@gethelio/proxy 0.6.0 → 0.8.0

package/dist/cli.js

@@ -3277,6 +3277,7 @@ var GovernedForwarder = class {
     let result;
     let approvalOutcome;
     let approvalWaitMs = 0;
+    let approvalContext;
     let rateLimitResult;
     let spendLimitResult;
     let forwardingError;
@@ -3306,6 +3307,7 @@ var GovernedForwarder = class {
           result = approvalResult.result;
           approvalOutcome = approvalResult.outcome;
           approvalWaitMs = approvalResult.approvalWaitMs;
+          approvalContext = approvalResult.approvalContext;
         }
       } else if (decision.action === "rate_limit") {
         if (!this.rateLimiter) {
@@ -3358,6 +3360,7 @@ var GovernedForwarder = class {
       dependencyResult,
       evidenceBlocked,
       approvalOutcome,
+      approvalContext,
       rateLimitResult,
       spendLimitResult,
       isDryRun,
@@ -3379,6 +3382,16 @@ var GovernedForwarder = class {
       request.signal
     );
     const approvalWaitMs = performance.now() - approvalStart;
+    const ticket = outcome.ticketId ? router.getTicket(outcome.ticketId) : void 0;
+    const denialReason = outcome.status === "denied" && outcome.reason ? outcome.reason : void 0;
+    const approvalContext = outcome.ticketId && (denialReason || ticket?.escalated_at) ? {
+      ticket_id: outcome.ticketId,
+      ...denialReason ? { denial_reason: denialReason } : {},
+      ...ticket?.escalated_at ? {
+        escalated_at: ticket.escalated_at,
+        escalated_to: [...ticket.escalated_to ?? []]
+      } : {}
+    } : void 0;
     let result;
     if (outcome.status === "approved" || outcome.status === "break_glass") {
       if (request.signal?.aborted) {
@@ -3407,7 +3420,7 @@ var GovernedForwarder = class {
         result = makeErrorResult(request, POLICY_DENIED, message, { ...feedback });
       }
     }
-    return { result, outcome, approvalWaitMs };
+    return { result, outcome, approvalWaitMs, approvalContext };
   }
   async handleRateLimit(request, decision, toolName) {
     const limiter = this.rateLimiter;
@@ -3587,7 +3600,7 @@ var GovernedForwarder = class {
   wasForwardedUpstream(decision, approvalOutcome, rateLimitResult, spendLimitResult) {
     return decision.action === "allow" || approvalOutcome?.status === "approved" || approvalOutcome?.status === "break_glass" || approvalOutcome?.status === "timeout" && this.approvalRouter?.defaultOnTimeout === "allow" || rateLimitResult?.allowed === true || spendLimitResult?.allowed === true;
   }
-  writeAuditRecord(request, timestamp, toolName, toolArguments, decision, result, totalDurationMs, approvalWaitMs, flaggedDestructive, evidenceResult, dependencyResult, evidenceBlocked, approvalOutcome, rateLimitResult, spendLimitResult, isDryRun, forwardingError, drift) {
+  writeAuditRecord(request, timestamp, toolName, toolArguments, decision, result, totalDurationMs, approvalWaitMs, flaggedDestructive, evidenceResult, dependencyResult, evidenceBlocked, approvalOutcome, approvalContext, rateLimitResult, spendLimitResult, isDryRun, forwardingError, drift) {
     if (!this.auditWriter) return;
     const wasForwarded = this.wasForwardedUpstream(
       decision,
@@ -3622,6 +3635,12 @@ var GovernedForwarder = class {
         }
       };
     }
+    if (approvalContext) {
+      evidenceChain = {
+        ...evidenceChain ?? {},
+        approval: { ...approvalContext }
+      };
+    }
     if (rateLimitResult) {
       evidenceChain = {
         ...evidenceChain ?? {},
@@ -5255,6 +5274,7 @@ var EvidenceStore = class _EvidenceStore {
 // src/evidence/api.ts
 import { Hono as Hono5 } from "hono";
 import { bodyLimit } from "hono/body-limit";
+import { HTTPException } from "hono/http-exception";
 import { z as z5 } from "zod";
 
 // src/auth/bearer.ts
@@ -5455,6 +5475,11 @@ function createSidebandApp(store, options = {}) {
   const app = new Hono5();
   const sdkToken = options.token && options.token.length > 0 ? options.token : void 0;
   const adapterToken = options.adapterToken && options.adapterToken.length > 0 ? options.adapterToken : void 0;
+  app.onError((err, c) => {
+    if (err instanceof HTTPException) return err.getResponse();
+    console.error("[helio] Unhandled sideband API error:", err);
+    return c.json({ error: "Internal server error" }, 500);
+  });
   app.use("*", async (c, next) => {
     const origin = c.req.header("origin");
     if (origin) {
@@ -5832,6 +5857,7 @@ var GovernanceService = class {
     }
     let approvalStatus = null;
     let approvedBy = null;
+    let approvalContext;
     if (entry.approvalTicketId) {
       const ticket = this.getTicketStatus(entry.approvalTicketId);
       const status = ticket?.status;
@@ -5840,6 +5866,16 @@ var GovernanceService = class {
       }
       approvalStatus = status;
       approvedBy = ticket.resolved_by ?? null;
+      if (ticket.denial_reason || ticket.escalated_at) {
+        approvalContext = {
+          ticket_id: entry.approvalTicketId,
+          ...ticket.denial_reason ? { denial_reason: ticket.denial_reason } : {},
+          ...ticket.escalated_at ? {
+            escalated_at: ticket.escalated_at,
+            escalated_to: [...ticket.escalated_to ?? []]
+          } : {}
+        };
+      }
     }
     if (req.actual_amount !== void 0) {
       if (!Number.isFinite(req.actual_amount) || req.actual_amount < 0) {
@@ -5876,6 +5912,7 @@ var GovernanceService = class {
       limitsChain,
       approvalStatus,
       approvedBy,
+      approvalContext,
       upstreamError: req.status === "error" ? req.error ?? "tool call failed" : null,
       upstreamResponse: req.result ?? null,
       upstreamLatencyMs: req.duration_ms ?? null
@@ -6281,6 +6318,9 @@ var GovernanceService = class {
     if (args.sidebandUnreported) {
       evidenceChain = { ...evidenceChain ?? {}, sideband: { unreported: true } };
     }
+    if (args.approvalContext) {
+      evidenceChain = { ...evidenceChain ?? {}, approval: { ...args.approvalContext } };
+    }
     const record = {
       timestamp: args.timestampIso,
       session_id: args.sessionId,
@@ -7367,6 +7407,7 @@ import { readFileSync } from "fs";
 import { join } from "path";
 import { randomUUID as randomUUID6 } from "crypto";
 import { Hono as Hono8 } from "hono";
+import { HTTPException as HTTPException2 } from "hono/http-exception";
 import { z as z8 } from "zod";
 import { cors } from "hono/cors";
 import { serveStatic } from "@hono/node-server/serve-static";
@@ -7633,6 +7674,16 @@ function shouldSetSecureCookie(url, xForwardedProto) {
   if (xForwardedProto?.toLowerCase() === "https") return true;
   return new URL(url).protocol === "https:";
 }
+function isPrivateIpv4(host) {
+  const match = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(host);
+  if (!match) return false;
+  const a = Number(match[1]);
+  const b = Number(match[2]);
+  const c = Number(match[3]);
+  const d = Number(match[4]);
+  if (a > 255 || b > 255 || c > 255 || d > 255) return false;
+  return a === 10 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168;
+}
 function createDashboardAppWithLifecycle(deps, options) {
   const {
     auditStore,
@@ -7646,6 +7697,11 @@ function createDashboardAppWithLifecycle(deps, options) {
   const apiSecret = options?.apiSecret;
   const sessionStore = apiSecret ? new DashboardSessionStore({ secret: apiSecret, ttlMs: SESSION_TTL_MS }) : void 0;
   const app = new Hono8();
+  app.onError((err, c) => {
+    if (err instanceof HTTPException2) return err.getResponse();
+    console.error("[helio] Unhandled dashboard API error:", err);
+    return c.json({ error: "Internal server error" }, 500);
+  });
   app.use(
     "*",
     cors({
@@ -7655,7 +7711,7 @@ function createDashboardAppWithLifecycle(deps, options) {
           const url = new URL(origin);
           const h = url.hostname;
           if (h === "localhost" || h === "127.0.0.1" || h === "0.0.0.0") return origin;
-          if (/^(10\.|172\.(1[6-9]|2\d|3[01])\.|192\.168\.)/.test(h)) return origin;
+          if (isPrivateIpv4(h)) return origin;
         } catch {
         }
         return null;
@@ -8045,6 +8101,13 @@ function warnIfDashboardOpenMode(config, log = console.error) {
   );
   return true;
 }
+function warnIfNoEnforcement(policy, log = console.error) {
+  if (policy.rules.length > 0 || policy.defaultAction !== "allow" || policy.dryRun) return false;
+  log(
+    '[helio] No policy rules are loaded and the default action is "allow" - Helio is recording an audit trail but NOT blocking anything. Add rules under `policies:` in helio.yaml to start enforcing (see docs/policies.md).'
+  );
+  return true;
+}
 
 // src/crash-drain.ts
 var hooks = [];
@@ -8117,18 +8180,6 @@ upstream:
 #   headers:
 #     Authorization: "Bearer \${UPSTREAM_TOKEN}"
 
-# Operator dashboard + approval REST API. Bound to 127.0.0.1 by default \u2014 do
-# not change to 0.0.0.0 without putting an authenticating reverse proxy in
-# front. dashboard.api_secret is the manual dashboard login secret and also
-# supports machine Bearer auth for sideband API clients. Store it safely; it
-# stays valid until you rotate it. Rotate by editing this file and restarting
-# (or hot-reloading) the proxy. Rotation invalidates active dashboard sessions.
-dashboard:
-  enabled: true
-  port: 3100
-  host: 127.0.0.1
-  api_secret: "${apiSecret}"
-
 # listen:
 #   port: 3000
 #   host: 127.0.0.1
@@ -8149,6 +8200,18 @@ dashboard:
 #   retention: 90d
 #   include_responses: true
 
+# Operator dashboard + approval REST API. Bound to 127.0.0.1 by default \u2014 do
+# not change to 0.0.0.0 without putting an authenticating reverse proxy in
+# front. dashboard.api_secret is the manual dashboard login secret and also
+# supports machine Bearer auth for sideband API clients. Store it safely; it
+# stays valid until you rotate it. Rotate by editing this file and restarting
+# (or hot-reloading) the proxy. Rotation invalidates active dashboard sessions.
+dashboard:
+  enabled: true
+  port: 3100
+  host: 127.0.0.1
+  api_secret: "${apiSecret}"
+
 # sdk:
 #   enabled: false
 #   port: 3200
@@ -8444,6 +8507,7 @@ async function startCommand(configPath, options) {
   console.error(
     `Policies: ${String(ruleCount)} rule${ruleCount !== 1 ? "s" : ""} loaded (default: ${policy.defaultAction})`
   );
+  warnIfNoEnforcement(policy);
   if (config.upstream.transport === "stdio") {
     console.error(`Upstream: ${config.upstream.command ?? ""} (stdio)`);
   } else {