@node9/proxy 2.39.0 → 2.40.0

package/dist/cli.js

@@ -9777,7 +9777,7 @@ var init_dist = __esm({
       "actions.money": {
         plain: "The agent moves money (a refund, a payout, a transfer, a charge) through an app node9 has no protection for, such as an internal billing server.",
         example: "refund_order on a server called acme-billing",
-        advice: "Keep Review. When the app is Stripe or PayPal, turn on its own protection instead: it covers the CLI, the API and scripts too, and a call from it no longer comes here."
+        advice: "Standard records these and Strict asks. Set Review to be asked before every money move at any level. When the app is Stripe or PayPal, turn on its own protection instead: it covers the CLI, the API and scripts too, and a call from it no longer comes here."
       },
       "actions.access": {
         plain: "The agent changes a password, a key, a role or who belongs to a team, through an app node9 has no protection for.",
@@ -9986,7 +9986,9 @@ var init_dist = __esm({
       "network.unknown-host": "review",
       "network.internal-addresses": "block",
       "behavior.prompt-injection": "log",
-      "loading.skill-tamper": "block"
+      "loading.skill-tamper": "block",
+      // Standard records money moves (catalog default log); Strict asks.
+      "actions.money": "review"
     };
     BLOCK_ALL = {
       ...STRICT,
@@ -10425,7 +10427,10 @@ var init_dist = __esm({
         title: "Money moves",
         catches: "a refund, payout, transfer, charge or withdrawal through an app with no protection of its own",
         values: ALL,
-        defaultValue: "review",
+        // Founder decision 2026-10-25: a transfer the user asked for is ordinary
+        // work. Standard records it; Strict asks (levels.ts); a user who wants to
+        // be asked states review.
+        defaultValue: "log",
         legacy: generalActionRuleNames("finance")
       },
       {
@@ -18310,7 +18315,8 @@ var init_config = __esm({
           // ── Actions in apps (node9Firewall#390) ───────────────────────────────
           // actions.money / actions.access / actions.publish: the action templates
           // on every MCP server no app shield claims, plus the shell publishing
-          // rules. Review by default; the check value governs them.
+          // rules. Review on the rule; the check value governs them (money is
+          // recorded at Standard, asked at Strict).
           ...GENERAL_ACTION_RULES
         ],
         dlp: { enabled: true, scanIgnoredTools: true, pii: "block" },

package/dist/cli.mjs

@@ -9781,7 +9781,7 @@ var init_dist = __esm({
       "actions.money": {
         plain: "The agent moves money (a refund, a payout, a transfer, a charge) through an app node9 has no protection for, such as an internal billing server.",
         example: "refund_order on a server called acme-billing",
-        advice: "Keep Review. When the app is Stripe or PayPal, turn on its own protection instead: it covers the CLI, the API and scripts too, and a call from it no longer comes here."
+        advice: "Standard records these and Strict asks. Set Review to be asked before every money move at any level. When the app is Stripe or PayPal, turn on its own protection instead: it covers the CLI, the API and scripts too, and a call from it no longer comes here."
       },
       "actions.access": {
         plain: "The agent changes a password, a key, a role or who belongs to a team, through an app node9 has no protection for.",
@@ -9990,7 +9990,9 @@ var init_dist = __esm({
       "network.unknown-host": "review",
       "network.internal-addresses": "block",
       "behavior.prompt-injection": "log",
-      "loading.skill-tamper": "block"
+      "loading.skill-tamper": "block",
+      // Standard records money moves (catalog default log); Strict asks.
+      "actions.money": "review"
     };
     BLOCK_ALL = {
       ...STRICT,
@@ -10429,7 +10431,10 @@ var init_dist = __esm({
         title: "Money moves",
         catches: "a refund, payout, transfer, charge or withdrawal through an app with no protection of its own",
         values: ALL,
-        defaultValue: "review",
+        // Founder decision 2026-10-25: a transfer the user asked for is ordinary
+        // work. Standard records it; Strict asks (levels.ts); a user who wants to
+        // be asked states review.
+        defaultValue: "log",
         legacy: generalActionRuleNames("finance")
       },
       {
@@ -18314,7 +18319,8 @@ var init_config = __esm({
           // ── Actions in apps (node9Firewall#390) ───────────────────────────────
           // actions.money / actions.access / actions.publish: the action templates
           // on every MCP server no app shield claims, plus the shell publishing
-          // rules. Review by default; the check value governs them.
+          // rules. Review on the rule; the check value governs them (money is
+          // recorded at Standard, asked at Strict).
           ...GENERAL_ACTION_RULES
         ],
         dlp: { enabled: true, scanIgnoredTools: true, pii: "block" },

package/dist/dashboard.mjs

@@ -4483,7 +4483,7 @@ var init_dist = __esm({
       "actions.money": {
         plain: "The agent moves money (a refund, a payout, a transfer, a charge) through an app node9 has no protection for, such as an internal billing server.",
         example: "refund_order on a server called acme-billing",
-        advice: "Keep Review. When the app is Stripe or PayPal, turn on its own protection instead: it covers the CLI, the API and scripts too, and a call from it no longer comes here."
+        advice: "Standard records these and Strict asks. Set Review to be asked before every money move at any level. When the app is Stripe or PayPal, turn on its own protection instead: it covers the CLI, the API and scripts too, and a call from it no longer comes here."
       },
       "actions.access": {
         plain: "The agent changes a password, a key, a role or who belongs to a team, through an app node9 has no protection for.",
@@ -4692,7 +4692,9 @@ var init_dist = __esm({
       "network.unknown-host": "review",
       "network.internal-addresses": "block",
       "behavior.prompt-injection": "log",
-      "loading.skill-tamper": "block"
+      "loading.skill-tamper": "block",
+      // Standard records money moves (catalog default log); Strict asks.
+      "actions.money": "review"
     };
     BLOCK_ALL = {
       ...STRICT,
@@ -5122,7 +5124,10 @@ var init_dist = __esm({
         title: "Money moves",
         catches: "a refund, payout, transfer, charge or withdrawal through an app with no protection of its own",
         values: ALL,
-        defaultValue: "review",
+        // Founder decision 2026-10-25: a transfer the user asked for is ordinary
+        // work. Standard records it; Strict asks (levels.ts); a user who wants to
+        // be asked states review.
+        defaultValue: "log",
         legacy: generalActionRuleNames("finance")
       },
       {
@@ -11924,7 +11929,8 @@ var init_config = __esm({
           // ── Actions in apps (node9Firewall#390) ───────────────────────────────
           // actions.money / actions.access / actions.publish: the action templates
           // on every MCP server no app shield claims, plus the shell publishing
-          // rules. Review by default; the check value governs them.
+          // rules. Review on the rule; the check value governs them (money is
+          // recorded at Standard, asked at Strict).
           ...GENERAL_ACTION_RULES
         ],
         dlp: { enabled: true, scanIgnoredTools: true, pii: "block" },

package/dist/index.js

@@ -9076,7 +9076,7 @@ var init_dist = __esm({
       "actions.money": {
         plain: "The agent moves money (a refund, a payout, a transfer, a charge) through an app node9 has no protection for, such as an internal billing server.",
         example: "refund_order on a server called acme-billing",
-        advice: "Keep Review. When the app is Stripe or PayPal, turn on its own protection instead: it covers the CLI, the API and scripts too, and a call from it no longer comes here."
+        advice: "Standard records these and Strict asks. Set Review to be asked before every money move at any level. When the app is Stripe or PayPal, turn on its own protection instead: it covers the CLI, the API and scripts too, and a call from it no longer comes here."
       },
       "actions.access": {
         plain: "The agent changes a password, a key, a role or who belongs to a team, through an app node9 has no protection for.",
@@ -9285,7 +9285,9 @@ var init_dist = __esm({
       "network.unknown-host": "review",
       "network.internal-addresses": "block",
       "behavior.prompt-injection": "log",
-      "loading.skill-tamper": "block"
+      "loading.skill-tamper": "block",
+      // Standard records money moves (catalog default log); Strict asks.
+      "actions.money": "review"
     };
     BLOCK_ALL = {
       ...STRICT,
@@ -9715,7 +9717,10 @@ var init_dist = __esm({
         title: "Money moves",
         catches: "a refund, payout, transfer, charge or withdrawal through an app with no protection of its own",
         values: ALL,
-        defaultValue: "review",
+        // Founder decision 2026-10-25: a transfer the user asked for is ordinary
+        // work. Standard records it; Strict asks (levels.ts); a user who wants to
+        // be asked states review.
+        defaultValue: "log",
         legacy: generalActionRuleNames("finance")
       },
       {
@@ -16351,7 +16356,8 @@ var DEFAULT_CONFIG = {
       // ── Actions in apps (node9Firewall#390) ───────────────────────────────
       // actions.money / actions.access / actions.publish: the action templates
       // on every MCP server no app shield claims, plus the shell publishing
-      // rules. Review by default; the check value governs them.
+      // rules. Review on the rule; the check value governs them (money is
+      // recorded at Standard, asked at Strict).
       ...GENERAL_ACTION_RULES
     ],
     dlp: { enabled: true, scanIgnoredTools: true, pii: "block" },

package/dist/index.mjs

@@ -9053,7 +9053,7 @@ var init_dist = __esm({
       "actions.money": {
         plain: "The agent moves money (a refund, a payout, a transfer, a charge) through an app node9 has no protection for, such as an internal billing server.",
         example: "refund_order on a server called acme-billing",
-        advice: "Keep Review. When the app is Stripe or PayPal, turn on its own protection instead: it covers the CLI, the API and scripts too, and a call from it no longer comes here."
+        advice: "Standard records these and Strict asks. Set Review to be asked before every money move at any level. When the app is Stripe or PayPal, turn on its own protection instead: it covers the CLI, the API and scripts too, and a call from it no longer comes here."
       },
       "actions.access": {
         plain: "The agent changes a password, a key, a role or who belongs to a team, through an app node9 has no protection for.",
@@ -9262,7 +9262,9 @@ var init_dist = __esm({
       "network.unknown-host": "review",
       "network.internal-addresses": "block",
       "behavior.prompt-injection": "log",
-      "loading.skill-tamper": "block"
+      "loading.skill-tamper": "block",
+      // Standard records money moves (catalog default log); Strict asks.
+      "actions.money": "review"
     };
     BLOCK_ALL = {
       ...STRICT,
@@ -9692,7 +9694,10 @@ var init_dist = __esm({
         title: "Money moves",
         catches: "a refund, payout, transfer, charge or withdrawal through an app with no protection of its own",
         values: ALL,
-        defaultValue: "review",
+        // Founder decision 2026-10-25: a transfer the user asked for is ordinary
+        // work. Standard records it; Strict asks (levels.ts); a user who wants to
+        // be asked states review.
+        defaultValue: "log",
         legacy: generalActionRuleNames("finance")
       },
       {
@@ -16321,7 +16326,8 @@ var DEFAULT_CONFIG = {
       // ── Actions in apps (node9Firewall#390) ───────────────────────────────
       // actions.money / actions.access / actions.publish: the action templates
       // on every MCP server no app shield claims, plus the shell publishing
-      // rules. Review by default; the check value governs them.
+      // rules. Review on the rule; the check value governs them (money is
+      // recorded at Standard, asked at Strict).
       ...GENERAL_ACTION_RULES
     ],
     dlp: { enabled: true, scanIgnoredTools: true, pii: "block" },

package/dist/scan-ink.mjs

@@ -1945,7 +1945,7 @@ var CHECK_TEXT = {
   "actions.money": {
     plain: "The agent moves money (a refund, a payout, a transfer, a charge) through an app node9 has no protection for, such as an internal billing server.",
     example: "refund_order on a server called acme-billing",
-    advice: "Keep Review. When the app is Stripe or PayPal, turn on its own protection instead: it covers the CLI, the API and scripts too, and a call from it no longer comes here."
+    advice: "Standard records these and Strict asks. Set Review to be asked before every money move at any level. When the app is Stripe or PayPal, turn on its own protection instead: it covers the CLI, the API and scripts too, and a call from it no longer comes here."
   },
   "actions.access": {
     plain: "The agent changes a password, a key, a role or who belongs to a team, through an app node9 has no protection for.",
@@ -2136,7 +2136,9 @@ var STRICT = {
   "network.unknown-host": "review",
   "network.internal-addresses": "block",
   "behavior.prompt-injection": "log",
-  "loading.skill-tamper": "block"
+  "loading.skill-tamper": "block",
+  // Standard records money moves (catalog default log); Strict asks.
+  "actions.money": "review"
 };
 var BLOCK_ALL = {
   ...STRICT,
@@ -2558,7 +2560,10 @@ var PRODUCT_CHECKS = [
     title: "Money moves",
     catches: "a refund, payout, transfer, charge or withdrawal through an app with no protection of its own",
     values: ALL,
-    defaultValue: "review",
+    // Founder decision 2026-10-25: a transfer the user asked for is ordinary
+    // work. Standard records it; Strict asks (levels.ts); a user who wants to
+    // be asked states review.
+    defaultValue: "log",
     legacy: generalActionRuleNames("finance")
   },
   {
@@ -6939,7 +6944,8 @@ var DEFAULT_CONFIG = {
       // ── Actions in apps (node9Firewall#390) ───────────────────────────────
       // actions.money / actions.access / actions.publish: the action templates
       // on every MCP server no app shield claims, plus the shell publishing
-      // rules. Review by default; the check value governs them.
+      // rules. Review on the rule; the check value governs them (money is
+      // recorded at Standard, asked at Strict).
       ...GENERAL_ACTION_RULES
     ],
     dlp: { enabled: true, scanIgnoredTools: true, pii: "block" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "2.39.0",
+  "version": "2.40.0",
   "description": "Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",