@node9/proxy 1.39.0 → 1.41.0

package/dist/dashboard.mjs

@@ -2265,6 +2265,11 @@ var init_config_schema = __esm({
         allowGlobalPause: z.boolean().optional(),
         auditHashArgs: z.boolean().optional(),
         agentPolicy: z.enum(["require_approval", "block_on_rules"]).optional(),
+        // Where a `review` verdict's prompt is rendered: 'ask' = the agent's own
+        // inline approve/deny prompt (Claude Code / GitHub Copilot); 'approver' =
+        // node9's own approver (terminal/native/cloud). Unset → smart default
+        // (ask for ask-capable agents unless a cloud approver is configured).
+        reviewChannel: z.enum(["ask", "approver"]).optional(),
         cloudSyncIntervalHours: z.number().positive().optional(),
         // Outbox shipper (audit.log → SaaS batch ingest). enabled defaults
         // to true; set false to fall back to local-only auditing.

package/dist/index.js

@@ -278,6 +278,11 @@ var ConfigFileSchema = import_zod.z.object({
     allowGlobalPause: import_zod.z.boolean().optional(),
     auditHashArgs: import_zod.z.boolean().optional(),
     agentPolicy: import_zod.z.enum(["require_approval", "block_on_rules"]).optional(),
+    // Where a `review` verdict's prompt is rendered: 'ask' = the agent's own
+    // inline approve/deny prompt (Claude Code / GitHub Copilot); 'approver' =
+    // node9's own approver (terminal/native/cloud). Unset → smart default
+    // (ask for ask-capable agents unless a cloud approver is configured).
+    reviewChannel: import_zod.z.enum(["ask", "approver"]).optional(),
     cloudSyncIntervalHours: import_zod.z.number().positive().optional(),
     // Outbox shipper (audit.log → SaaS batch ingest). enabled defaults
     // to true; set false to fall back to local-only auditing.
@@ -3731,6 +3736,7 @@ function getConfig(cwd) {
     if (s.approvalTimeoutSeconds !== void 0 && s.approvalTimeoutMs === void 0)
       mergedSettings.approvalTimeoutMs = s.approvalTimeoutSeconds * 1e3;
     if (s.environment !== void 0) mergedSettings.environment = s.environment;
+    if (s.reviewChannel !== void 0) mergedSettings.reviewChannel = s.reviewChannel;
     if (s.cloudSyncIntervalHours !== void 0)
       mergedSettings.cloudSyncIntervalHours = s.cloudSyncIntervalHours;
     if (s.hud !== void 0) mergedSettings.hud = { ...mergedSettings.hud, ...s.hud };
@@ -5006,7 +5012,7 @@ async function authorizeHeadless(toolName, args, meta, options) {
         tool: toolName,
         args,
         ts: actTs,
-        status: result.approved ? "allow" : result.blockedByLabel?.includes("DLP") ? "dlp" : result.blockedByLabel?.includes("Taint") ? "taint" : "block",
+        status: result.review ? "review" : result.approved ? "allow" : result.blockedByLabel?.includes("DLP") ? "dlp" : result.blockedByLabel?.includes("Taint") ? "taint" : "block",
         label: result.blockedByLabel,
         ruleHit: result.ruleHit,
         observeWouldBlock: result.observeWouldBlock,
@@ -5369,6 +5375,16 @@ async function _authorizeHeadlessCore(toolName, args, metaArg, options) {
       taintWarning
     );
   }
+  const cloudEnforcedForDefer = approvers.cloud && !!creds?.apiKey;
+  if (options?.deferReview && !taintWarning && !cloudEnforcedForDefer) {
+    return {
+      approved: false,
+      review: true,
+      reason: explainableLabel || "Node9 flagged this action for review.",
+      ruleDescription: policyRuleDescription,
+      blockedByLabel: explainableLabel
+    };
+  }
   let cloudRequestId = null;
   const cloudEnforced = approvers.cloud && !!creds?.apiKey;
   const forceReview = localSmartRuleMatched === true || options?.localSmartRuleMatched === true || void 0;

package/dist/index.mjs

@@ -248,6 +248,11 @@ var ConfigFileSchema = z.object({
     allowGlobalPause: z.boolean().optional(),
     auditHashArgs: z.boolean().optional(),
     agentPolicy: z.enum(["require_approval", "block_on_rules"]).optional(),
+    // Where a `review` verdict's prompt is rendered: 'ask' = the agent's own
+    // inline approve/deny prompt (Claude Code / GitHub Copilot); 'approver' =
+    // node9's own approver (terminal/native/cloud). Unset → smart default
+    // (ask for ask-capable agents unless a cloud approver is configured).
+    reviewChannel: z.enum(["ask", "approver"]).optional(),
     cloudSyncIntervalHours: z.number().positive().optional(),
     // Outbox shipper (audit.log → SaaS batch ingest). enabled defaults
     // to true; set false to fall back to local-only auditing.
@@ -3701,6 +3706,7 @@ function getConfig(cwd) {
     if (s.approvalTimeoutSeconds !== void 0 && s.approvalTimeoutMs === void 0)
       mergedSettings.approvalTimeoutMs = s.approvalTimeoutSeconds * 1e3;
     if (s.environment !== void 0) mergedSettings.environment = s.environment;
+    if (s.reviewChannel !== void 0) mergedSettings.reviewChannel = s.reviewChannel;
     if (s.cloudSyncIntervalHours !== void 0)
       mergedSettings.cloudSyncIntervalHours = s.cloudSyncIntervalHours;
     if (s.hud !== void 0) mergedSettings.hud = { ...mergedSettings.hud, ...s.hud };
@@ -4976,7 +4982,7 @@ async function authorizeHeadless(toolName, args, meta, options) {
         tool: toolName,
         args,
         ts: actTs,
-        status: result.approved ? "allow" : result.blockedByLabel?.includes("DLP") ? "dlp" : result.blockedByLabel?.includes("Taint") ? "taint" : "block",
+        status: result.review ? "review" : result.approved ? "allow" : result.blockedByLabel?.includes("DLP") ? "dlp" : result.blockedByLabel?.includes("Taint") ? "taint" : "block",
         label: result.blockedByLabel,
         ruleHit: result.ruleHit,
         observeWouldBlock: result.observeWouldBlock,
@@ -5339,6 +5345,16 @@ async function _authorizeHeadlessCore(toolName, args, metaArg, options) {
       taintWarning
     );
   }
+  const cloudEnforcedForDefer = approvers.cloud && !!creds?.apiKey;
+  if (options?.deferReview && !taintWarning && !cloudEnforcedForDefer) {
+    return {
+      approved: false,
+      review: true,
+      reason: explainableLabel || "Node9 flagged this action for review.",
+      ruleDescription: policyRuleDescription,
+      blockedByLabel: explainableLabel
+    };
+  }
   let cloudRequestId = null;
   const cloudEnforced = approvers.cloud && !!creds?.apiKey;
   const forceReview = localSmartRuleMatched === true || options?.localSmartRuleMatched === true || void 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.39.0",
+  "version": "1.41.0",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",