --token $ANTHROPIC_API_KEY',
-                'npx tf permissions set --gateway "default" --connector openai --action "openai.chat.*" --decision allow',
-                'npx tf permissions set --gateway "default" --connector anthropic --action "anthropic.message.*" --decision allow',
-                '# All other outbound traffic is blocked by default',
-            ],
-        },
-        langchain: {
-            name: "LangChain",
-            description: "LLM framework - pre-allows LLM APIs and search, blocks file:// and localhost",
-            connectors: ["openai", "anthropic"],
-            setup_commands: [
-                'npx tf connector add openai --token $OPENAI_API_KEY',
-                'npx tf connector add anthropic --token $ANTHROPIC_API_KEY',
-                'npx tf permissions set --gateway "default" --connector openai --action "*" --decision allow',
-                'npx tf permissions set --gateway "default" --connector anthropic --action "*" --decision allow',
-                '# Add tool connectors as needed:',
-                '# npx tf connector add generic --domains serpapi.com --token $SERP_KEY',
-            ],
-        },
-        n8n: {
-            name: "n8n",
-            description: "Workflow automation - pre-allows common integration endpoints",
-            connectors: ["openai", "slack", "github"],
-            setup_commands: [
-                'npx tf connector add openai --token $OPENAI_API_KEY',
-                'npx tf connector add slack --token $SLACK_BOT_TOKEN',
-                'npx tf connector add github --token $GITHUB_TOKEN',
-                'npx tf permissions set --gateway "workflow" --connector openai --action "*" --decision allow',
-                'npx tf permissions set --gateway "workflow" --connector slack --action "slack.message.*" --decision allow',
-                'npx tf permissions set --gateway "workflow" --connector github --action "github.issue.*" --decision allow',
-                'npx tf permissions set --gateway "workflow" --connector github --action "github.pr.merge" --decision require_approval',
-            ],
-        },
-        "claude-code": {
-            name: "Claude Code",
-            description: "AI coding assistant - pre-allows package registries and git, blocks all other outbound",
-            connectors: ["github"],
-            setup_commands: [
-                'npx tf connector add github --token $GITHUB_TOKEN',
-                'npx tf connector add generic --domains registry.npmjs.org,pypi.org --auth-type none',
-                'npx tf permissions set --gateway "claude" --connector github --action "github.api.read" --decision allow',
-                'npx tf permissions set --gateway "claude" --connector github --action "github.pr.create" --decision allow',
-                'npx tf permissions set --gateway "claude" --connector github --action "github.pr.merge" --decision require_approval',
-                'npx tf permissions set --gateway "claude" --connector github --action "github.file.commit" --decision allow',
-                'npx tf permissions set --gateway "claude" --connector generic --action "*" --decision allow',
-                '# All other outbound traffic is blocked by default',
-            ],
-        },
-    };
-    return templates[platform] ?? null;
-}
-function findGatewayBinary() {
-    const tfDir = (0, utils_1.getTfDir)();
-    const isWin = process.platform === "win32";
-    const binName = isWin ? "tameflare-gateway.exe" : "tameflare-gateway";
-    const candidates = [
-        // Preferred: downloaded binary in .tf/bin/
-        (0, path_1.join)(tfDir, "bin", binName),
-        // Dev: local build in monorepo
-        (0, path_1.join)(process.cwd(), "apps", "gateway-v2", binName),
-        (0, path_1.join)(process.cwd(), "apps", "gateway-v2", isWin ? "gateway.exe" : "gateway"),
-        // Fallback: cwd
-        (0, path_1.join)(process.cwd(), binName),
-        (0, path_1.join)(process.cwd(), isWin ? "gateway.exe" : "gateway"),
-    ];
-    for (const candidate of candidates) {
-        if ((0, fs_1.existsSync)(candidate)) {
-            return candidate;
-        }
-    }
-    return null;
-}
-function getPlatformArch() {
-    const platform = process.platform;
-    const arch = process.arch;
-    let os;
-    switch (platform) {
-        case "linux":
-            os = "linux";
-            break;
-        case "darwin":
-            os = "darwin";
-            break;
-        case "win32":
-            os = "windows";
-            break;
-        default: throw new Error(`Unsupported platform: ${platform}`);
-    }
-    let goArch;
-    switch (arch) {
-        case "x64":
-            goArch = "amd64";
-            break;
-        case "arm64":
-            goArch = "arm64";
-            break;
-        default: throw new Error(`Unsupported architecture: ${arch}`);
-    }
-    const ext = os === "windows" ? "zip" : "tar.gz";
-    return { os, arch: goArch, ext };
-}
-function followRedirects(url) {
-    return new Promise((resolve, reject) => {
-        const getter = url.startsWith("https") ? https_1.get : http_1.get;
-        getter(url, (res) => {
-            if (res.statusCode && res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
-                followRedirects(res.headers.location).then(resolve).catch(reject);
-                return;
-            }
-            if (res.statusCode && res.statusCode >= 400) {
-                reject(new Error(`HTTP ${res.statusCode} downloading ${url}`));
-                return;
-            }
-            const chunks = [];
-            res.on("data", (chunk) => chunks.push(chunk));
-            res.on("end", () => resolve(Buffer.concat(chunks)));
-            res.on("error", reject);
-        }).on("error", reject);
-    });
-}
-async function downloadGatewayBinary(tfDir) {
-    const { os, arch, ext } = getPlatformArch();
-    const archiveName = `tameflare-gateway_${GATEWAY_VERSION}_${os}_${arch}.${ext}`;
-    const downloadUrl = `https://github.com/${GITHUB_REPO}/releases/download/gateway-v${GATEWAY_VERSION}/${archiveName}`;
-    console.log(`[TF] Downloading gateway v${GATEWAY_VERSION} for ${os}/${arch}...`);
-    console.log(`[TF] From: ${downloadUrl}`);
-    const data = await followRedirects(downloadUrl);
-    const binDir = (0, path_1.join)(tfDir, "bin");
-    (0, fs_1.mkdirSync)(binDir, { recursive: true });
-    const archivePath = (0, path_1.join)(binDir, archiveName);
-    (0, fs_1.writeFileSync)(archivePath, data);
-    const isWin = os === "windows";
-    const binName = isWin ? "tameflare-gateway.exe" : "tameflare-gateway";
-    const binPath = (0, path_1.join)(binDir, binName);
-    // Extract the binary from the archive
-    if (ext === "tar.gz") {
-        try {
-            (0, child_process_1.execSync)(`tar -xzf "${archivePath}" -C "${binDir}" ${binName}`, { stdio: "pipe" });
-        }
-        catch {
-            // Some tar versions need different syntax
-            (0, child_process_1.execSync)(`tar -xzf "${archivePath}" -C "${binDir}"`, { stdio: "pipe" });
-        }
-        (0, fs_1.chmodSync)(binPath, 0o755);
-    }
-    else {
-        // Windows zip - use PowerShell
-        (0, child_process_1.execSync)(`powershell -Command "Expand-Archive -Force -Path '${archivePath}' -DestinationPath '${binDir}'"`, { stdio: "pipe" });
-    }
-    // Clean up archive
-    try {
-        (0, fs_1.unlinkSync)(archivePath);
-    }
-    catch { }
-    if (!(0, fs_1.existsSync)(binPath)) {
-        // Binary might be in a subdirectory - search for it
-        const files = (0, fs_1.readdirSync)(binDir, { recursive: true });
-        const found = files.find((f) => typeof f === "string" && f.endsWith(binName));
-        if (found) {
-            const foundPath = (0, path_1.join)(binDir, found);
-            if (foundPath !== binPath) {
-                (0, fs_1.renameSync)(foundPath, binPath);
-            }
-        }
-        else {
-            throw new Error(`Binary ${binName} not found in downloaded archive`);
-        }
-    }
-    console.log(`[TF] Gateway binary installed at ${binPath}`);
-    return binPath;
-}

package/dist/commands/logs.js

@@ -1,69 +1,61 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.logsCommand = logsCommand;
 const commander_1 = require("commander");
 const utils_1 = require("../utils");
 function logsCommand() {
     const cmd = new commander_1.Command("logs")
-        .description("View recent traffic logs")
-        .option("--gateway <name>", "Filter by gateway name")
-        .option("-n, --limit <count>", "Number of entries", "25")
-        .action(async (opts) => {
-        (0, utils_1.requireGateway)();
+        .description("View traffic logs in the dashboard")
+        .action(async () => {
+        const cfg = (0, utils_1.requireConfig)();
+        const url = `${cfg.dashboard_url}/dashboard/actions`;
+        console.log(`[TF] Traffic logs are available in the dashboard:`);
+        console.log(`  ${url}`);
+        console.log("");
+        console.log(`  Gateway: ${cfg.gateway_id}`);
+        // Try to open the browser
         try {
-            const entries = await (0, utils_1.gatewayRequest)("GET", "/internal/traffic");
-            if (!entries || entries.length === 0) {
-                console.log("[TF] No traffic logged yet.");
-                console.log("  Run a process with: tf run --name <name> <command>");
-                return;
-            }
-            let filtered = entries;
-            if (opts.gateway) {
-                filtered = entries.filter((e) => e.gateway_name === opts.gateway);
-            }
-            const limit = parseInt(opts.limit, 10);
-            filtered = filtered.slice(0, limit);
-            console.log("[TF] Recent Traffic");
-            console.log("");
-            for (const entry of filtered) {
-                const time = new Date(entry.timestamp).toLocaleTimeString();
-                const symbol = getSymbol(entry.decision);
-                const gwName = entry.gateway_name.padEnd(15);
-                const method = entry.method.padEnd(7);
-                const url = truncate(entry.url, 55);
-                const decision = entry.decision;
-                console.log(`  ${time}  ${symbol} ${gwName} ${method} ${url}  ${decision}`);
-                if (entry.reason && entry.decision !== "allowed") {
-                    console.log(`           ${" ".repeat(15)} ${"".padEnd(7)} -> ${entry.reason}`);
-                }
-            }
-            console.log("");
-            console.log(`  Showing ${filtered.length} of ${entries.length} entries`);
+            const { exec } = await Promise.resolve().then(() => __importStar(require("child_process")));
+            const openCmd = process.platform === "win32" ? "start" :
+                process.platform === "darwin" ? "open" : "xdg-open";
+            exec(`${openCmd} ${url}`);
         }
-        catch (err) {
-            console.error("[TF] Gateway is not running.");
-            console.error("  Start it with: tf init");
+        catch {
+            // Browser open is best-effort
         }
     });
     return cmd;
 }
-function getSymbol(decision) {
-    switch (decision) {
-        case "allowed":
-        case "would_allow":
-            return "\x1b[32m✓\x1b[0m";
-        case "denied":
-            return "\x1b[31m✗\x1b[0m";
-        case "would_deny":
-            return "\x1b[33m~\x1b[0m";
-        case "error":
-            return "\x1b[31m!\x1b[0m";
-        default:
-            return "?";
-    }
-}
-function truncate(s, maxLen) {
-    if (s.length <= maxLen)
-        return s;
-    return s.substring(0, maxLen - 3) + "...";
-}

package/dist/commands/run.js

@@ -6,48 +6,23 @@ const child_process_1 = require("child_process");
 const utils_1 = require("../utils");
 function runCommand() {
     const cmd = new commander_1.Command("run")
-        .description("Run a process through the TameFlare gateway proxy")
-        .requiredOption("--gateway <name>", "Gateway name (configured at tameflare.com/dashboard/gateways)")
-        .option("--name <name>", "Alias for --gateway (deprecated)")
-        .argument("<command...>", "Command to run")
-        .action(async (commandArgs, opts) => {
-        (0, utils_1.requireGateway)();
-        const processName = opts.gateway || opts.name;
+        .description("Run a process through the TameFlare cloud gateway")
+        .argument("<command...>", "Command to run (use -- before the command)")
+        .action(async (commandArgs) => {
+        const cfg = (0, utils_1.requireConfig)();
+        const proxyUrl = (0, utils_1.getProxyUrl)(cfg);
         const [command, ...args] = commandArgs;
-        console.log(`[TF] Registering process "${processName}"...`);
-        // Register process with gateway
-        let registration;
-        try {
-            registration = await (0, utils_1.gatewayRequest)("POST", "/internal/processes/register", {
-                name: processName,
-                pid: process.pid,
-            });
-        }
-        catch (err) {
-            console.error(`[TF] Failed to register process: ${err.message}`);
-            process.exit(1);
-        }
-        const proxyUrl = registration.proxy_url;
-        const caCert = registration.ca_cert;
-        console.log(`[TF] Process "${processName}" registered on port ${registration.port}`);
-        console.log(`[TF] Proxy: ${proxyUrl}`);
-        console.log(`[TF] Starting: ${command} ${args.join(" ")}`);
+        console.log(`[TF] Gateway: ${cfg.gateway_id}`);
+        console.log(`[TF] Proxy:   https://${cfg.proxy_host}`);
+        console.log(`[TF] Running: ${command} ${args.join(" ")}`);
         console.log("");
-        // Spawn child process with proxy environment variables
         const env = {
             ...process.env,
             HTTP_PROXY: proxyUrl,
             HTTPS_PROXY: proxyUrl,
             http_proxy: proxyUrl,
             https_proxy: proxyUrl,
-            // Trust the TameFlare CA certificate for various runtimes
-            NODE_EXTRA_CA_CERTS: caCert,
-            SSL_CERT_FILE: caCert,
-            REQUESTS_CA_BUNDLE: caCert,
-            CURL_CA_BUNDLE: caCert,
-            // Mark as TameFlare-wrapped (processes can detect this if needed)
-            TF_PROCESS_NAME: processName,
-            TF_PROXY_PORT: String(registration.port),
+            TF_GATEWAY_ID: cfg.gateway_id,
         };
         const child = (0, child_process_1.spawn)(command, args, {
             stdio: "inherit",
@@ -56,31 +31,18 @@ function runCommand() {
         });
         child.on("error", (err) => {
             console.error(`[TF] Failed to start command: ${err.message}`);
-            deregister(processName);
             process.exit(1);
         });
         child.on("exit", (code, signal) => {
             console.log("");
-            console.log(`[TF] Process "${processName}" exited (code ${code ?? signal})`);
-            deregister(processName);
+            console.log(`[TF] Process exited (code ${code ?? signal})`);
             process.exit(code ?? 1);
         });
-        // Clean shutdown on signals
         const cleanup = () => {
             child.kill("SIGTERM");
-            deregister(processName);
         };
         process.on("SIGINT", cleanup);
         process.on("SIGTERM", cleanup);
     });
     return cmd;
 }
-async function deregister(name) {
-    try {
-        await (0, utils_1.gatewayRequest)("POST", "/internal/processes/deregister", { name });
-        console.log(`[TF] Process "${name}" deregistered`);
-    }
-    catch {
-        // Gateway may already be down - ignore
-    }
-}

package/dist/commands/status.js

@@ -5,55 +5,33 @@ const commander_1 = require("commander");
 const utils_1 = require("../utils");
 function statusCommand() {
     const cmd = new commander_1.Command("status")
-        .description("Show gateway and process status")
+        .description("Show gateway configuration and connection status")
         .action(async () => {
-        (0, utils_1.requireGateway)();
+        const cfg = (0, utils_1.requireConfig)();
+        console.log("");
+        console.log("  TameFlare Gateway");
+        console.log("  ─────────────────────────────────");
+        console.log(`  Gateway ID:    ${cfg.gateway_id}`);
+        console.log(`  Dashboard:     ${cfg.dashboard_url}`);
+        console.log(`  Proxy:         https://${cfg.proxy_host}`);
+        console.log("");
+        // Check cloud proxy connectivity
         try {
-            const status = await (0, utils_1.gatewayRequest)("GET", "/internal/status");
-            console.log("");
-            console.log("  TameFlare Gateway");
-            console.log("  ─────────────────────────────────");
-            if (status.gateway_name) {
-                console.log(`  Gateway:       ${status.gateway_name}`);
+            const res = await fetch(`${cfg.dashboard_url}/api/health`);
+            if (res.ok) {
+                console.log(`  Dashboard:     \x1b[32mreachable\x1b[0m`);
             }
-            if (status.version) {
-                console.log(`  Version:       ${status.version}`);
+            else {
+                console.log(`  Dashboard:     \x1b[31munreachable (${res.status})\x1b[0m`);
             }
-            console.log(`  Status:        \x1b[32m${status.status}\x1b[0m`);
-            console.log(`  Enforcement:   ${status.enforcement_level}`);
-            if (status.uptime) {
-                console.log(`  Uptime:        ${status.uptime}`);
-            }
-            console.log(`  Processes:     ${status.processes_active}`);
-            if (status.connectors_active !== undefined) {
-                console.log(`  Connectors:    ${status.connectors_active}`);
-            }
-            console.log("");
-            console.log("  Traffic");
-            console.log("  ─────────────────────────────────");
-            console.log(`  Total:         ${status.traffic.total}`);
-            console.log(`  Allowed:       \x1b[32m${status.traffic.allowed}\x1b[0m`);
-            console.log(`  Denied:        \x1b[31m${status.traffic.denied}\x1b[0m`);
-            // List processes
-            const processes = await (0, utils_1.gatewayRequest)("GET", "/internal/processes");
-            if (processes && processes.length > 0) {
-                console.log("");
-                console.log("  Active Processes");
-                console.log("  ─────────────────────────────────");
-                const rows = processes.map((p) => [
-                    p.name,
-                    String(p.port),
-                    String(p.request_count),
-                    p.last_activity ? new Date(p.last_activity).toLocaleTimeString() : "-",
-                ]);
-                console.log((0, utils_1.formatTable)(["Name", "Port", "Requests", "Last Activity"], rows));
-            }
-            console.log("");
         }
-        catch (err) {
-            console.error("[TF] Gateway is not running.");
-            console.error("  Start it with: tf init");
+        catch {
+            console.log(`  Dashboard:     \x1b[31munreachable\x1b[0m`);
         }
+        console.log("");
+        console.log("  Run your agent:");
+        console.log("    tf run -- node agent.js");
+        console.log("");
     });
     return cmd;
 }

package/dist/commands/stop.js

@@ -3,37 +3,22 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.stopCommand = stopCommand;
 const commander_1 = require("commander");
 const fs_1 = require("fs");
-const path_1 = require("path");
 const utils_1 = require("../utils");
 function stopCommand() {
-    const cmd = new commander_1.Command("stop")
-        .description("Stop the TameFlare gateway")
+    const cmd = new commander_1.Command("reset")
+        .description("Remove TameFlare configuration from this directory")
         .action(async () => {
-        (0, utils_1.requireGateway)();
-        const pidFile = (0, path_1.join)((0, utils_1.getTfDir)(), "gateway.pid");
-        if (!(0, fs_1.existsSync)(pidFile)) {
-            console.log("[TF] No running gateway found (no PID file).");
+        if (!(0, utils_1.isInitialized)()) {
+            console.log("[TF] Not initialized in this directory.");
             return;
         }
-        const pid = parseInt((0, fs_1.readFileSync)(pidFile, "utf-8").trim(), 10);
         try {
-            process.kill(pid, "SIGTERM");
-            console.log(`[TF] Gateway (PID ${pid}) stopped.`);
+            (0, fs_1.rmSync)((0, utils_1.getTfDir)(), { recursive: true, force: true });
+            console.log("[TF] Configuration removed.");
+            console.log("  Run 'tf init' to set up again.");
         }
         catch (err) {
-            if (err.code === "ESRCH") {
-                console.log("[TF] Gateway process not found (already stopped).");
-            }
-            else {
-                console.error(`[TF] Failed to stop gateway: ${err.message}`);
-            }
-        }
-        // Clean up PID file
-        try {
-            (0, fs_1.unlinkSync)(pidFile);
-        }
-        catch {
-            // Ignore
+            console.error(`[TF] Failed to remove config: ${err.message}`);
         }
     });
     return cmd;

package/dist/index.js

@@ -2,20 +2,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const commander_1 = require("commander");
+const login_1 = require("./commands/login");
 const init_1 = require("./commands/init");
 const run_1 = require("./commands/run");
 const status_1 = require("./commands/status");
 const stop_1 = require("./commands/stop");
 const logs_1 = require("./commands/logs");
-const kill_switch_1 = require("./commands/kill-switch");
-const connector_1 = require("./commands/connector");
-const approvals_1 = require("./commands/approvals");
-const login_1 = require("./commands/login");
 const program = new commander_1.Command();
 program
     .name("tf")
-    .description("TameFlare - Govern and secure AI gateway traffic")
-    .version("0.9.0");
+    .description("TameFlare - Route AI agent traffic through a secure cloud gateway")
+    .version("0.10.0");
 program.addCommand((0, login_1.loginCommand)());
 program.addCommand((0, login_1.logoutCommand)());
 program.addCommand((0, init_1.initCommand)());
@@ -23,8 +20,4 @@ program.addCommand((0, run_1.runCommand)());
 program.addCommand((0, status_1.statusCommand)());
 program.addCommand((0, stop_1.stopCommand)());
 program.addCommand((0, logs_1.logsCommand)());
-program.addCommand((0, kill_switch_1.killSwitchCommand)());
-program.addCommand((0, connector_1.connectorCommand)());
-program.addCommand((0, connector_1.permissionsCommand)());
-program.addCommand((0, approvals_1.approvalsCommand)());
 program.parse();

package/dist/utils.d.ts

@@ -1,7 +1,14 @@
+export interface TfConfig {
+    dashboard_url: string;
+    gateway_id: string;
+    gateway_token: string;
+    proxy_host: string;
+}
 export declare function getTfDir(): string;
 export declare function getConfigPath(): string;
-export declare function getGatewayUrl(): string;
-export declare function isGatewayInitialized(): boolean;
-export declare function gatewayRequest(method: string, path: string, body?: any): Promise<any>;
-export declare function requireGateway(): void;
+export declare function isInitialized(): boolean;
+export declare function loadConfig(): TfConfig | null;
+export declare function requireConfig(): TfConfig;
+export declare function getProxyUrl(cfg: TfConfig): string;
+export declare function dashboardRequest(cfg: TfConfig, method: string, path: string, body?: any): Promise<any>;
 export declare function formatTable(headers: string[], rows: string[][]): string;

package/dist/utils.js

@@ -2,57 +2,77 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getTfDir = getTfDir;
 exports.getConfigPath = getConfigPath;
-exports.getGatewayUrl = getGatewayUrl;
-exports.isGatewayInitialized = isGatewayInitialized;
-exports.gatewayRequest = gatewayRequest;
-exports.requireGateway = requireGateway;
+exports.isInitialized = isInitialized;
+exports.loadConfig = loadConfig;
+exports.requireConfig = requireConfig;
+exports.getProxyUrl = getProxyUrl;
+exports.dashboardRequest = dashboardRequest;
 exports.formatTable = formatTable;
 const fs_1 = require("fs");
 const path_1 = require("path");
-const GATEWAY_PORT = 9443;
 function getTfDir() {
     return (0, path_1.join)(process.cwd(), ".tf");
 }
 function getConfigPath() {
     return (0, path_1.join)(getTfDir(), "config.yaml");
 }
-function getGatewayUrl() {
-    return `http://127.0.0.1:${GATEWAY_PORT}`;
-}
-function isGatewayInitialized() {
+function isInitialized() {
     return (0, fs_1.existsSync)(getConfigPath());
 }
-async function gatewayRequest(method, path, body) {
-    const url = `${getGatewayUrl()}${path}`;
-    const headers = {
-        "Content-Type": "application/json",
-    };
+function loadConfig() {
     try {
-        const response = await fetch(url, {
-            method,
-            headers,
-            body: body ? JSON.stringify(body) : undefined,
-        });
-        if (!response.ok) {
-            const error = await response.json().catch(() => ({
-                error: response.statusText,
-            }));
-            throw new Error(`Gateway error (${response.status}): ${error.error || error.message || response.statusText}`);
-        }
-        return response.json();
+        const text = (0, fs_1.readFileSync)(getConfigPath(), "utf-8");
+        const get = (key) => {
+            const m = text.match(new RegExp(`${key}:\\s*"(.+?)"`));
+            return m?.[1] ?? "";
+        };
+        const cfg = {
+            dashboard_url: get("url"),
+            gateway_id: get("gateway_id"),
+            gateway_token: get("gateway_token"),
+            proxy_host: get("host") || "proxy.tameflare.com",
+        };
+        if (!cfg.gateway_id || !cfg.gateway_token)
+            return null;
+        return cfg;
     }
-    catch (err) {
-        if (err.cause?.code === "ECONNREFUSED") {
-            throw new Error("Gateway is not running. Start it with 'tf init' first.");
-        }
-        throw err;
+    catch {
+        return null;
     }
 }
-function requireGateway() {
-    if (!isGatewayInitialized()) {
-        console.error("Error: TameFlare not initialized. Run 'tf init' first.");
+function requireConfig() {
+    if (!isInitialized()) {
+        console.error("[TF] Not initialized. Run 'tf init' first.");
+        process.exit(1);
+    }
+    const cfg = loadConfig();
+    if (!cfg) {
+        console.error("[TF] Invalid config. Run 'tf init' to reconfigure.");
         process.exit(1);
     }
+    return cfg;
+}
+function getProxyUrl(cfg) {
+    return `https://${cfg.gateway_token}@${cfg.proxy_host}`;
+}
+async function dashboardRequest(cfg, method, path, body) {
+    const url = `${cfg.dashboard_url}${path}`;
+    const headers = {
+        "Content-Type": "application/json",
+        "X-Gateway-Token": cfg.gateway_token,
+    };
+    const response = await fetch(url, {
+        method,
+        headers,
+        body: body ? JSON.stringify(body) : undefined,
+    });
+    if (!response.ok) {
+        const error = await response.json().catch(() => ({
+            error: response.statusText,
+        }));
+        throw new Error(`Dashboard error (${response.status}): ${error.error || error.message || response.statusText}`);
+    }
+    return response.json();
 }
 function formatTable(headers, rows) {
     const widths = headers.map((h, i) => Math.max(h.length, ...rows.map((r) => (r[i] ?? "").length)));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tameflare/cli",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "TameFlare CLI - secure and govern AI agent traffic through a transparent proxy gateway",
   "bin": {
     "tf": "dist/index.js"