@node9/proxy 2.43.1 → 2.44.0

package/dist/dashboard.mjs

@@ -18734,8 +18734,7 @@ function homeCredentialFiles(home) {
     ),
     f([".docker", "config.json"], "Docker registry auth tokens", 10),
     f([".netrc"], "FTP/HTTP credentials in plain text", 15),
-    f([".npmrc"], "npm auth token: can publish packages as you", 10),
-    f([".node9", "credentials.json"], "Node9 cloud API key", 10)
+    f([".npmrc"], "npm auth token: can publish packages as you", 10)
   ];
 }
 var init_credential_files = __esm({
@@ -21485,6 +21484,68 @@ var init_cost_gemini = __esm({
 });
 
 // src/cost-copilot.ts
+function priceTokens(model, u) {
+  const tuple = pricingFor(model);
+  if (!tuple || !u) return 0;
+  const [pin, pout, pcw, pcr] = tuple;
+  return (u.inputTokens ?? 0) * pin + (u.outputTokens ?? 0) * pout + (u.cacheWriteTokens ?? 0) * pcw + (u.cacheReadTokens ?? 0) * pcr;
+}
+function parseCopilotSession(lines) {
+  let sessionId = "";
+  let cwd = "";
+  let startDate = "";
+  let shutdownDate = "";
+  let modelMetrics = null;
+  for (const raw of lines) {
+    if (!raw.trim()) continue;
+    let o;
+    try {
+      o = JSON.parse(raw);
+    } catch {
+      continue;
+    }
+    const d = o.data ?? {};
+    if (o.type === "session.start") {
+      if (typeof d["sessionId"] === "string") sessionId = d["sessionId"];
+      if (typeof d["startTime"] === "string") startDate = d["startTime"];
+      const ctx = d["context"] ?? {};
+      if (typeof ctx["cwd"] === "string") cwd = ctx["cwd"];
+    } else if (o.type === "session.shutdown") {
+      if (d["modelMetrics"] && typeof d["modelMetrics"] === "object") {
+        modelMetrics = d["modelMetrics"];
+      }
+      if (typeof o.timestamp === "string") shutdownDate = o.timestamp;
+    }
+  }
+  if (!modelMetrics) return [];
+  const date = (startDate || shutdownDate).slice(0, 10);
+  if (!date) return [];
+  const rows = [];
+  for (const [rawModel, m] of Object.entries(modelMetrics)) {
+    const u = m.usage ?? {};
+    const inputTokens = u.inputTokens ?? 0;
+    const outputTokens = u.outputTokens ?? 0;
+    const cacheReadTokens = u.cacheReadTokens ?? 0;
+    const cacheWriteTokens = u.cacheWriteTokens ?? 0;
+    if (inputTokens === 0 && outputTokens === 0 && cacheReadTokens === 0 && cacheWriteTokens === 0) {
+      continue;
+    }
+    const model = normalizeModel(rawModel);
+    const costUSD = typeof m.requests?.cost === "number" && m.requests.cost > 0 ? m.requests.cost : priceTokens(rawModel, u);
+    rows.push({
+      date,
+      model,
+      workingDir: cwd,
+      runId: sessionId,
+      costUSD,
+      inputTokens,
+      outputTokens,
+      cacheReadTokens,
+      cacheWriteTokens
+    });
+  }
+  return rows;
+}
 var init_cost_copilot = __esm({
   "src/cost-copilot.ts"() {
     "use strict";
@@ -27669,6 +27730,16 @@ var init_scan_judge = __esm({
 });
 
 // src/utils/hook-payload.ts
+function canonicalToolInput(rawToolName, input) {
+  if (rawToolName !== "run_command") return input;
+  if (typeof input !== "object" || input === null || Array.isArray(input)) return input;
+  const args = input;
+  if (typeof args.CommandLine !== "string") return input;
+  const { CommandLine, Cwd, ...rest } = args;
+  const canonical = { ...rest, command: CommandLine };
+  if (typeof Cwd === "string" && Cwd.length > 0) canonical.cwd = Cwd;
+  return canonical;
+}
 var init_hook_payload = __esm({
   "src/utils/hook-payload.ts"() {
     "use strict";
@@ -28731,6 +28802,360 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
   result.policy = judge.policy(result.unknownInputs ?? {});
   return result;
 }
+function antigravityBrainDirs() {
+  return ["antigravity-cli", "antigravity-ide"].map((surface) => path43.join(os30.homedir(), ".gemini", surface, "brain")).filter((p) => fs38.existsSync(p));
+}
+function antigravityTranscriptPath(convPath) {
+  const logsDir = path43.join(convPath, ".system_generated", "logs");
+  for (const name of ["transcript_full.jsonl", "transcript.jsonl"]) {
+    const p = path43.join(logsDir, name);
+    if (fs38.existsSync(p)) return p;
+  }
+  return null;
+}
+async function scanAntigravityHistory(startDate, onProgress, onLine, opts = {}) {
+  const canaryVals = safeCanaryScanValues();
+  const result = {
+    filesScanned: 0,
+    sessions: 0,
+    totalToolCalls: 0,
+    bashCalls: 0,
+    findings: [],
+    dlpFindings: [],
+    canaryFindings: [],
+    loopFindings: [],
+    totalCostUSD: 0,
+    // transcripts carry no token/model data
+    firstDate: null,
+    lastDate: null,
+    sessionsWithEarlySecrets: 0,
+    perSession: []
+  };
+  const dedup = emptyScanDedup();
+  const brainDirs = antigravityBrainDirs();
+  if (brainDirs.length === 0) return result;
+  const judge = new HistoryJudge();
+  const cache7 = openScanCache(judge, opts);
+  for (const brainDir of brainDirs) {
+    let convDirs;
+    try {
+      convDirs = fs38.readdirSync(brainDir);
+    } catch {
+      continue;
+    }
+    for (const conv of convDirs) {
+      const convPath = path43.join(brainDir, conv);
+      try {
+        if (!fs38.statSync(convPath).isDirectory()) continue;
+      } catch {
+        continue;
+      }
+      const transcriptFile = antigravityTranscriptPath(convPath);
+      if (!transcriptFile) continue;
+      const stamp = fileStamp(transcriptFile);
+      if (!fileMayHoldWindow(stamp, startDate)) continue;
+      result.filesScanned++;
+      onProgress?.(result.filesScanned);
+      const cached = stamp ? cache7.get(transcriptFile, stamp, judge, judgeFromFor(startDate)) : null;
+      if (cached) {
+        mergeFileScan(result, cached, dedup, startDate);
+        continue;
+      }
+      const fileResult = emptyScan();
+      const fileDedup = emptyScanDedup();
+      let raw;
+      try {
+        raw = fs38.readFileSync(transcriptFile, "utf-8");
+      } catch {
+        continue;
+      }
+      const sessionId = conv;
+      let projLabel = conv.slice(0, 8);
+      const sessionCalls = [];
+      for (const line of raw.split("\n")) {
+        if (!line.trim()) continue;
+        onLine?.();
+        let step;
+        try {
+          step = JSON.parse(line);
+        } catch {
+          continue;
+        }
+        const timestamp2 = step.created_at ?? "";
+        if (beforeJudged(judgeFromFor(startDate), timestamp2 || void 0)) continue;
+        const day = dayOf(fileResult, timestamp2 || void 0);
+        if (fileResult.sessions === 0) fileResult.sessions = 1;
+        if (step.type === "USER_INPUT") {
+          const text = typeof step.content === "string" ? step.content : "";
+          if (text) {
+            const decoysHere5 = recordCanaries(
+              { text },
+              "user-prompt",
+              timestamp2,
+              projLabel,
+              sessionId,
+              "antigravity",
+              fileResult,
+              fileDedup,
+              canaryVals
+            );
+            const dlpMatch = scanArgs(scrubDecoys({ text }, decoysHere5));
+            if (dlpMatch) {
+              const k = dlpKey(dlpMatch.patternName, dlpMatch.redactedSample, projLabel, timestamp2);
+              if (!fileDedup.dlpKeys.has(k)) {
+                fileDedup.dlpKeys.add(k);
+                fileResult.dlpFindings.push({
+                  patternName: dlpMatch.patternName,
+                  redactedSample: dlpMatch.redactedSample,
+                  toolName: "user-prompt",
+                  timestamp: timestamp2,
+                  project: projLabel,
+                  sessionId,
+                  agent: "antigravity"
+                });
+              }
+            }
+          }
+          continue;
+        }
+        if (!Array.isArray(step.tool_calls) || step.tool_calls.length === 0) continue;
+        if (timestamp2) {
+          if (!fileResult.firstDate || timestamp2 < fileResult.firstDate)
+            fileResult.firstDate = timestamp2;
+          if (!fileResult.lastDate || timestamp2 > fileResult.lastDate)
+            fileResult.lastDate = timestamp2;
+        }
+        for (const tc of step.tool_calls) {
+          fileResult.totalToolCalls++;
+          day.toolCalls++;
+          const toolName = tc.name ?? "";
+          countMcpCall(fileResult, toolName, day);
+          const toolNameLower = toolName.toLowerCase();
+          const input = canonicalToolInput(toolName, tc.args ?? {});
+          sessionCalls.push({ toolName, input, timestamp: timestamp2 });
+          const shellInput = resolveShellInput(toolNameLower, input, toolInspectionMap);
+          const isShellTool = shellInput.kind === "shell";
+          if (isShellTool) {
+            fileResult.bashCalls++;
+            day.bashCalls++;
+            const cwd = String(input.cwd ?? "");
+            if (cwd && projLabel === conv.slice(0, 8)) {
+              projLabel = stripTerminalEscapes(cwd).replace(os30.homedir(), "~").slice(0, 40);
+            }
+          }
+          const rawCmd = String(input.command ?? "").trimStart();
+          if (/^node9\s+(scan|explain|report|tail|dlp|status|sessions|audit)\b/.test(rawCmd))
+            continue;
+          const decoysHere6 = recordCanaries(
+            input,
+            toolName,
+            timestamp2,
+            projLabel,
+            sessionId,
+            "antigravity",
+            fileResult,
+            fileDedup,
+            canaryVals
+          );
+          const judged = await judge.judge(
+            {
+              agent: "antigravity",
+              toolName,
+              input,
+              scrubbed: decoysHere6.length ? scrubDecoys(input, decoysHere6) : void 0,
+              timestamp: timestamp2,
+              sessionId,
+              project: projLabel,
+              cwd: typeof input.cwd === "string" && path43.isAbsolute(input.cwd) ? input.cwd : void 0
+            },
+            fileResult,
+            fileDedup
+          );
+          addUnknown(day, judged.verdict.unknown);
+        }
+      }
+      fileResult.loopFindings.push(
+        ...detectLoops(sessionCalls, projLabel, sessionId, "antigravity")
+      );
+      if (stamp)
+        cache7.put(transcriptFile, stamp, "antigravity", fileResult, judge, judgeFromFor(startDate));
+      mergeFileScan(result, fileResult, dedup, startDate);
+      await yieldTick();
+    }
+  }
+  cache7.close();
+  result.policy = judge.policy(result.unknownInputs ?? {});
+  return result;
+}
+async function scanCopilotHistory(startDate, onProgress, onLine, opts = {}) {
+  const canaryVals = safeCanaryScanValues();
+  const sessionDir = path43.join(os30.homedir(), ".copilot", "session-state");
+  const result = {
+    filesScanned: 0,
+    sessions: 0,
+    totalToolCalls: 0,
+    bashCalls: 0,
+    findings: [],
+    dlpFindings: [],
+    canaryFindings: [],
+    loopFindings: [],
+    totalCostUSD: 0,
+    // event logs carry no token/cost rollup
+    firstDate: null,
+    lastDate: null,
+    sessionsWithEarlySecrets: 0,
+    perSession: []
+  };
+  const dedup = emptyScanDedup();
+  if (!fs38.existsSync(sessionDir)) return result;
+  let sessionIds;
+  try {
+    sessionIds = fs38.readdirSync(sessionDir);
+  } catch {
+    return result;
+  }
+  const judge = new HistoryJudge();
+  const cache7 = openScanCache(judge, opts);
+  for (const sessionId of sessionIds) {
+    const eventsPath = path43.join(sessionDir, sessionId, "events.jsonl");
+    if (!fs38.existsSync(eventsPath)) continue;
+    const stamp = fileStamp(eventsPath);
+    if (!fileMayHoldWindow(stamp, startDate)) continue;
+    result.filesScanned++;
+    onProgress?.(result.filesScanned);
+    const cached = stamp ? cache7.get(eventsPath, stamp, judge, judgeFromFor(startDate)) : null;
+    if (cached) {
+      mergeFileScan(result, cached, dedup, startDate);
+      continue;
+    }
+    const fileResult = emptyScan();
+    const fileDedup = emptyScanDedup();
+    let raw;
+    try {
+      raw = fs38.readFileSync(eventsPath, "utf-8");
+    } catch {
+      continue;
+    }
+    let projLabel = sessionId.slice(0, 8);
+    let sessionCwd;
+    const sessionCalls = [];
+    for (const row of parseCopilotSession(raw.split("\n"))) {
+      if (beforeJudged(judgeFromFor(startDate), row.date || void 0)) continue;
+      fileResult.totalCostUSD += row.costUSD;
+      dayOf(fileResult, row.date || void 0, false).costUSD += row.costUSD;
+    }
+    for (const line of raw.split("\n")) {
+      if (!line.trim()) continue;
+      onLine?.();
+      let ev;
+      try {
+        ev = JSON.parse(line);
+      } catch {
+        continue;
+      }
+      const timestamp2 = ev.timestamp ?? "";
+      if (ev.type === "session.start") {
+        const cwd = ev.data?.context?.cwd;
+        if (typeof cwd === "string" && cwd) {
+          projLabel = stripTerminalEscapes(cwd).replace(os30.homedir(), "~").slice(0, 40);
+          if (path43.isAbsolute(cwd)) sessionCwd = cwd;
+        }
+        continue;
+      }
+      if (beforeJudged(judgeFromFor(startDate), timestamp2 || void 0)) continue;
+      const day = dayOf(fileResult, timestamp2 || void 0);
+      if (fileResult.sessions === 0) fileResult.sessions = 1;
+      if (ev.type === "user.message") {
+        const text = ev.data?.content ?? ev.data?.text ?? "";
+        if (typeof text === "string" && text) {
+          const decoysHere7 = recordCanaries(
+            { text },
+            "user-prompt",
+            timestamp2,
+            projLabel,
+            sessionId,
+            "copilot",
+            fileResult,
+            fileDedup,
+            canaryVals
+          );
+          const dlpMatch = scanArgs(scrubDecoys({ text }, decoysHere7));
+          if (dlpMatch) {
+            const k = dlpKey(dlpMatch.patternName, dlpMatch.redactedSample, projLabel, timestamp2);
+            if (!fileDedup.dlpKeys.has(k)) {
+              fileDedup.dlpKeys.add(k);
+              fileResult.dlpFindings.push({
+                patternName: dlpMatch.patternName,
+                redactedSample: dlpMatch.redactedSample,
+                toolName: "user-prompt",
+                timestamp: timestamp2,
+                project: projLabel,
+                sessionId,
+                agent: "copilot"
+              });
+            }
+          }
+        }
+        continue;
+      }
+      if (ev.type !== "tool.execution_start") continue;
+      const toolName = ev.data?.toolName ?? "";
+      const toolNameLower = toolName.toLowerCase();
+      const input = ev.data?.arguments ?? {};
+      fileResult.totalToolCalls++;
+      day.toolCalls++;
+      countMcpCall(fileResult, toolName, day);
+      sessionCalls.push({ toolName, input, timestamp: timestamp2 });
+      const shellInput = resolveShellInput(toolNameLower, input, toolInspectionMap);
+      const isShellTool = shellInput.kind === "shell";
+      if (isShellTool) {
+        fileResult.bashCalls++;
+        day.bashCalls++;
+      }
+      if (timestamp2) {
+        if (!fileResult.firstDate || timestamp2 < fileResult.firstDate)
+          fileResult.firstDate = timestamp2;
+        if (!fileResult.lastDate || timestamp2 > fileResult.lastDate)
+          fileResult.lastDate = timestamp2;
+      }
+      const rawCmd = String(input.command ?? "").trimStart();
+      if (/^node9\s+(scan|explain|report|tail|dlp|status|sessions|audit)\b/.test(rawCmd)) continue;
+      const decoysHere8 = recordCanaries(
+        input,
+        toolName,
+        timestamp2,
+        projLabel,
+        sessionId,
+        "copilot",
+        fileResult,
+        fileDedup,
+        canaryVals
+      );
+      const judged = await judge.judge(
+        {
+          agent: "copilot",
+          toolName,
+          input,
+          scrubbed: decoysHere8.length ? scrubDecoys(input, decoysHere8) : void 0,
+          timestamp: timestamp2,
+          sessionId,
+          project: projLabel,
+          cwd: sessionCwd
+        },
+        fileResult,
+        fileDedup
+      );
+      addUnknown(day, judged.verdict.unknown);
+    }
+    fileResult.loopFindings.push(...detectLoops(sessionCalls, projLabel, sessionId, "copilot"));
+    if (stamp) cache7.put(eventsPath, stamp, "copilot", fileResult, judge, judgeFromFor(startDate));
+    mergeFileScan(result, fileResult, dedup, startDate);
+    await yieldTick();
+  }
+  cache7.close();
+  result.policy = judge.policy(result.unknownInputs ?? {});
+  return result;
+}
 async function scanCodexHistory(startDate, onProgress, onLine, opts = {}) {
   const canaryVals = safeCanaryScanValues();
   const result = {
@@ -29181,9 +29606,17 @@ function startScanWalk(onUpdate) {
       if (cancelled) return;
       const codex = await scanCodexHistory(lookbackStart);
       if (cancelled) return;
+      await yieldToEventLoop();
+      if (cancelled) return;
+      const copilot = await scanCopilotHistory(lookbackStart);
+      if (cancelled) return;
+      await yieldToEventLoop();
+      if (cancelled) return;
+      const antigravity = await scanAntigravityHistory(lookbackStart);
+      if (cancelled) return;
       onUpdate({
         status: "ready",
-        results: { claude, gemini, codex },
+        results: { claude, gemini, codex, copilot, antigravity },
         readyAt: Date.now()
       });
     } catch (err) {
@@ -30112,7 +30545,7 @@ var init_util = __esm({
     BLOCK_REASON_LABELS = {
       timeout: "Approval timeout",
       "smart-rule-block": "Smart rule",
-      "observe-mode-dlp-would-block": "DLP (observe)",
+      "observe-mode-dlp-would-block": "DLP (audit)",
       "persistent-deny": "Persistent deny",
       "local-decision": "User denied",
       "dlp-block": "DLP block",
@@ -30624,23 +31057,12 @@ function filterScanByPeriod(ready, period, now = /* @__PURE__ */ new Date()) {
     if (Number.isNaN(t)) return false;
     return t >= startMs && t <= endMs;
   };
-  const allLeaks = [
-    ...ready.results.claude.dlpFindings,
-    ...ready.results.gemini.dlpFindings,
-    ...ready.results.codex.dlpFindings
-  ].filter((f) => inPeriod(f.timestamp));
-  const allLoops = [
-    ...ready.results.claude.loopFindings,
-    ...ready.results.gemini.loopFindings,
-    ...ready.results.codex.loopFindings
-  ].filter((f) => inPeriod(f.timestamp));
-  const allFindings = [
-    ...ready.results.claude.findings,
-    ...ready.results.gemini.findings,
-    ...ready.results.codex.findings
-  ].filter((f) => inPeriod(f.timestamp));
-  const totalToolCalls = ready.results.claude.totalToolCalls + ready.results.gemini.totalToolCalls + ready.results.codex.totalToolCalls;
-  const sessionsWithEarlySecrets = ready.results.claude.sessionsWithEarlySecrets + ready.results.gemini.sessionsWithEarlySecrets + ready.results.codex.sessionsWithEarlySecrets;
+  const slots = Object.values(ready.results);
+  const allLeaks = slots.flatMap((r) => r.dlpFindings).filter((f) => inPeriod(f.timestamp));
+  const allLoops = slots.flatMap((r) => r.loopFindings).filter((f) => inPeriod(f.timestamp));
+  const allFindings = slots.flatMap((r) => r.findings).filter((f) => inPeriod(f.timestamp));
+  const totalToolCalls = slots.reduce((n, r) => n + r.totalToolCalls, 0);
+  const sessionsWithEarlySecrets = slots.reduce((n, r) => n + r.sessionsWithEarlySecrets, 0);
   return {
     leaks: allLeaks,
     loops: allLoops,

package/dist/scan-ink.mjs

@@ -2346,6 +2346,10 @@ var CHECK_TEXT = {
 };
 var LEVELS = ["audit", "soft", "standard", "strict", "block-all"];
 var MODE_VALUES = ["observe", ...LEVELS];
+function levelOf(mode) {
+  if (mode === "observe") return "audit";
+  return LEVELS.includes(mode ?? "") ? mode : "standard";
+}
 var STRICT = {
   "commands.sql-ddl": "block",
   // The agent disarming a check on its own work (node9Firewall#413 part 2).
@@ -7819,7 +7823,7 @@ function BlockedPanel({
   const origins = rules.map((r) => originForRule(r.name, summary.sections, enabled));
   const anyNeeds = origins.some((o) => o.startsWith("needs shield:"));
   const recordOnly = summary.policy?.recordOnly === true;
-  const footer = recordOnly ? `\u2192 ${summary.policy?.mode} mode: these were logged, not stopped \xB7 nothing here was enforced` : enabled.size === 0 ? "\u2192 install node9 + enable shields above" : anyNeeds ? "\u2192 \u2713 marks rules from enabled shields \xB7 enable the rest above" : "\u2192 \u2713 all these rules come from enabled shields";
+  const footer = recordOnly ? `\u2192 ${levelOf(summary.policy?.mode)} mode: these were logged, not stopped \xB7 nothing here was enforced` : enabled.size === 0 ? "\u2192 install node9 + enable shields above" : anyNeeds ? "\u2192 \u2713 marks rules from enabled shields \xB7 enable the rest above" : "\u2192 \u2713 all these rules come from enabled shields";
   return /* @__PURE__ */ jsxs7(Box7, { borderStyle: "round", borderColor: "red", paddingX: 1, flexDirection: "column", width, children: [
     /* @__PURE__ */ jsxs7(Text7, { bold: true, color: "red", children: [
       recordOnly ? "LOGGED ONLY (not enforced)" : "WOULD HAVE BLOCKED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "2.43.1",
+  "version": "2.44.0",
   "description": "Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",