@node9/proxy 2.8.5 → 2.9.0

package/dist/scan-ink.mjs

@@ -1,5 +1,5 @@
 // src/cli/render/ink/StaticScorecard.tsx
-import { Box as Box11, render } from "ink";
+import { Box as Box12, render } from "ink";
 
 // src/cli/render/ink/SeverityBand.tsx
 import { Box, Text } from "ink";
@@ -177,7 +177,11 @@ var ConfigFileSchema = z.object({
       mode: z.enum(["off", "review", "block"]).optional(),
       allow: z.array(z.string()).optional(),
       deny: z.array(z.string()).optional(),
-      allowPrivate: z.boolean().optional()
+      allowPrivate: z.boolean().optional(),
+      // SSRF floor. `ssrfAllow` exempts OVERRIDABLE tiers only; a tier-1
+      // entry is dropped with a warning at load, never silently honoured.
+      ssrfAllow: z.array(z.string()).optional(),
+      ssrfStrict: z.boolean().optional()
     }).optional(),
     loopDetection: z.object({
       enabled: z.boolean().optional(),
@@ -205,10 +209,52 @@ import os from "os";
 
 // packages/policy-engine/dist/index.mjs
 import safeRegex from "safe-regex2";
+import { createHash } from "crypto";
 import mvdanSh from "mvdan-sh";
 import pm from "picomatch";
 import safeRegex2 from "safe-regex2";
 import safeRegex3 from "safe-regex2";
+var B58 = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
+var B58_INDEX = Object.fromEntries(
+  [...B58].map((c, i) => [c, i])
+);
+function validateBase58Check(s) {
+  if (!s) return null;
+  let n = 0n;
+  for (const c of s) {
+    const v = B58_INDEX[c];
+    if (v === void 0) return null;
+    n = n * 58n + BigInt(v);
+  }
+  let hex = n.toString(16);
+  if (hex.length % 2) hex = "0" + hex;
+  let zeros = 0;
+  for (const c of s) {
+    if (c !== "1") break;
+    zeros++;
+  }
+  const bytes = Buffer.concat([
+    Buffer.alloc(zeros),
+    n === 0n ? Buffer.alloc(0) : Buffer.from(hex, "hex")
+  ]);
+  if (bytes.length < 5) return null;
+  const body = bytes.subarray(0, bytes.length - 4);
+  const check = bytes.subarray(bytes.length - 4);
+  const h = createHash("sha256").update(createHash("sha256").update(body).digest()).digest();
+  return h.subarray(0, 4).equals(check) ? body : null;
+}
+function validateWif(s) {
+  const p = validateBase58Check(s);
+  if (!p || p[0] !== 128) return false;
+  return p.length === 33 || p.length === 34 && p[33] === 1;
+}
+var XPRV_VERSIONS = /* @__PURE__ */ new Set([76066276, 77428856, 78791436]);
+function validateXprv(s) {
+  const p = validateBase58Check(s);
+  if (!p || p.length !== 78) return false;
+  const version = p.readUInt32BE(0);
+  return XPRV_VERSIONS.has(version) && p[45] === 0;
+}
 var DLP_PATTERNS = [
   // ── AWS ───────────────────────────────────────────────────────────────────
   {
@@ -360,6 +406,27 @@ var DLP_PATTERNS = [
     severity: "block",
     keywords: ["sg."]
   },
+  // ── Cryptocurrency private keys (base58check-validated) ───────────────────
+  // Both are anchored with \b on each side: unanchored, `[KL][base58]{51}`
+  // matches INSIDE any longer base58 blob (an xprv, a Solana keypair, a
+  // Monero address). Lookbehind fails safe-regex2; \b is the house style
+  // (see the card regexes). Mainnet only, matching validateWif / validateXprv;
+  // testnet (WIF 0xEF, tprv) is deferred. Cost was measured: the WIF regex
+  // runs on every string (first keyword-less pattern) at 0.024 ms per 100 KB
+  // of prose, so no prefilter is warranted.
+  {
+    name: "Bitcoin WIF Private Key",
+    regex: /\b(?:5[1-9A-HJ-NP-Za-km-z]{50}|[KL][1-9A-HJ-NP-Za-km-z]{51})\b/,
+    severity: "block",
+    validate: validateWif
+  },
+  {
+    name: "Extended Private Key",
+    regex: /\b[xyz]prv[1-9A-HJ-NP-Za-km-z]{107}\b/,
+    severity: "block",
+    keywords: ["xprv", "yprv", "zprv"],
+    validate: validateXprv
+  },
   // ── Private keys (PEM) ────────────────────────────────────────────────────
   {
     name: "Private Key (PEM)",
@@ -1743,10 +1810,52 @@ function LeaksPanel({ summary, width, now = /* @__PURE__ */ new Date() }) {
   ] });
 }
 
-// src/cli/render/ink/panels/BlockedPanel.tsx
+// src/cli/render/ink/panels/DecoyPanel.tsx
 import { Box as Box6, Text as Text6 } from "ink";
+import os2 from "os";
 import { jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
-var ROW_LIMIT2 = 12;
+var ROW_LIMIT2 = 4;
+function shortPath(p) {
+  const home = os2.homedir();
+  return p.startsWith(home) ? "~" + p.slice(home.length) : p;
+}
+function decoySeamPhrase(toolName) {
+  if (toolName === "tool-result") return "read into the agent context";
+  if (toolName === "user-prompt") return "pasted into a prompt";
+  return `appeared in a ${toolName} call`;
+}
+function DecoyPanel({ summary, width, now = /* @__PURE__ */ new Date() }) {
+  const rows = summary.canaries;
+  if (rows.length === 0) return null;
+  return /* @__PURE__ */ jsxs6(Box6, { borderStyle: "round", borderColor: "red", paddingX: 1, flexDirection: "column", width, children: [
+    /* @__PURE__ */ jsxs6(Text6, { bold: true, color: "red", children: [
+      "DECOY TRIPPED",
+      /* @__PURE__ */ jsx6(Text6, { dimColor: true, children: topOf(Math.min(rows.length, ROW_LIMIT2), rows.length) })
+    ] }),
+    rows.slice(0, ROW_LIMIT2).map((c, i) => /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs6(Box6, { children: [
+        /* @__PURE__ */ jsx6(Box6, { width: 5, children: /* @__PURE__ */ jsx6(Text6, { dimColor: true, children: relativeDate(c.timestamp, now).padStart(4) }) }),
+        /* @__PURE__ */ jsx6(Box6, { width: 16, children: /* @__PURE__ */ jsxs6(Text6, { color: "red", bold: true, wrap: "truncate-end", children: [
+          c.kind,
+          c.retired ? " (retired)" : ""
+        ] }) }),
+        /* @__PURE__ */ jsx6(Box6, { width: 15, children: /* @__PURE__ */ jsx6(Text6, { dimColor: true, wrap: "truncate-end", children: `[${c.toolName}]` }) }),
+        /* @__PURE__ */ jsx6(Text6, { dimColor: true, wrap: "truncate-end", children: c.agent })
+      ] }),
+      /* @__PURE__ */ jsx6(Text6, { dimColor: true, wrap: "truncate-end", children: `  ${shortPath(c.path)} \u2014 ${decoySeamPhrase(c.toolName)}` })
+    ] }, i)),
+    /* @__PURE__ */ jsxs6(Box6, { children: [
+      /* @__PURE__ */ jsx6(Text6, { dimColor: true, children: "\u2192 " }),
+      /* @__PURE__ */ jsx6(Text6, { bold: true, color: "cyan", children: "node9 canary status" }),
+      /* @__PURE__ */ jsx6(Text6, { dimColor: true, wrap: "truncate-end", children: " (something read that file)" })
+    ] })
+  ] });
+}
+
+// src/cli/render/ink/panels/BlockedPanel.tsx
+import { Box as Box7, Text as Text7 } from "ink";
+import { jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
+var ROW_LIMIT3 = 12;
 function BlockedPanel({
   summary,
   width,
@@ -1754,30 +1863,30 @@ function BlockedPanel({
 }) {
   const enabled = new Set(enabledShields);
   const allRules = topRulesByVerdict(summary.sections, "block", Number.MAX_SAFE_INTEGER);
-  const rules = allRules.slice(0, ROW_LIMIT2);
+  const rules = allRules.slice(0, ROW_LIMIT3);
   if (rules.length === 0) return null;
   const origins = rules.map((r) => originForRule(r.name, summary.sections, enabled));
   const anyNeeds = origins.some((o) => o.startsWith("needs shield:"));
   const footer = enabled.size === 0 ? "\u2192 install node9 + enable shields above" : anyNeeds ? "\u2192 \u2713 marks rules from enabled shields \xB7 enable the rest above" : "\u2192 \u2713 all these rules come from enabled shields";
-  return /* @__PURE__ */ jsxs6(Box6, { borderStyle: "round", borderColor: "red", paddingX: 1, flexDirection: "column", width, children: [
-    /* @__PURE__ */ jsxs6(Text6, { bold: true, color: "red", children: [
+  return /* @__PURE__ */ jsxs7(Box7, { borderStyle: "round", borderColor: "red", paddingX: 1, flexDirection: "column", width, children: [
+    /* @__PURE__ */ jsxs7(Text7, { bold: true, color: "red", children: [
       "WOULD HAVE BLOCKED",
-      /* @__PURE__ */ jsx6(Text6, { dimColor: true, children: topOf(rules.length, allRules.length) })
+      /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: topOf(rules.length, allRules.length) })
     ] }),
-    rules.map((rule, i) => /* @__PURE__ */ jsxs6(Box6, { children: [
-      /* @__PURE__ */ jsx6(Box6, { width: 3, children: /* @__PURE__ */ jsx6(Text6, { color: "red", children: "\u2717" }) }),
-      /* @__PURE__ */ jsx6(Box6, { width: 24, children: /* @__PURE__ */ jsx6(Text6, { bold: true, wrap: "truncate-end", children: rule.name }) }),
-      /* @__PURE__ */ jsx6(Box6, { width: 6, children: /* @__PURE__ */ jsx6(Text6, { bold: true, children: `\xD7${rule.count}` }) }),
-      /* @__PURE__ */ jsx6(Text6, { dimColor: true, wrap: "truncate-end", children: originForRule(rule.name, summary.sections, enabled) })
+    rules.map((rule, i) => /* @__PURE__ */ jsxs7(Box7, { children: [
+      /* @__PURE__ */ jsx7(Box7, { width: 3, children: /* @__PURE__ */ jsx7(Text7, { color: "red", children: "\u2717" }) }),
+      /* @__PURE__ */ jsx7(Box7, { width: 24, children: /* @__PURE__ */ jsx7(Text7, { bold: true, wrap: "truncate-end", children: rule.name }) }),
+      /* @__PURE__ */ jsx7(Box7, { width: 6, children: /* @__PURE__ */ jsx7(Text7, { bold: true, children: `\xD7${rule.count}` }) }),
+      /* @__PURE__ */ jsx7(Text7, { dimColor: true, wrap: "truncate-end", children: originForRule(rule.name, summary.sections, enabled) })
     ] }, i)),
-    /* @__PURE__ */ jsx6(Box6, { children: /* @__PURE__ */ jsx6(Text6, { dimColor: true, wrap: "truncate-end", children: footer }) })
+    /* @__PURE__ */ jsx7(Box7, { children: /* @__PURE__ */ jsx7(Text7, { dimColor: true, wrap: "truncate-end", children: footer }) })
   ] });
 }
 
 // src/cli/render/ink/panels/BlastRadiusPanel.tsx
-import { Box as Box7, Text as Text7 } from "ink";
-import { jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
-var ROW_LIMIT3 = 4;
+import { Box as Box8, Text as Text8 } from "ink";
+import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
+var ROW_LIMIT4 = 4;
 var ENV_ROW_LIMIT = 3;
 function BlastRadiusPanel({
   blast,
@@ -1785,62 +1894,62 @@ function BlastRadiusPanel({
   width
 }) {
   if (blastExposures === 0) return null;
-  const shown = Math.min(blast.reachable.length, ROW_LIMIT3) + Math.min(blast.envFindings.length, ENV_ROW_LIMIT);
-  return /* @__PURE__ */ jsxs7(Box7, { borderStyle: "round", borderColor: "yellow", paddingX: 1, flexDirection: "column", width, children: [
-    /* @__PURE__ */ jsxs7(Text7, { bold: true, color: "yellow", children: [
+  const shown = Math.min(blast.reachable.length, ROW_LIMIT4) + Math.min(blast.envFindings.length, ENV_ROW_LIMIT);
+  return /* @__PURE__ */ jsxs8(Box8, { borderStyle: "round", borderColor: "yellow", paddingX: 1, flexDirection: "column", width, children: [
+    /* @__PURE__ */ jsxs8(Text8, { bold: true, color: "yellow", children: [
       "BLAST RADIUS",
-      /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: topOf(shown, blastExposures) })
+      /* @__PURE__ */ jsx8(Text8, { dimColor: true, children: topOf(shown, blastExposures) })
     ] }),
-    blast.reachable.slice(0, ROW_LIMIT3).map((path2, i) => {
+    blast.reachable.slice(0, ROW_LIMIT4).map((path2, i) => {
       const desc = path2.description.split(" \u2014 ")[0].split(/—|--/)[0].trim();
-      return /* @__PURE__ */ jsxs7(Box7, { children: [
-        /* @__PURE__ */ jsx7(Box7, { width: 3, children: /* @__PURE__ */ jsx7(Text7, { color: "red", children: "\u2717" }) }),
-        /* @__PURE__ */ jsx7(Box7, { width: 36, children: /* @__PURE__ */ jsx7(Text7, { children: path2.label }) }),
-        /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: desc })
+      return /* @__PURE__ */ jsxs8(Box8, { children: [
+        /* @__PURE__ */ jsx8(Box8, { width: 3, children: /* @__PURE__ */ jsx8(Text8, { color: "red", children: "\u2717" }) }),
+        /* @__PURE__ */ jsx8(Box8, { width: 36, children: /* @__PURE__ */ jsx8(Text8, { children: path2.label }) }),
+        /* @__PURE__ */ jsx8(Text8, { dimColor: true, children: desc })
       ] }, i);
     }),
-    blast.envFindings.slice(0, 3).map((env, i) => /* @__PURE__ */ jsxs7(Box7, { children: [
-      /* @__PURE__ */ jsx7(Box7, { width: 3, children: /* @__PURE__ */ jsx7(Text7, { color: "yellow", children: "\u26A0" }) }),
-      /* @__PURE__ */ jsx7(Text7, { children: env.key }),
-      /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: ` (${env.patternName})` })
+    blast.envFindings.slice(0, 3).map((env, i) => /* @__PURE__ */ jsxs8(Box8, { children: [
+      /* @__PURE__ */ jsx8(Box8, { width: 3, children: /* @__PURE__ */ jsx8(Text8, { color: "yellow", children: "\u26A0" }) }),
+      /* @__PURE__ */ jsx8(Text8, { children: env.key }),
+      /* @__PURE__ */ jsx8(Text8, { dimColor: true, children: ` (${env.patternName})` })
     ] }, `env-${i}`)),
-    /* @__PURE__ */ jsxs7(Box7, { children: [
-      /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "\u2192 " }),
-      /* @__PURE__ */ jsx7(Text7, { bold: true, color: "cyan", children: "project-jail" }),
-      /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: " shield blocks agent reads of these paths" })
+    /* @__PURE__ */ jsxs8(Box8, { children: [
+      /* @__PURE__ */ jsx8(Text8, { dimColor: true, children: "\u2192 " }),
+      /* @__PURE__ */ jsx8(Text8, { bold: true, color: "cyan", children: "project-jail" }),
+      /* @__PURE__ */ jsx8(Text8, { dimColor: true, children: " shield blocks agent reads of these paths" })
     ] })
   ] });
 }
 
 // src/cli/render/ink/panels/ReviewQueuePanel.tsx
-import { Box as Box8, Text as Text8 } from "ink";
-import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
-var ROW_LIMIT4 = 5;
+import { Box as Box9, Text as Text9 } from "ink";
+import { jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
+var ROW_LIMIT5 = 5;
 function ReviewQueuePanel({
   summary,
   width,
   enabledShields = []
 }) {
   const enabled = new Set(enabledShields);
-  const rules = topRulesByVerdict(summary.sections, "review", ROW_LIMIT4);
+  const rules = topRulesByVerdict(summary.sections, "review", ROW_LIMIT5);
   if (rules.length === 0) return null;
-  return /* @__PURE__ */ jsxs8(Box8, { borderStyle: "round", borderColor: "gray", paddingX: 1, flexDirection: "column", width, children: [
-    /* @__PURE__ */ jsx8(Text8, { bold: true, children: "REVIEW QUEUE" }),
-    rules.map((rule, i) => /* @__PURE__ */ jsxs8(Box8, { children: [
-      /* @__PURE__ */ jsx8(Box8, { width: 22, children: /* @__PURE__ */ jsx8(Text8, { wrap: "truncate-end", children: rule.name }) }),
-      /* @__PURE__ */ jsx8(Box8, { width: 6, children: /* @__PURE__ */ jsx8(Text8, { bold: true, children: `\xD7${rule.count}` }) }),
-      /* @__PURE__ */ jsx8(Text8, { dimColor: true, wrap: "truncate-end", children: originForRule(rule.name, summary.sections, enabled) })
+  return /* @__PURE__ */ jsxs9(Box9, { borderStyle: "round", borderColor: "gray", paddingX: 1, flexDirection: "column", width, children: [
+    /* @__PURE__ */ jsx9(Text9, { bold: true, children: "REVIEW QUEUE" }),
+    rules.map((rule, i) => /* @__PURE__ */ jsxs9(Box9, { children: [
+      /* @__PURE__ */ jsx9(Box9, { width: 22, children: /* @__PURE__ */ jsx9(Text9, { wrap: "truncate-end", children: rule.name }) }),
+      /* @__PURE__ */ jsx9(Box9, { width: 6, children: /* @__PURE__ */ jsx9(Text9, { bold: true, children: `\xD7${rule.count}` }) }),
+      /* @__PURE__ */ jsx9(Text9, { dimColor: true, wrap: "truncate-end", children: originForRule(rule.name, summary.sections, enabled) })
     ] }, i)),
-    /* @__PURE__ */ jsxs8(Box8, { children: [
-      /* @__PURE__ */ jsx8(Text8, { dimColor: true, wrap: "truncate-end", children: "\u2192 " }),
-      /* @__PURE__ */ jsx8(Text8, { bold: true, color: "cyan", wrap: "truncate-end", children: "runtime approval" })
+    /* @__PURE__ */ jsxs9(Box9, { children: [
+      /* @__PURE__ */ jsx9(Text9, { dimColor: true, wrap: "truncate-end", children: "\u2192 " }),
+      /* @__PURE__ */ jsx9(Text9, { bold: true, color: "cyan", wrap: "truncate-end", children: "runtime approval" })
     ] })
   ] });
 }
 
 // src/cli/render/ink/panels/AgentLoopsPanel.tsx
-import { Box as Box9, Text as Text9 } from "ink";
-import { Fragment, jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
+import { Box as Box10, Text as Text10 } from "ink";
+import { Fragment, jsx as jsx10, jsxs as jsxs10 } from "react/jsx-runtime";
 var TOOL_ROW_LIMIT = 5;
 var STUCK_ROW_LIMIT = 1;
 function fmtNum2(n) {
@@ -1861,38 +1970,38 @@ function AgentLoopsPanel({ loopFindings, width }) {
   }
   const toolEntries = [...byTool.entries()].sort((a, b) => b[1] - a[1]).slice(0, TOOL_ROW_LIMIT);
   const topStuck = [...loopFindings].sort((a, b) => b.count - a.count).slice(0, STUCK_ROW_LIMIT);
-  return /* @__PURE__ */ jsxs9(Box9, { borderStyle: "round", borderColor: "gray", paddingX: 1, flexDirection: "column", width, children: [
-    /* @__PURE__ */ jsxs9(Text9, { bold: true, children: [
+  return /* @__PURE__ */ jsxs10(Box10, { borderStyle: "round", borderColor: "gray", paddingX: 1, flexDirection: "column", width, children: [
+    /* @__PURE__ */ jsxs10(Text10, { bold: true, children: [
       "AGENT LOOPS",
-      /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: topOf(toolEntries.length, byTool.size) })
+      /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: topOf(toolEntries.length, byTool.size) })
     ] }),
     toolEntries.map(([tool, repeats]) => {
       const pct = totalRepeats > 0 ? Math.round(repeats / totalRepeats * 100) : 0;
-      return /* @__PURE__ */ jsxs9(Box9, { children: [
-        /* @__PURE__ */ jsx9(Box9, { width: 10, children: /* @__PURE__ */ jsx9(Text9, { bold: true, children: tool }) }),
-        /* @__PURE__ */ jsx9(Box9, { width: 14, children: /* @__PURE__ */ jsx9(Text9, { children: `\xD7${fmtNum2(repeats)}` }) }),
-        /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: `${pct}%` })
+      return /* @__PURE__ */ jsxs10(Box10, { children: [
+        /* @__PURE__ */ jsx10(Box10, { width: 10, children: /* @__PURE__ */ jsx10(Text10, { bold: true, children: tool }) }),
+        /* @__PURE__ */ jsx10(Box10, { width: 14, children: /* @__PURE__ */ jsx10(Text10, { children: `\xD7${fmtNum2(repeats)}` }) }),
+        /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: `${pct}%` })
       ] }, tool);
     }),
-    topStuck.length > 0 ? /* @__PURE__ */ jsxs9(Fragment, { children: [
-      /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: "Top stuck:" }),
+    topStuck.length > 0 ? /* @__PURE__ */ jsxs10(Fragment, { children: [
+      /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: "Top stuck:" }),
       topStuck.map((f, i) => {
         const target = trimRight(f.commandPreview || f.toolName, 32);
-        return /* @__PURE__ */ jsxs9(Box9, { children: [
-          /* @__PURE__ */ jsx9(Box9, { width: 8, children: /* @__PURE__ */ jsx9(Text9, { bold: true, children: `\xD7${fmtNum2(f.count)}` }) }),
-          /* @__PURE__ */ jsx9(Text9, { dimColor: true, wrap: "truncate-end", children: target })
+        return /* @__PURE__ */ jsxs10(Box10, { children: [
+          /* @__PURE__ */ jsx10(Box10, { width: 8, children: /* @__PURE__ */ jsx10(Text10, { bold: true, children: `\xD7${fmtNum2(f.count)}` }) }),
+          /* @__PURE__ */ jsx10(Text10, { dimColor: true, wrap: "truncate-end", children: target })
         ] }, `stuck-${i}`);
       })
     ] }) : null,
-    /* @__PURE__ */ jsxs9(Box9, { children: [
-      /* @__PURE__ */ jsx9(Text9, { dimColor: true, wrap: "truncate-end", children: "\u2192 " }),
-      /* @__PURE__ */ jsx9(Text9, { bold: true, color: "cyan", wrap: "truncate-end", children: "live loop-detector" })
+    /* @__PURE__ */ jsxs10(Box10, { children: [
+      /* @__PURE__ */ jsx10(Text10, { dimColor: true, wrap: "truncate-end", children: "\u2192 " }),
+      /* @__PURE__ */ jsx10(Text10, { bold: true, color: "cyan", wrap: "truncate-end", children: "live loop-detector" })
     ] })
   ] });
 }
 
 // src/cli/render/ink/panels/ShieldsPanel.tsx
-import { Box as Box10, Text as Text10 } from "ink";
+import { Box as Box11, Text as Text11 } from "ink";
 
 // src/protection.ts
 var PROTECTIVE_SHIELD_DISCOUNTS = {
@@ -1900,7 +2009,7 @@ var PROTECTIVE_SHIELD_DISCOUNTS = {
 };
 
 // src/cli/render/ink/panels/ShieldsPanel.tsx
-import { jsx as jsx10, jsxs as jsxs10 } from "react/jsx-runtime";
+import { jsx as jsx11, jsxs as jsxs11 } from "react/jsx-runtime";
 function ShieldsPanel({ summary, width, enabledShields = [] }) {
   const enabled = new Set(enabledShields);
   const impacts = rollupByShield(summary.sections);
@@ -1921,26 +2030,26 @@ function ShieldsPanel({ summary, width, enabledShields = [] }) {
   const allCovered = !topRec && hitShields.some(
     (r) => (PROTECTIVE_SHIELD_DISCOUNTS[r.shieldName] ?? 0) > 0 && enabled.has(r.shieldName)
   );
-  return /* @__PURE__ */ jsxs10(Box10, { borderStyle: "round", borderColor: "cyan", paddingX: 1, flexDirection: "column", width, children: [
-    /* @__PURE__ */ jsx10(Text10, { bold: true, color: "cyan", children: "SHIELDS" }),
+  return /* @__PURE__ */ jsxs11(Box11, { borderStyle: "round", borderColor: "cyan", paddingX: 1, flexDirection: "column", width, children: [
+    /* @__PURE__ */ jsx11(Text11, { bold: true, color: "cyan", children: "SHIELDS" }),
     hitShields.map((impact) => {
       const discount = PROTECTIVE_SHIELD_DISCOUNTS[impact.shieldName] ?? 0;
       const isOn = enabled.has(impact.shieldName);
       const noun = `op${impact.totalCatches !== 1 ? "s" : ""}`;
-      return /* @__PURE__ */ jsxs10(Box10, { children: [
-        /* @__PURE__ */ jsx10(Box10, { width: 16, children: /* @__PURE__ */ jsx10(Text10, { bold: true, color: discount > 0 ? "cyan" : void 0, dimColor: discount === 0, children: impact.shieldName }) }),
-        /* @__PURE__ */ jsx10(Box10, { width: 20, children: /* @__PURE__ */ jsx10(Text10, { dimColor: true, children: `catches ${impact.totalCatches} ${noun}` }) }),
-        isOn ? /* @__PURE__ */ jsx10(Text10, { bold: true, color: "green", children: `\u2713 enabled` }) : discount > 0 ? /* @__PURE__ */ jsx10(Text10, { bold: true, color: "green", children: `\u2192 blocks these reads in-path` }) : null
+      return /* @__PURE__ */ jsxs11(Box11, { children: [
+        /* @__PURE__ */ jsx11(Box11, { width: 16, children: /* @__PURE__ */ jsx11(Text11, { bold: true, color: discount > 0 ? "cyan" : void 0, dimColor: discount === 0, children: impact.shieldName }) }),
+        /* @__PURE__ */ jsx11(Box11, { width: 20, children: /* @__PURE__ */ jsx11(Text11, { dimColor: true, children: `catches ${impact.totalCatches} ${noun}` }) }),
+        isOn ? /* @__PURE__ */ jsx11(Text11, { bold: true, color: "green", children: `\u2713 enabled` }) : discount > 0 ? /* @__PURE__ */ jsx11(Text11, { bold: true, color: "green", children: `\u2192 blocks these reads in-path` }) : null
       ] }, impact.shieldName);
     }),
-    zeroHitEnabled.length > 0 ? /* @__PURE__ */ jsx10(Box10, { flexDirection: "column", children: /* @__PURE__ */ jsx10(Text10, { dimColor: true, wrap: "truncate-end", children: "\u2713 active: " + zeroHitEnabled.join(" \xB7 ") + "  (no hits in this history)" }) }) : null,
-    zeroHitBuiltins.length > 0 ? /* @__PURE__ */ jsx10(Box10, { flexDirection: "column", children: /* @__PURE__ */ jsx10(Text10, { dimColor: true, wrap: "truncate-end", children: zeroHitBuiltins.join(" \xB7 ") + "  (no hits \u2014 install proactively)" }) }) : null,
-    topRec ? /* @__PURE__ */ jsx10(Box10, { children: /* @__PURE__ */ jsx10(Text10, { color: "cyan", bold: true, children: `\u2192 node9 shield enable ${topRec.shieldName}   (start here \u2014 widest coverage)` }) }) : allCovered ? /* @__PURE__ */ jsx10(Box10, { children: /* @__PURE__ */ jsx10(Text10, { color: "green", bold: true, children: "\u2713 recommended shields are enabled" }) }) : null
+    zeroHitEnabled.length > 0 ? /* @__PURE__ */ jsx11(Box11, { flexDirection: "column", children: /* @__PURE__ */ jsx11(Text11, { dimColor: true, wrap: "truncate-end", children: "\u2713 active: " + zeroHitEnabled.join(" \xB7 ") + "  (no hits in this history)" }) }) : null,
+    zeroHitBuiltins.length > 0 ? /* @__PURE__ */ jsx11(Box11, { flexDirection: "column", children: /* @__PURE__ */ jsx11(Text11, { dimColor: true, wrap: "truncate-end", children: zeroHitBuiltins.join(" \xB7 ") + "  (no hits \u2014 install proactively)" }) }) : null,
+    topRec ? /* @__PURE__ */ jsx11(Box11, { children: /* @__PURE__ */ jsx11(Text11, { color: "cyan", bold: true, children: `\u2192 node9 shield enable ${topRec.shieldName}   (start here \u2014 widest coverage)` }) }) : allCovered ? /* @__PURE__ */ jsx11(Box11, { children: /* @__PURE__ */ jsx11(Text11, { color: "green", bold: true, children: "\u2713 recommended shields are enabled" }) }) : null
   ] });
 }
 
 // src/cli/render/ink/StaticScorecard.tsx
-import { Fragment as Fragment2, jsx as jsx11, jsxs as jsxs11 } from "react/jsx-runtime";
+import { Fragment as Fragment2, jsx as jsx12, jsxs as jsxs12 } from "react/jsx-runtime";
 var MAX_WIDTH = 90;
 function renderWidth() {
   const term = process.stdout.columns ?? MAX_WIDTH;
@@ -1951,9 +2060,13 @@ function StaticScorecard({ input, rangeLabel, now }) {
   const width = renderWidth();
   const halfWidth = Math.floor((width - 1) / 2);
   const leakCount = summary.leaks.length;
-  const hasCritical = leakCount > 0 || blockedCount > 0;
+  const decoyCount = summary.canaries.length;
+  const hasCritical = decoyCount > 0 || leakCount > 0 || blockedCount > 0;
   const criticalLabel = (() => {
     const parts = [];
+    if (decoyCount > 0) {
+      parts.push(`${decoyCount} decoy${decoyCount !== 1 ? "s" : ""} tripped`);
+    }
     if (leakCount > 0) {
       parts.push(`${leakCount} secret${leakCount !== 1 ? "s" : ""} leaked`);
     }
@@ -1962,18 +2075,19 @@ function StaticScorecard({ input, rangeLabel, now }) {
     }
     return `Critical (${parts.join(" + ")})`;
   })();
-  return /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", paddingTop: 1, width, children: [
-    /* @__PURE__ */ jsx11(Header, { rangeLabel }),
-    /* @__PURE__ */ jsx11(SeverityBand, { label: "Spend & activity", width }),
-    /* @__PURE__ */ jsxs11(Box11, { flexDirection: "row", gap: 1, children: [
-      /* @__PURE__ */ jsx11(CostPanel, { summary, width: halfWidth, keyed: input.keyed }),
-      /* @__PURE__ */ jsx11(ActivityPanel, { summary, scan: input.scan, width: halfWidth })
+  return /* @__PURE__ */ jsxs12(Box12, { flexDirection: "column", paddingTop: 1, width, children: [
+    /* @__PURE__ */ jsx12(Header, { rangeLabel }),
+    /* @__PURE__ */ jsx12(SeverityBand, { label: "Spend & activity", width }),
+    /* @__PURE__ */ jsxs12(Box12, { flexDirection: "row", gap: 1, children: [
+      /* @__PURE__ */ jsx12(CostPanel, { summary, width: halfWidth, keyed: input.keyed }),
+      /* @__PURE__ */ jsx12(ActivityPanel, { summary, scan: input.scan, width: halfWidth })
     ] }),
-    hasCritical ? /* @__PURE__ */ jsxs11(Fragment2, { children: [
-      /* @__PURE__ */ jsx11(SeverityBand, { label: criticalLabel, width }),
-      /* @__PURE__ */ jsxs11(Box11, { flexDirection: "row", gap: 1, children: [
-        /* @__PURE__ */ jsx11(LeaksPanel, { summary, width: halfWidth, now }),
-        /* @__PURE__ */ jsx11(
+    hasCritical ? /* @__PURE__ */ jsxs12(Fragment2, { children: [
+      /* @__PURE__ */ jsx12(SeverityBand, { label: criticalLabel, width }),
+      decoyCount > 0 ? /* @__PURE__ */ jsx12(Box12, { flexDirection: "row", gap: 1, children: /* @__PURE__ */ jsx12(DecoyPanel, { summary, width: halfWidth, now }) }) : null,
+      /* @__PURE__ */ jsxs12(Box12, { flexDirection: "row", gap: 1, children: [
+        /* @__PURE__ */ jsx12(LeaksPanel, { summary, width: halfWidth, now }),
+        /* @__PURE__ */ jsx12(
           BlockedPanel,
           {
             summary,
@@ -1983,8 +2097,8 @@ function StaticScorecard({ input, rangeLabel, now }) {
         )
       ] })
     ] }) : null,
-    input.blastExposures > 0 ? /* @__PURE__ */ jsxs11(Fragment2, { children: [
-      /* @__PURE__ */ jsx11(
+    input.blastExposures > 0 ? /* @__PURE__ */ jsxs12(Fragment2, { children: [
+      /* @__PURE__ */ jsx12(
         SeverityBand,
         {
           label: (() => {
@@ -1997,7 +2111,7 @@ function StaticScorecard({ input, rangeLabel, now }) {
           width
         }
       ),
-      /* @__PURE__ */ jsx11(
+      /* @__PURE__ */ jsx12(
         BlastRadiusPanel,
         {
           blast: input.blast,
@@ -2020,10 +2134,10 @@ function StaticScorecard({ input, rangeLabel, now }) {
         parts.push(
           `${loopCount} loop${loopCount !== 1 ? "s" : ""}${wastedCalls > 0 ? ` \xB7 ${wastedCalls} repeat calls (${wastePct}% of all calls)` : ""}`
         );
-      return /* @__PURE__ */ jsxs11(Fragment2, { children: [
-        /* @__PURE__ */ jsx11(SeverityBand, { label: `Medium (${parts.join(" \xB7 ")})`, width }),
-        /* @__PURE__ */ jsxs11(Box11, { flexDirection: "row", gap: 1, children: [
-          /* @__PURE__ */ jsx11(
+      return /* @__PURE__ */ jsxs12(Fragment2, { children: [
+        /* @__PURE__ */ jsx12(SeverityBand, { label: `Medium (${parts.join(" \xB7 ")})`, width }),
+        /* @__PURE__ */ jsxs12(Box12, { flexDirection: "row", gap: 1, children: [
+          /* @__PURE__ */ jsx12(
             ReviewQueuePanel,
             {
               summary: input.summary,
@@ -2031,16 +2145,16 @@ function StaticScorecard({ input, rangeLabel, now }) {
               enabledShields: input.enabledShields
             }
           ),
-          /* @__PURE__ */ jsx11(AgentLoopsPanel, { loopFindings: input.scan.loopFindings, width: halfWidth })
+          /* @__PURE__ */ jsx12(AgentLoopsPanel, { loopFindings: input.scan.loopFindings, width: halfWidth })
         ] })
       ] });
     })(),
-    /* @__PURE__ */ jsx11(SeverityBand, { label: "Recommended action", width }),
-    /* @__PURE__ */ jsx11(ShieldsPanel, { summary: input.summary, width, enabledShields: input.enabledShields })
+    /* @__PURE__ */ jsx12(SeverityBand, { label: "Recommended action", width }),
+    /* @__PURE__ */ jsx12(ShieldsPanel, { summary: input.summary, width, enabledShields: input.enabledShields })
   ] });
 }
 function renderScanScorecardInk(input, rangeLabel) {
-  const { unmount } = render(/* @__PURE__ */ jsx11(StaticScorecard, { input, rangeLabel }), {
+  const { unmount } = render(/* @__PURE__ */ jsx12(StaticScorecard, { input, rangeLabel }), {
     patchConsole: false
   });
   unmount();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "2.8.5",
+  "version": "2.9.0",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",