@node9/proxy 2.43.1 → 2.45.0

package/dist/scan-ink.mjs

@@ -2346,6 +2346,10 @@ var CHECK_TEXT = {
 };
 var LEVELS = ["audit", "soft", "standard", "strict", "block-all"];
 var MODE_VALUES = ["observe", ...LEVELS];
+function levelOf(mode) {
+  if (mode === "observe") return "audit";
+  return LEVELS.includes(mode ?? "") ? mode : "standard";
+}
 var STRICT = {
   "commands.sql-ddl": "block",
   // The agent disarming a check on its own work (node9Firewall#413 part 2).
@@ -7819,7 +7823,7 @@ function BlockedPanel({
   const origins = rules.map((r) => originForRule(r.name, summary.sections, enabled));
   const anyNeeds = origins.some((o) => o.startsWith("needs shield:"));
   const recordOnly = summary.policy?.recordOnly === true;
-  const footer = recordOnly ? `\u2192 ${summary.policy?.mode} mode: these were logged, not stopped \xB7 nothing here was enforced` : enabled.size === 0 ? "\u2192 install node9 + enable shields above" : anyNeeds ? "\u2192 \u2713 marks rules from enabled shields \xB7 enable the rest above" : "\u2192 \u2713 all these rules come from enabled shields";
+  const footer = recordOnly ? `\u2192 ${levelOf(summary.policy?.mode)} mode: these were logged, not stopped \xB7 nothing here was enforced` : enabled.size === 0 ? "\u2192 install node9 + enable shields above" : anyNeeds ? "\u2192 \u2713 marks rules from enabled shields \xB7 enable the rest above" : "\u2192 \u2713 all these rules come from enabled shields";
   return /* @__PURE__ */ jsxs7(Box7, { borderStyle: "round", borderColor: "red", paddingX: 1, flexDirection: "column", width, children: [
     /* @__PURE__ */ jsxs7(Text7, { bold: true, color: "red", children: [
       recordOnly ? "LOGGED ONLY (not enforced)" : "WOULD HAVE BLOCKED",
@@ -7956,9 +7960,10 @@ function AgentLoopsPanel({ loopFindings, width }) {
 import { Box as Box11, Text as Text11 } from "ink";
 
 // src/protection.ts
-var PROTECTIVE_SHIELD_DISCOUNTS = {
-  "project-jail": 0.7
-};
+var PROTECTIVE_SHIELDS = /* @__PURE__ */ new Set(["project-jail"]);
+function isProtectiveShield(name) {
+  return PROTECTIVE_SHIELDS.has(name);
+}
 
 // src/cli/render/ink/panels/ShieldsPanel.tsx
 import { jsx as jsx11, jsxs as jsxs11 } from "react/jsx-runtime";
@@ -7966,8 +7971,8 @@ function ShieldsPanel({ summary, width, enabledShields = [] }) {
   const enabled = new Set(enabledShields);
   const impacts = rollupByShield(summary.sections);
   const ranked = [...impacts].sort((a, b) => {
-    const aDiscount = PROTECTIVE_SHIELD_DISCOUNTS[a.shieldName] ?? 0;
-    const bDiscount = PROTECTIVE_SHIELD_DISCOUNTS[b.shieldName] ?? 0;
+    const aDiscount = isProtectiveShield(a.shieldName) ? 1 : 0;
+    const bDiscount = isProtectiveShield(b.shieldName) ? 1 : 0;
     if (aDiscount !== bDiscount) return bDiscount - aDiscount;
     return b.totalCatches - a.totalCatches;
   });
@@ -7977,15 +7982,13 @@ function ShieldsPanel({ summary, width, enabledShields = [] }) {
   const zeroHitBuiltins = zeroHitAll.filter((name) => !enabled.has(name));
   const zeroHitEnabled = zeroHitAll.filter((name) => enabled.has(name));
   const topRec = hitShields.find(
-    (r) => (PROTECTIVE_SHIELD_DISCOUNTS[r.shieldName] ?? 0) > 0 && !enabled.has(r.shieldName)
-  );
-  const allCovered = !topRec && hitShields.some(
-    (r) => (PROTECTIVE_SHIELD_DISCOUNTS[r.shieldName] ?? 0) > 0 && enabled.has(r.shieldName)
+    (r) => isProtectiveShield(r.shieldName) && !enabled.has(r.shieldName)
   );
+  const allCovered = !topRec && hitShields.some((r) => isProtectiveShield(r.shieldName) && enabled.has(r.shieldName));
   return /* @__PURE__ */ jsxs11(Box11, { borderStyle: "round", borderColor: "cyan", paddingX: 1, flexDirection: "column", width, children: [
     /* @__PURE__ */ jsx11(Text11, { bold: true, color: "cyan", children: "SHIELDS" }),
     hitShields.map((impact) => {
-      const discount = PROTECTIVE_SHIELD_DISCOUNTS[impact.shieldName] ?? 0;
+      const discount = isProtectiveShield(impact.shieldName) ? 1 : 0;
       const isOn = enabled.has(impact.shieldName);
       const noun = `op${impact.totalCatches !== 1 ? "s" : ""}`;
       return /* @__PURE__ */ jsxs11(Box11, { children: [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "2.43.1",
+  "version": "2.45.0",
   "description": "Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",