@node9/policy-engine 2.14.2 → 2.14.3

package/dist/index.d.mts

@@ -571,6 +571,19 @@ interface PolicyVerdict {
     matchedField?: string;
     matchedWord?: string;
     tier?: 1 | 2 | 3 | 4 | 5 | 6 | 7;
+    /**
+     * False when NO human may override this verdict: the SSRF tier-1 floors,
+     * whose own reason string already tells the user "This address cannot be
+     * allowlisted". Absent means an override is a legitimate product decision,
+     * which is every other verdict.
+     *
+     * It exists because the host downgrades a hard block into a review whenever a
+     * human approver is reachable (orchestrator.ts, `mayDowngrade`). That is right
+     * for a smart-rule block and wrong for a floor, and the host could not tell
+     * the two apart: `overridable` was computed in egress/ssrf.ts, rendered into
+     * the reason sentence, and then dropped here.
+     */
+    overridable?: boolean;
     ruleName?: string;
     /** State predicates from the matched smart rule (only when decision is 'block'). */
     dependsOnStatePredicates?: string[];

package/dist/index.d.ts

@@ -571,6 +571,19 @@ interface PolicyVerdict {
     matchedField?: string;
     matchedWord?: string;
     tier?: 1 | 2 | 3 | 4 | 5 | 6 | 7;
+    /**
+     * False when NO human may override this verdict: the SSRF tier-1 floors,
+     * whose own reason string already tells the user "This address cannot be
+     * allowlisted". Absent means an override is a legitimate product decision,
+     * which is every other verdict.
+     *
+     * It exists because the host downgrades a hard block into a review whenever a
+     * human approver is reachable (orchestrator.ts, `mayDowngrade`). That is right
+     * for a smart-rule block and wrong for a floor, and the host could not tell
+     * the two apart: `overridable` was computed in egress/ssrf.ts, rendered into
+     * the reason sentence, and then dropped here.
+     */
+    overridable?: boolean;
     ruleName?: string;
     /** State predicates from the matched smart rule (only when decision is 'block'). */
     dependsOnStatePredicates?: string[];

package/dist/index.js

@@ -4009,7 +4009,8 @@ async function evaluatePolicy(config, toolName, args, context = {}, hooks = {})
         reason: dest.reason,
         ruleName: `ssrf:${dest.tier}:${toolName}:${dest.host}`,
         ruleDescription: dest.reason,
-        tier: 3
+        tier: 3,
+        overridable: dest.overridable
       };
     }
   }
@@ -4158,7 +4159,8 @@ async function evaluatePolicy(config, toolName, args, context = {}, hooks = {})
           reason: ssrf.reason,
           ruleName: `ssrf:${ssrf.tier}:${ssrf.binary}:${ssrf.host}`,
           ruleDescription: ssrf.reason,
-          tier: 3
+          tier: 3,
+          overridable: ssrf.overridable
         };
       }
     }

package/dist/index.mjs

@@ -3869,7 +3869,8 @@ async function evaluatePolicy(config, toolName, args, context = {}, hooks = {})
         reason: dest.reason,
         ruleName: `ssrf:${dest.tier}:${toolName}:${dest.host}`,
         ruleDescription: dest.reason,
-        tier: 3
+        tier: 3,
+        overridable: dest.overridable
       };
     }
   }
@@ -4018,7 +4019,8 @@ async function evaluatePolicy(config, toolName, args, context = {}, hooks = {})
           reason: ssrf.reason,
           ruleName: `ssrf:${ssrf.tier}:${ssrf.binary}:${ssrf.host}`,
           ruleDescription: ssrf.reason,
-          tier: 3
+          tier: 3,
+          overridable: ssrf.overridable
         };
       }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/policy-engine",
-  "version": "2.14.2",
+  "version": "2.14.3",
   "description": "Shared policy evaluation engine for node9 — DLP, smart rules, AST shell parsing, shields, loop detection. Pure functions, no I/O. Used by both node9-proxy and the node9 SaaS firewall.",
   "license": "Apache-2.0",
   "homepage": "https://node9.ai",