@node9/proxy 1.29.0 → 1.31.0

package/dist/dashboard.mjs

@@ -2220,7 +2220,13 @@ var init_config_schema = __esm({
         allowGlobalPause: z.boolean().optional(),
         auditHashArgs: z.boolean().optional(),
         agentPolicy: z.enum(["require_approval", "block_on_rules"]).optional(),
-        cloudSyncIntervalHours: z.number().positive().optional()
+        cloudSyncIntervalHours: z.number().positive().optional(),
+        // Outbox shipper (audit.log → SaaS batch ingest). enabled defaults
+        // to true; set false to fall back to local-only auditing.
+        shipper: z.object({
+          enabled: z.boolean().optional(),
+          intervalSeconds: z.number().min(5).optional()
+        }).optional()
       }).optional(),
       policy: z.object({
         sandboxPaths: z.array(z.string()).optional(),
@@ -2235,7 +2241,15 @@ var init_config_schema = __esm({
         }).optional(),
         dlp: z.object({
           enabled: z.boolean().optional(),
-          scanIgnoredTools: z.boolean().optional()
+          scanIgnoredTools: z.boolean().optional(),
+          pii: z.enum(["off", "block"]).optional()
+        }).optional(),
+        egress: z.object({
+          enabled: z.boolean().optional(),
+          mode: z.enum(["off", "review", "block"]).optional(),
+          allow: z.array(z.string()).optional(),
+          deny: z.array(z.string()).optional(),
+          allowPrivate: z.boolean().optional()
         }).optional(),
         loopDetection: z.object({
           enabled: z.boolean().optional(),
@@ -2355,7 +2369,8 @@ var init_config = __esm({
         flightRecorder: true,
         auditHashArgs: true,
         approvers: { native: true, browser: false, cloud: false, terminal: true },
-        cloudSyncIntervalHours: 5
+        cloudSyncIntervalHours: 5,
+        shipper: { enabled: true, intervalSeconds: 20 }
       },
       policy: {
         sandboxPaths: ["/tmp/**", "**/sandbox/**", "**/test-results/**"],
@@ -2539,7 +2554,8 @@ var init_config = __esm({
             description: "The AI wants to download a script from the internet and run it immediately, without you seeing what it contains. This is one of the most common ways malware gets installed."
           }
         ],
-        dlp: { enabled: true, scanIgnoredTools: true },
+        dlp: { enabled: true, scanIgnoredTools: true, pii: "off" },
+        egress: { enabled: false, mode: "review", allow: [], deny: [], allowPrivate: true },
         loopDetection: { enabled: true, threshold: 5, windowSeconds: 120 },
         skillPinning: { enabled: false, mode: "warn", roots: [] }
       },
@@ -2635,6 +2651,14 @@ var init_litellm = __esm({
   }
 });
 
+// src/cost-codex.ts
+var init_cost_codex = __esm({
+  "src/cost-codex.ts"() {
+    "use strict";
+    init_litellm();
+  }
+});
+
 // src/costSync.ts
 function decodeProjectDirName(dirName) {
   return dirName.replace(/-/g, "/");
@@ -2646,6 +2670,7 @@ var init_costSync = __esm({
     init_config();
     init_audit();
     init_litellm();
+    init_cost_codex();
     SYNC_INTERVAL_MS = 10 * 60 * 1e3;
   }
 });