@node9/proxy 1.60.0 → 1.61.0

package/dist/cli.js

@@ -49212,9 +49212,10 @@ function loadGeminiCost(start, end, geminiTmpDir2) {
 function dimensionOfBlock(checkedBy, ruleName) {
   if (checkedBy.includes("egress")) return "network";
   if (checkedBy.includes("pii") || checkedBy.includes("dlp")) return "data";
-  if (checkedBy === "app-permission-block" || ruleName.startsWith("app-permission:")) return "mcp";
+  if (checkedBy === "loop-detected" || checkedBy === "mcp-pin-mismatch" || checkedBy.startsWith("injection"))
+    return "detection";
+  if (checkedBy === "app-permission-block" || ruleName.startsWith("app-permission:")) return "apps";
   if (ruleName.startsWith("shield:project-jail")) return "files";
-  if (checkedBy === "loop-detected") return "toolRules";
   if (checkedBy === "timeout" || checkedBy === "local-decision") return "approvals";
   return "toolRules";
 }
@@ -49317,7 +49318,9 @@ function aggregateReportFromAudit(period, opts = {}) {
   let dimDataObserved = 0;
   let dimFilesBlocked = 0;
   let dimToolRulesBlocked = 0;
-  let dimMcpBlocked = 0;
+  let dimAppsBlocked = 0;
+  let dimPinMismatch = 0;
+  let dimInjectionBlocked = 0;
   for (const e of entries) {
     if (superseded.has(supersedeKey(e))) continue;
     const allow = isAllow(e.decision);
@@ -49335,6 +49338,8 @@ function aggregateReportFromAudit(period, opts = {}) {
     }
     if (e.checkedBy === "loop-detected") loopHits++;
     const cb = e.checkedBy ?? "";
+    if (cb === "mcp-pin-mismatch") dimPinMismatch++;
+    if (cb.startsWith("injection")) dimInjectionBlocked++;
     if (cb.includes("would-block") && (cb.includes("pii") || cb.includes("dlp"))) {
       dimDataObserved++;
     }
@@ -49346,8 +49351,8 @@ function aggregateReportFromAudit(period, opts = {}) {
         case "files":
           dimFilesBlocked++;
           break;
-        case "mcp":
-          dimMcpBlocked++;
+        case "apps":
+          dimAppsBlocked++;
           break;
         case "toolRules":
           dimToolRulesBlocked++;
@@ -49427,9 +49432,15 @@ function aggregateReportFromAudit(period, opts = {}) {
     dimensions: {
       network: { blocked: dimNetworkBlocked },
       data: { blocked: dlpBlocked, observed: dimDataObserved },
+      detection: {
+        loops: loopHits,
+        pinMismatches: dimPinMismatch,
+        injections: dimInjectionBlocked
+      },
       approvals: { approved: userApproved, denied: userDenied, timedOut },
       files: { blocked: dimFilesBlocked },
-      toolRules: { blocked: dimToolRulesBlocked, mcp: dimMcpBlocked, loops: loopHits },
+      toolRules: { blocked: dimToolRulesBlocked },
+      apps: { blocked: dimAppsBlocked },
       cost: { totalUSD: claudeCost.total + codexCost.total + geminiCost.total }
     },
     generatedAt: now.toISOString()
@@ -49729,6 +49740,12 @@ function renderTerminalReport(data, responseDlpEntries, excludeTests) {
       d.data.blocked + d.data.observed > 0,
       `${num2(d.data.blocked)} blocked \xB7 ${num2(d.data.observed)} observed (DLP/PII)`
     );
+    dimRow(
+      "\u{1F501}",
+      "Detection",
+      d.detection.loops + d.detection.pinMismatches + d.detection.injections > 0,
+      `${num2(d.detection.loops)} loops \xB7 ${num2(d.detection.pinMismatches)} pin \xB7 ${num2(d.detection.injections)} injection`
+    );
     dimRow(
       "\u270B",
       "Approvals",
@@ -49739,9 +49756,10 @@ function renderTerminalReport(data, responseDlpEntries, excludeTests) {
     dimRow(
       "\u{1F6E0}",
       "Tool rules",
-      d.toolRules.blocked + d.toolRules.mcp + d.toolRules.loops > 0,
-      `${num2(d.toolRules.blocked)} shields/rules \xB7 ${num2(d.toolRules.mcp)} MCP \xB7 ${num2(d.toolRules.loops)} loops`
+      d.toolRules.blocked > 0,
+      `${num2(d.toolRules.blocked)} shields/rules`
     );
+    dimRow("\u{1F9E9}", "Apps (MCP)", d.apps.blocked > 0, `${num2(d.apps.blocked)} app-permission blocks`);
     dimRow("\u{1F4B0}", "Cost", d.cost.totalUSD > 0, `${fmtCost2(d.cost.totalUSD)} this period`);
   }
   console.log("");

package/dist/cli.mjs

@@ -49205,9 +49205,10 @@ function loadGeminiCost(start, end, geminiTmpDir2) {
 function dimensionOfBlock(checkedBy, ruleName) {
   if (checkedBy.includes("egress")) return "network";
   if (checkedBy.includes("pii") || checkedBy.includes("dlp")) return "data";
-  if (checkedBy === "app-permission-block" || ruleName.startsWith("app-permission:")) return "mcp";
+  if (checkedBy === "loop-detected" || checkedBy === "mcp-pin-mismatch" || checkedBy.startsWith("injection"))
+    return "detection";
+  if (checkedBy === "app-permission-block" || ruleName.startsWith("app-permission:")) return "apps";
   if (ruleName.startsWith("shield:project-jail")) return "files";
-  if (checkedBy === "loop-detected") return "toolRules";
   if (checkedBy === "timeout" || checkedBy === "local-decision") return "approvals";
   return "toolRules";
 }
@@ -49310,7 +49311,9 @@ function aggregateReportFromAudit(period, opts = {}) {
   let dimDataObserved = 0;
   let dimFilesBlocked = 0;
   let dimToolRulesBlocked = 0;
-  let dimMcpBlocked = 0;
+  let dimAppsBlocked = 0;
+  let dimPinMismatch = 0;
+  let dimInjectionBlocked = 0;
   for (const e of entries) {
     if (superseded.has(supersedeKey(e))) continue;
     const allow = isAllow(e.decision);
@@ -49328,6 +49331,8 @@ function aggregateReportFromAudit(period, opts = {}) {
     }
     if (e.checkedBy === "loop-detected") loopHits++;
     const cb = e.checkedBy ?? "";
+    if (cb === "mcp-pin-mismatch") dimPinMismatch++;
+    if (cb.startsWith("injection")) dimInjectionBlocked++;
     if (cb.includes("would-block") && (cb.includes("pii") || cb.includes("dlp"))) {
       dimDataObserved++;
     }
@@ -49339,8 +49344,8 @@ function aggregateReportFromAudit(period, opts = {}) {
         case "files":
           dimFilesBlocked++;
           break;
-        case "mcp":
-          dimMcpBlocked++;
+        case "apps":
+          dimAppsBlocked++;
           break;
         case "toolRules":
           dimToolRulesBlocked++;
@@ -49420,9 +49425,15 @@ function aggregateReportFromAudit(period, opts = {}) {
     dimensions: {
       network: { blocked: dimNetworkBlocked },
       data: { blocked: dlpBlocked, observed: dimDataObserved },
+      detection: {
+        loops: loopHits,
+        pinMismatches: dimPinMismatch,
+        injections: dimInjectionBlocked
+      },
       approvals: { approved: userApproved, denied: userDenied, timedOut },
       files: { blocked: dimFilesBlocked },
-      toolRules: { blocked: dimToolRulesBlocked, mcp: dimMcpBlocked, loops: loopHits },
+      toolRules: { blocked: dimToolRulesBlocked },
+      apps: { blocked: dimAppsBlocked },
       cost: { totalUSD: claudeCost.total + codexCost.total + geminiCost.total }
     },
     generatedAt: now.toISOString()
@@ -49722,6 +49733,12 @@ function renderTerminalReport(data, responseDlpEntries, excludeTests) {
       d.data.blocked + d.data.observed > 0,
       `${num2(d.data.blocked)} blocked \xB7 ${num2(d.data.observed)} observed (DLP/PII)`
     );
+    dimRow(
+      "\u{1F501}",
+      "Detection",
+      d.detection.loops + d.detection.pinMismatches + d.detection.injections > 0,
+      `${num2(d.detection.loops)} loops \xB7 ${num2(d.detection.pinMismatches)} pin \xB7 ${num2(d.detection.injections)} injection`
+    );
     dimRow(
       "\u270B",
       "Approvals",
@@ -49732,9 +49749,10 @@ function renderTerminalReport(data, responseDlpEntries, excludeTests) {
     dimRow(
       "\u{1F6E0}",
       "Tool rules",
-      d.toolRules.blocked + d.toolRules.mcp + d.toolRules.loops > 0,
-      `${num2(d.toolRules.blocked)} shields/rules \xB7 ${num2(d.toolRules.mcp)} MCP \xB7 ${num2(d.toolRules.loops)} loops`
+      d.toolRules.blocked > 0,
+      `${num2(d.toolRules.blocked)} shields/rules`
     );
+    dimRow("\u{1F9E9}", "Apps (MCP)", d.apps.blocked > 0, `${num2(d.apps.blocked)} app-permission blocks`);
     dimRow("\u{1F4B0}", "Cost", d.cost.totalUSD > 0, `${fmtCost2(d.cost.totalUSD)} this period`);
   }
   console.log("");

package/dist/dashboard.mjs

@@ -3438,9 +3438,10 @@ async function loadGeminiCostAsync(start, end, geminiTmpDir) {
 function dimensionOfBlock(checkedBy, ruleName) {
   if (checkedBy.includes("egress")) return "network";
   if (checkedBy.includes("pii") || checkedBy.includes("dlp")) return "data";
-  if (checkedBy === "app-permission-block" || ruleName.startsWith("app-permission:")) return "mcp";
+  if (checkedBy === "loop-detected" || checkedBy === "mcp-pin-mismatch" || checkedBy.startsWith("injection"))
+    return "detection";
+  if (checkedBy === "app-permission-block" || ruleName.startsWith("app-permission:")) return "apps";
   if (ruleName.startsWith("shield:project-jail")) return "files";
-  if (checkedBy === "loop-detected") return "toolRules";
   if (checkedBy === "timeout" || checkedBy === "local-decision") return "approvals";
   return "toolRules";
 }
@@ -3543,7 +3544,9 @@ function aggregateReportFromAudit(period, opts = {}) {
   let dimDataObserved = 0;
   let dimFilesBlocked = 0;
   let dimToolRulesBlocked = 0;
-  let dimMcpBlocked = 0;
+  let dimAppsBlocked = 0;
+  let dimPinMismatch = 0;
+  let dimInjectionBlocked = 0;
   for (const e of entries) {
     if (superseded.has(supersedeKey(e))) continue;
     const allow = isAllow(e.decision);
@@ -3561,6 +3564,8 @@ function aggregateReportFromAudit(period, opts = {}) {
     }
     if (e.checkedBy === "loop-detected") loopHits++;
     const cb = e.checkedBy ?? "";
+    if (cb === "mcp-pin-mismatch") dimPinMismatch++;
+    if (cb.startsWith("injection")) dimInjectionBlocked++;
     if (cb.includes("would-block") && (cb.includes("pii") || cb.includes("dlp"))) {
       dimDataObserved++;
     }
@@ -3572,8 +3577,8 @@ function aggregateReportFromAudit(period, opts = {}) {
         case "files":
           dimFilesBlocked++;
           break;
-        case "mcp":
-          dimMcpBlocked++;
+        case "apps":
+          dimAppsBlocked++;
           break;
         case "toolRules":
           dimToolRulesBlocked++;
@@ -3653,9 +3658,15 @@ function aggregateReportFromAudit(period, opts = {}) {
     dimensions: {
       network: { blocked: dimNetworkBlocked },
       data: { blocked: dlpBlocked, observed: dimDataObserved },
+      detection: {
+        loops: loopHits,
+        pinMismatches: dimPinMismatch,
+        injections: dimInjectionBlocked
+      },
       approvals: { approved: userApproved, denied: userDenied, timedOut },
       files: { blocked: dimFilesBlocked },
-      toolRules: { blocked: dimToolRulesBlocked, mcp: dimMcpBlocked, loops: loopHits },
+      toolRules: { blocked: dimToolRulesBlocked },
+      apps: { blocked: dimAppsBlocked },
       cost: { totalUSD: claudeCost.total + codexCost.total + geminiCost.total }
     },
     generatedAt: now.toISOString()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.60.0",
+  "version": "1.61.0",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",