@node9/proxy 1.57.0 → 1.58.0

package/dist/dashboard.mjs

@@ -3435,6 +3435,15 @@ async function loadGeminiCostAsync(start, end, geminiTmpDir) {
   }
   return freezeGeminiCost(acc);
 }
+function dimensionOfBlock(checkedBy, ruleName) {
+  if (checkedBy.includes("egress")) return "network";
+  if (checkedBy.includes("pii") || checkedBy.includes("dlp")) return "data";
+  if (checkedBy === "app-permission-block" || ruleName.startsWith("app-permission:")) return "mcp";
+  if (ruleName.startsWith("shield:project-jail")) return "files";
+  if (checkedBy === "loop-detected") return "toolRules";
+  if (checkedBy === "timeout" || checkedBy === "local-decision") return "approvals";
+  return "toolRules";
+}
 function aggregateReportFromAudit(period, opts = {}) {
   const now = opts.now ?? /* @__PURE__ */ new Date();
   const auditLogPath2 = opts.auditLogPath ?? path6.join(os6.homedir(), ".node9", "audit.log");
@@ -3494,7 +3503,9 @@ function aggregateReportFromAudit(period, opts = {}) {
     const ts = new Date(e.ts);
     return ts >= priorStart && ts <= priorEnd;
   });
-  const priorBlocked = priorEntries.filter((e) => !isAllow(e.decision)).length;
+  const priorBlocked = priorEntries.filter(
+    (e) => typeof e.decision === "string" && !isAllow(e.decision)
+  ).length;
   const priorBlockRate = priorEntries.length > 0 ? priorBlocked / priorEntries.length : null;
   const excludeTests = opts.excludeTests === true;
   const testTs = excludeTests ? buildTestTimestamps(allEntries) : /* @__PURE__ */ new Set();
@@ -3502,6 +3513,7 @@ function aggregateReportFromAudit(period, opts = {}) {
   const entries = allEntries.filter((e) => {
     if (e.source === "post-hook") return false;
     if (e.source === "response-dlp") return false;
+    if (typeof e.decision !== "string") return false;
     const ts = new Date(e.ts);
     if (ts < start || ts > end) return false;
     if (excludeTests && isTestEntry(e, testTs)) {
@@ -3527,6 +3539,11 @@ function aggregateReportFromAudit(period, opts = {}) {
   const mcpMap = /* @__PURE__ */ new Map();
   const dailyMap = /* @__PURE__ */ new Map();
   const hourMap = /* @__PURE__ */ new Map();
+  let dimNetworkBlocked = 0;
+  let dimDataObserved = 0;
+  let dimFilesBlocked = 0;
+  let dimToolRulesBlocked = 0;
+  let dimMcpBlocked = 0;
   for (const e of entries) {
     if (superseded.has(supersedeKey(e))) continue;
     const allow = isAllow(e.decision);
@@ -3543,6 +3560,26 @@ function aggregateReportFromAudit(period, opts = {}) {
       else if (e.checkedBy !== "loop-detected") hardBlocked++;
     }
     if (e.checkedBy === "loop-detected") loopHits++;
+    const cb = e.checkedBy ?? "";
+    if (cb.includes("would-block") && (cb.includes("pii") || cb.includes("dlp"))) {
+      dimDataObserved++;
+    }
+    if (!allow && !userInteracted) {
+      switch (dimensionOfBlock(cb, e.ruleName ?? "")) {
+        case "network":
+          dimNetworkBlocked++;
+          break;
+        case "files":
+          dimFilesBlocked++;
+          break;
+        case "mcp":
+          dimMcpBlocked++;
+          break;
+        case "toolRules":
+          dimToolRulesBlocked++;
+          break;
+      }
+    }
     const t = toolMap.get(e.tool) ?? { calls: 0, blocked: 0 };
     t.calls++;
     if (!allow) t.blocked++;
@@ -3613,6 +3650,14 @@ function aggregateReportFromAudit(period, opts = {}) {
     mcpMap,
     dailyMap,
     hourMap,
+    dimensions: {
+      network: { blocked: dimNetworkBlocked },
+      data: { blocked: dlpBlocked, observed: dimDataObserved },
+      approvals: { approved: userApproved, denied: userDenied, timedOut },
+      files: { blocked: dimFilesBlocked },
+      toolRules: { blocked: dimToolRulesBlocked, mcp: dimMcpBlocked, loops: loopHits },
+      cost: { totalUSD: claudeCost.total + codexCost.total + geminiCost.total }
+    },
     generatedAt: now.toISOString()
   };
   return { data, hasAuditFile, responseDlpEntries };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.57.0",
+  "version": "1.58.0",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",