@node9/proxy 2.34.0 → 2.35.0

package/dist/dashboard.mjs

@@ -8446,6 +8446,13 @@ var init_blast = __esm({
   }
 });
 
+// src/auth/decision-record.ts
+var init_decision_record = __esm({
+  "src/auth/decision-record.ts"() {
+    "use strict";
+  }
+});
+
 // src/auth/daemon.ts
 import fs4 from "fs";
 import path5 from "path";
@@ -8473,6 +8480,7 @@ var ACTIVITY_SOCKET_PATH, DEFAULT_DAEMON_PORT, DAEMON_PORT, DAEMON_HOST;
 var init_daemon = __esm({
   "src/auth/daemon.ts"() {
     "use strict";
+    init_decision_record();
     ACTIVITY_SOCKET_PATH = process.platform === "win32" ? "\\\\.\\pipe\\node9-activity" : path5.join(os5.tmpdir(), "node9-activity.sock");
     DEFAULT_DAEMON_PORT = 7391;
     DAEMON_PORT = resolveDaemonPort();
@@ -10521,6 +10529,18 @@ function classifyDecision(a, b) {
   }
   if (d === "dlp") return { outcome: "info", label: "Finding", raw };
   if (d === "mcp-discovered") return { outcome: "info", label: "Info", raw };
+  const decidedBy = isRow ? a.decidedBy : void 0;
+  if (typeof decidedBy === "string") {
+    const allowed = d === "allow" || d === "allowed" || d.startsWith("trust:");
+    const denied = d === "deny" || d === "auto-deny" || d === "block";
+    if (allowed || denied) {
+      if (decidedBy === "person")
+        return allowed ? { outcome: "allow", label: "Approved", raw } : { outcome: "deny", label: "Denied", raw };
+      if (decidedBy === "timer" || decidedBy === "abandoned")
+        return { outcome: "deny", label: "Timed out", raw };
+      return allowed ? { outcome: "allow", label: "Auto-allowed", raw } : { outcome: "deny", label: "Blocked", raw };
+    }
+  }
   if (d === "allow" || d === "allowed") {
     if (src === "post-hook") return { outcome: "allow", label: "Ran", raw };
     if (HUMAN_SOURCES.has(src)) {
@@ -11175,11 +11195,15 @@ function aggregateReportFromAudit(period, opts = {}) {
   let dimAppsBlocked = 0;
   let dimPinMismatch = 0;
   let dimInjectionBlocked = 0;
+  const hookCardIds = new Set(
+    entries.filter((e) => e.source !== "daemon" && e.cardId).map((e) => e.cardId)
+  );
   for (const e of entries) {
+    if (e.source === "daemon" && e.cardId && hookCardIds.has(e.cardId)) continue;
     if (superseded.has(supersedeKey(e))) continue;
     const view = viewOf(e);
     const dateKey = e.ts.slice(0, 10);
-    const userInteracted = e.source === "daemon";
+    const userInteracted = e.decidedBy ? e.decidedBy === "person" : e.source === "daemon";
     if (view.observed) {
       if (e.checkedBy === "observe-mode-dlp-would-block") observeDlp++;
     } else if (view.info) {
@@ -11187,7 +11211,8 @@ function aggregateReportFromAudit(period, opts = {}) {
       if (view.ran) userApproved++;
       else userDenied++;
     } else if (view.blocked) {
-      if (e.checkedBy === "timeout") timedOut++;
+      if (e.checkedBy === "timeout" || e.decidedBy === "timer" || e.decidedBy === "abandoned")
+        timedOut++;
       else if (isDlp(e.checkedBy)) dlpBlocked++;
       else if (e.checkedBy === "local-decision") userDenied++;
       else if (e.checkedBy !== "loop-detected") hardBlocked++;
@@ -12975,6 +13000,13 @@ function normalizeTs(ts) {
   }
   return (/* @__PURE__ */ new Date()).toISOString();
 }
+function monitorDecisionBody(decision) {
+  return {
+    decision,
+    source: "monitor",
+    ...decision === "trust" && { trustDuration: "30m" }
+  };
+}
 function submitDecision(id, decision) {
   return new Promise((resolve) => {
     const token = getInternalToken();
@@ -12982,9 +13014,7 @@ function submitDecision(id, decision) {
       resolve({ ok: false, error: "daemon not running" });
       return;
     }
-    const bodyObj = { decision, source: "dashboard" };
-    if (decision === "trust") bodyObj.persist = true;
-    const body = JSON.stringify(bodyObj);
+    const body = JSON.stringify(monitorDecisionBody(decision));
     const req = http.request(
       {
         hostname: DAEMON_HOST,
@@ -13477,7 +13507,7 @@ function renderApproval(event, status) {
         /* @__PURE__ */ jsx(Text, { color: COL.liveOff, children: "[d]" }),
         /* @__PURE__ */ jsx(Text, { dimColor: true, children: "eny " }),
         /* @__PURE__ */ jsx(Text, { color: COL.panelHigh, children: "[t]" }),
-        /* @__PURE__ */ jsx(Text, { dimColor: true, children: "rust " }),
+        /* @__PURE__ */ jsx(Text, { dimColor: true, children: "rust 30m " }),
         /* @__PURE__ */ jsx(Text, { dimColor: true, children: "[Esc]" })
       ] });
     }