dsh-permission-rules 0.6.21 → 0.7.0

package/lib/typert.host.js

@@ -4137,13 +4137,26 @@ const PERMISSION_RULES_SNAPSHOT_SCHEMA = object({
 		matched: boolean(),
 		source: string(),
 		ruleIndex: number().int().nullable(),
-		reason: string().nullable()
+		reason: string().nullable(),
+		cwd: string().nullable()
 	})),
 	sources: array(object({
 		path: string(),
 		exists: boolean(),
 		cwd: string().nullable()
-	}))
+	})),
+	allowHostAction: boolean(),
+	upstream: object({
+		mode: union([
+			literal("off"),
+			literal("inherit"),
+			literal("url")
+		]),
+		http: string().nullable(),
+		https: string().nullable(),
+		active: boolean(),
+		chained: number().int()
+	})
 });
 /** Strict wire schema for {@link RulesReadResult}. */
 const RULES_READ_SCHEMA = object({
@@ -4163,6 +4176,32 @@ const RULES_RELOAD_SCHEMA = object({
 	ok: boolean(),
 	error: string().nullable()
 });
+/** Strict wire schema for {@link AllowHostRequest}. */
+const ALLOW_HOST_REQUEST_SCHEMA = object({
+	host: string(),
+	scheme: union([
+		literal("http"),
+		literal("https"),
+		_null()
+	]),
+	port: number().int().nullable(),
+	cwd: string().nullable()
+});
+/** Strict wire schema for {@link AllowHostResult}. */
+const ALLOW_HOST_RESULT_SCHEMA = object({
+	ok: boolean(),
+	path: string().nullable(),
+	created: boolean(),
+	reloaded: number().int(),
+	outcome: union([
+		literal("allow"),
+		literal("deny"),
+		literal("ask"),
+		_null()
+	]),
+	alreadyAllowed: boolean(),
+	error: string().nullable()
+});
 /** The `permissionRules/networkStatus` invocation descriptor (no parameters). */
 const NETWORK_STATUS_DESCRIPTOR = Object.freeze({
 	id: "dsh-permission-rules#permissionRules/networkStatus",
@@ -4267,6 +4306,37 @@ const RULES_RELOAD_DESCRIPTOR = Object.freeze({
 	})
 });
 /**
+* The `permissionRules/allowHost` invocation descriptor: one request object in,
+* one result object out.
+*/
+const ALLOW_HOST_DESCRIPTOR = Object.freeze({
+	id: "dsh-permission-rules#permissionRules/allowHost",
+	service: "permissionRules",
+	namespace: "permissionRules",
+	method: "allowHost",
+	invocation: Object.freeze({ kind: "direct" }),
+	parameters: Object.freeze([Object.freeze({
+		name: "request",
+		wire: "request",
+		source: "json",
+		codec: Object.freeze({
+			mode: "strict",
+			typeSymbol: "dsh-permission-rules/types#AllowHostRequest",
+			schema: ALLOW_HOST_REQUEST_SCHEMA
+		})
+	})]),
+	result: Object.freeze({
+		mode: "strict",
+		typeSymbol: "dsh-permission-rules/types#AllowHostResult",
+		schema: ALLOW_HOST_RESULT_SCHEMA
+	}),
+	sourceLocation: Object.freeze({
+		file: "src/wire.ts",
+		line: 1,
+		column: 1
+	})
+});
+/**
 * The canonical invocation list both Typert faces register — the host
 * manifest and the client contribution share these exact descriptor
 * objects, so the two wire codecs can never drift apart.
@@ -4275,7 +4345,8 @@ const PERMISSION_RULES_INVOCATIONS = Object.freeze([
 	NETWORK_STATUS_DESCRIPTOR,
 	RULES_READ_DESCRIPTOR,
 	RULES_SAVE_DESCRIPTOR,
-	RULES_RELOAD_DESCRIPTOR
+	RULES_RELOAD_DESCRIPTOR,
+	ALLOW_HOST_DESCRIPTOR
 ]);
 //#endregion
 //#region src/typert.host.ts

package/lib/types/allow-host.d.ts

@@ -0,0 +1,151 @@
+/**
+ * The settings-page "allow this host" action, as pure pieces: normalizing
+ * and validating a blocked host, inserting ONE minimal
+ * `match.network.domains` allow rule at the HEAD of a rule document, choosing
+ * which rule file the rule belongs in, and mapping the action's result onto
+ * the notice the page renders.
+ *
+ * Three invariants hold here and are asserted by `test/allow-host.spec.ts`:
+ *
+ * 1. the rule is inserted at index 0 — rules are first-match-wins, so a rule
+ *    appended after an existing `deny` would be dead text;
+ * 2. a document the yaml parser reports an error for, or whose `rules` is not
+ *    a list, is REFUSED (a {@link RuleError}) — the caller never overwrites a
+ *    file it could not read; and
+ * 3. the insertion goes through the yaml Document API (`parseDocument` +
+ *    `createNode` + `items.unshift` + `String(doc)`), so comments and the
+ *    existing formatting of the untouched rules survive.
+ *
+ * Nothing here reads the filesystem or the process cwd: the runtime injects
+ * `exists`, `processCwd`, and the source lists it already computed, which is
+ * what makes the target choice testable without touching a real host.
+ * @module dsh-permission-rules/allow-host
+ */
+import type { AllowHostResult, RuleSourceView } from './wire.js';
+/**
+ * Canonical spelling of a host for the allow action, matching target parsing
+ * exactly (see `normalizeHost`): lowercase, IPv6 brackets stripped, one
+ * trailing dot stripped.
+ * @param host - the host as the block record reported it.
+ * @returns the canonical spelling.
+ */
+export declare function normalizeAllowHost(host: string): string;
+/**
+ * Whether a normalized host may be written into a rule: a host name or an IP
+ * literal, nothing else. This is the syntactic half of the action's safety —
+ * a newline, a `rules:` fragment, a glob, a URL, or a `host:port` authority is
+ * refused here rather than relying on the YAML emitter to quote it. The IP
+ * check is `node:net`'s `isIP`, so a `host:port` string (which merely contains
+ * a colon) is not mistaken for an IPv6 literal.
+ * @param host - the normalized host.
+ * @returns true when the host may be allowed.
+ */
+export declare function isWritableHost(host: string): boolean;
+/**
+ * The `reason` carried by every generated rule. English on purpose: rule
+ * `reason`s are never translated (they are quoted verbatim in denial messages
+ * and in the session audit), so a localized reason would make one rule read
+ * differently per UI language.
+ * @param host - the allowed host.
+ * @returns the reason line.
+ */
+export declare function allowHostReason(host: string): string;
+/** The outcome of one insertion attempt. */
+export interface AllowHostInsertion {
+    /** The document text to write; identical to the input when `inserted` is false. */
+    readonly text: string;
+    /** Whether the rule was added (false = the file already leads with this exact allow). */
+    readonly inserted: boolean;
+}
+/**
+ * Insert the minimal allow rule for `host` at the HEAD of a rule document.
+ *
+ * `inserted: false` (with the input text returned unchanged) means the first
+ * rule of the file is ALREADY this exact allow — first-match semantics make a
+ * second copy do nothing, so the caller must not rewrite the file (repeated
+ * clicks would otherwise pile up duplicate lines in the user's git diff).
+ *
+ * @param text - the current file text (empty for a file to be created).
+ * @param host - the normalized, validated host.
+ * @returns the text to write plus whether anything was added.
+ * @throws RuleError when the document cannot be parsed or has no `rules` list.
+ */
+export declare function insertAllowRule(text: string, host: string): AllowHostInsertion;
+/** Everything {@link resolveAllowHostTarget} needs, injected so the choice is pure and testable. */
+export interface AllowHostTargetInput {
+    /** The workspace the request named, or null for a host-level (session-less) block. */
+    readonly cwd: string | null;
+    /** The absolute workspace roots whose rule chains are currently loaded (the cwd whitelist). */
+    readonly loadedCwds: readonly string[];
+    /** The paths the editor/action may touch (`PermissionRulesRuntime.knownRuleSources()`). */
+    readonly knownSources: readonly string[];
+    /** The configured `rulesFile`: relative to a workspace, or absolute for every one. */
+    readonly rulesFile: string;
+    /** The configured `fallbackPath`, or undefined when unset. */
+    readonly fallbackPath: string | undefined;
+    /** The host process's working directory (the session-less workspace). */
+    readonly processCwd: string;
+    /** The shipped baseline path when the baseline is enabled; never writable. */
+    readonly builtinPath: string | undefined;
+    /** Existence probe for the host-level project file. */
+    readonly exists: (path: string) => boolean;
+}
+/**
+ * The one rule file this action may write for a request: the nearest file of
+ * the chain that will actually judge the connection.
+ *
+ * With a workspace cwd the target is that workspace's project file (the
+ * absolute `rulesFile` when one is configured), and the cwd must be a
+ * workspace whose chain is loaded — an unknown cwd is refused instead of being
+ * turned into a path.
+ *
+ * Without one, the order mirrors `resolveUserSources(process.cwd())` exactly,
+ * so the file written is the file the host chain reads: the absolute
+ * `rulesFile`, else `<processCwd>/<rulesFile>` when it already exists, else
+ * the configured fallback, else `<processCwd>/<rulesFile>` (created — the
+ * host chain picks it up on the next load).
+ *
+ * The result must be a known rule source and must never be the built-in
+ * baseline.
+ *
+ * @param input - the injected config, cwd, and source state.
+ * @returns the absolute path to write.
+ * @throws RuleError when the request names an unknown workspace or resolves to
+ *   a path outside the writable set.
+ */
+export declare function resolveAllowHostTarget(input: AllowHostTargetInput): string;
+/**
+ * The workspaces a host-level block may be allowed in: the distinct non-null
+ * `cwd`s of the loaded rule sources.
+ *
+ * A block with no cwd was judged by the proxy's session-less host chain, which
+ * any loaded workspace chain outranks the moment one exists — so writing the
+ * host file can leave the connection blocked while the rule sits in a file
+ * nothing consults. The settings page therefore offers these workspaces and
+ * sends the chosen one as the request's cwd; when there is exactly one (or
+ * none), there is nothing to choose between.
+ * @param sources - the snapshot's rule sources.
+ * @returns the distinct workspace roots, in source order.
+ */
+export declare function allowHostWorkspaces(sources: readonly RuleSourceView[]): string[];
+/** The locale keys the allow action reports through. */
+export type AllowHostNoticeKey = 'allowHostSaved' | 'allowHostAlready' | 'allowHostStillBlocked' | 'allowHostFailed';
+/** The notice one action result maps onto: a locale key plus its interpolation values. */
+export interface AllowHostNotice {
+    readonly ok: boolean;
+    readonly key: AllowHostNoticeKey;
+    readonly vars: Record<string, string | number>;
+}
+/**
+ * Map an action result onto the page notice.
+ *
+ * A non-`allow` outcome outranks `alreadyAllowed`: the whole point of
+ * returning the RECOMPUTED decision is that the page can never say "allowed"
+ * while the connection is still blocked (a nearer chain with an earlier deny,
+ * or a mode default, still wins). `alreadyAllowed` therefore only ever reads
+ * as success when the decision really is `allow`.
+ * @param result - the `permissionRules/allowHost` result.
+ * @returns the notice to render.
+ */
+export declare function allowHostNotice(result: AllowHostResult): AllowHostNotice;
+//# sourceMappingURL=allow-host.d.ts.map

package/lib/types/allow-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allow-host.d.ts","sourceRoot":"","sources":["../../src/allow-host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAqBhE;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAIpD;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,4CAA4C;AAC5C,MAAM,WAAW,kBAAkB;IACjC,mFAAmF;IACnF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,yFAAyF;IACzF,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAC3B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,kBAAkB,CA0B9E;AAiCD,oGAAoG;AACpG,MAAM,WAAW,oBAAoB;IACnC,sFAAsF;IACtF,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,+FAA+F;IAC/F,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,2FAA2F;IAC3F,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;IACxC,sFAAsF;IACtF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;IACzC,yEAAyE;IACzE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAA;IACxC,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;CAC3C;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,oBAAoB,GAAG,MAAM,CAS1E;AAiCD;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,GAAG,MAAM,EAAE,CAShF;AAED,wDAAwD;AACxD,MAAM,MAAM,kBAAkB,GAAG,gBAAgB,GAAG,kBAAkB,GAAG,uBAAuB,GAAG,iBAAiB,CAAA;AAEpH,0FAA0F;AAC1F,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAA;IACpB,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAA;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAA;CAC/C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,eAAe,CAOxE"}

package/lib/types/client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAQlD,iDAAiD;AACjD,eAAO,MAAM,EAAE,6BAA6B,CAAA;AAE5C,kFAAkF;AAClF,eAAO,MAAM,IAAI,yBAAyB,CAAA;AAE1C,0GAA0G;AAC1G,eAAO,MAAM,MAAM,UAAgC,CAAA;AAmBnD;;;;GAIG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAwDvD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAQlD,iDAAiD;AACjD,eAAO,MAAM,EAAE,6BAA6B,CAAA;AAE5C,kFAAkF;AAClF,eAAO,MAAM,IAAI,yBAAyB,CAAA;AAE1C,0GAA0G;AAC1G,eAAO,MAAM,MAAM,UAAgC,CAAA;AAmBnD;;;;GAIG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA8DvD"}

package/lib/types/client/locales.d.ts

@@ -3,7 +3,7 @@
  * language codes the harness locale registry accepts today).
  * @module dsh-permission-rules/client/locales
  */
-export type PermissionRulesLocaleKey = 'nav' | 'policyTitle' | 'mode' | 'preset' | 'configured' | 'proxy' | 'proxyActive' | 'proxyInactive' | 'proxyDisabled' | 'counters' | 'denied' | 'askBlocked' | 'recentTitle' | 'noBlocks' | 'blockBy' | 'blockDefault' | 'blockUnattributed' | 'editorTitle' | 'editorPath' | 'editorLoad' | 'editorSave' | 'editorReload' | 'editorEmpty' | 'editorSaved' | 'editorFailed' | 'editorUntitled' | 'unknown';
+export type PermissionRulesLocaleKey = 'nav' | 'policyTitle' | 'mode' | 'preset' | 'configured' | 'proxy' | 'proxyActive' | 'proxyInactive' | 'proxyDisabled' | 'upstream' | 'upstreamOff' | 'upstreamInherit' | 'upstreamInactive' | 'upstreamChained' | 'counters' | 'denied' | 'askBlocked' | 'recentTitle' | 'noBlocks' | 'blockBy' | 'blockDefault' | 'blockUnattributed' | 'allowHost' | 'allowHostPickWorkspace' | 'allowHostSaved' | 'allowHostAlready' | 'allowHostStillBlocked' | 'allowHostFailed' | 'allowHostDisabled' | 'editorTitle' | 'editorPath' | 'editorLoad' | 'editorSave' | 'editorReload' | 'editorEmpty' | 'editorSaved' | 'editorFailed' | 'editorUntitled' | 'unknown';
 export declare const en: Record<PermissionRulesLocaleKey, string>;
 export declare const zh: Record<PermissionRulesLocaleKey, string>;
 //# sourceMappingURL=locales.d.ts.map

package/lib/types/client/locales.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"locales.d.ts","sourceRoot":"","sources":["../../../src/client/locales.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,wBAAwB,GAChC,KAAK,GACL,aAAa,GACb,MAAM,GACN,QAAQ,GACR,YAAY,GACZ,OAAO,GACP,aAAa,GACb,eAAe,GACf,eAAe,GACf,UAAU,GACV,QAAQ,GACR,YAAY,GACZ,aAAa,GACb,UAAU,GACV,SAAS,GACT,cAAc,GACd,mBAAmB,GACnB,aAAa,GACb,YAAY,GACZ,YAAY,GACZ,YAAY,GACZ,cAAc,GACd,aAAa,GACb,aAAa,GACb,cAAc,GACd,gBAAgB,GAChB,SAAS,CAAA;AAEb,eAAO,MAAM,EAAE,EAAE,MAAM,CAAC,wBAAwB,EAAE,MAAM,CA4BvD,CAAA;AAED,eAAO,MAAM,EAAE,EAAE,MAAM,CAAC,wBAAwB,EAAE,MAAM,CA4BvD,CAAA"}
+{"version":3,"file":"locales.d.ts","sourceRoot":"","sources":["../../../src/client/locales.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,wBAAwB,GAChC,KAAK,GACL,aAAa,GACb,MAAM,GACN,QAAQ,GACR,YAAY,GACZ,OAAO,GACP,aAAa,GACb,eAAe,GACf,eAAe,GACf,UAAU,GACV,aAAa,GACb,iBAAiB,GACjB,kBAAkB,GAClB,iBAAiB,GACjB,UAAU,GACV,QAAQ,GACR,YAAY,GACZ,aAAa,GACb,UAAU,GACV,SAAS,GACT,cAAc,GACd,mBAAmB,GACnB,WAAW,GACX,wBAAwB,GACxB,gBAAgB,GAChB,kBAAkB,GAClB,uBAAuB,GACvB,iBAAiB,GACjB,mBAAmB,GACnB,aAAa,GACb,YAAY,GACZ,YAAY,GACZ,YAAY,GACZ,cAAc,GACd,aAAa,GACb,aAAa,GACb,cAAc,GACd,gBAAgB,GAChB,SAAS,CAAA;AAEb,eAAO,MAAM,EAAE,EAAE,MAAM,CAAC,wBAAwB,EAAE,MAAM,CAwCvD,CAAA;AAED,eAAO,MAAM,EAAE,EAAE,MAAM,CAAC,wBAAwB,EAAE,MAAM,CAwCvD,CAAA"}

package/lib/types/client/remote.d.ts

@@ -8,7 +8,7 @@
  * @module dsh-permission-rules/client/remote
  */
 import type { RemoteResult } from '@deepseek-ai/dsh-typert-protocol';
-import type { PermissionRulesSnapshot, RulesReadResult, RulesReloadResult, RulesSaveResult } from '../wire.js';
+import type { AllowHostRequest, AllowHostResult, PermissionRulesSnapshot, RulesReadResult, RulesReloadResult, RulesSaveResult } from '../wire.js';
 declare module '@deepseek-ai/dsh-typert-protocol' {
     interface TypertRemoteNamespace$permissionRules {
         /** Read the network-policy snapshot (mode, counters, recent blocks, editable rule sources). */
@@ -19,12 +19,15 @@ declare module '@deepseek-ai/dsh-typert-protocol' {
         rulesSave: (path: string, text: string) => Promise<RemoteResult<RulesSaveResult>>;
         /** Re-read every cached workspace chain. */
         reload: () => Promise<RemoteResult<RulesReloadResult>>;
+        /** Write one minimal allow rule for a blocked host into the nearest effective rule file. */
+        allowHost: (request: AllowHostRequest) => Promise<RemoteResult<AllowHostResult>>;
     }
     interface TypertRemoteMap {
         'permissionRules/networkStatus': () => Promise<RemoteResult<PermissionRulesSnapshot>>;
         'permissionRules/rulesRead': (path: string) => Promise<RemoteResult<RulesReadResult>>;
         'permissionRules/rulesSave': (path: string, text: string) => Promise<RemoteResult<RulesSaveResult>>;
         'permissionRules/reload': () => Promise<RemoteResult<RulesReloadResult>>;
+        'permissionRules/allowHost': (request: AllowHostRequest) => Promise<RemoteResult<AllowHostResult>>;
     }
     interface TypertRemoteNamespaceMap {
         permissionRules: TypertRemoteNamespace$permissionRules;
@@ -67,12 +70,21 @@ export declare const PERMISSION_RULES_REMOTE: Readonly<{
                     source: import("zod").ZodString;
                     ruleIndex: import("zod").ZodNullable<import("zod").ZodNumber>;
                     reason: import("zod").ZodNullable<import("zod").ZodString>;
+                    cwd: import("zod").ZodNullable<import("zod").ZodString>;
                 }, import("zod/v4/core").$strip>>;
                 sources: import("zod").ZodArray<import("zod").ZodObject<{
                     path: import("zod").ZodString;
                     exists: import("zod").ZodBoolean;
                     cwd: import("zod").ZodNullable<import("zod").ZodString>;
                 }, import("zod/v4/core").$strip>>;
+                allowHostAction: import("zod").ZodBoolean;
+                upstream: import("zod").ZodObject<{
+                    mode: import("zod").ZodUnion<readonly [import("zod").ZodLiteral<"off">, import("zod").ZodLiteral<"inherit">, import("zod").ZodLiteral<"url">]>;
+                    http: import("zod").ZodNullable<import("zod").ZodString>;
+                    https: import("zod").ZodNullable<import("zod").ZodString>;
+                    active: import("zod").ZodBoolean;
+                    chained: import("zod").ZodNumber;
+                }, import("zod/v4/core").$strip>;
             }, import("zod/v4/core").$strip>;
         }>;
         readonly sourceLocation: Readonly<{
@@ -176,6 +188,47 @@ export declare const PERMISSION_RULES_REMOTE: Readonly<{
             line: 1;
             column: 1;
         }>;
+    }> | Readonly<{
+        readonly id: "dsh-permission-rules#permissionRules/allowHost";
+        readonly service: "permissionRules";
+        readonly namespace: "permissionRules";
+        readonly method: "allowHost";
+        readonly invocation: Readonly<{
+            kind: "direct";
+        }>;
+        readonly parameters: readonly Readonly<{
+            name: string;
+            wire: string;
+            source: "json";
+            codec: Readonly<{
+                mode: "strict";
+                typeSymbol: "dsh-permission-rules/types#AllowHostRequest";
+                schema: import("zod").ZodObject<{
+                    host: import("zod").ZodString;
+                    scheme: import("zod").ZodUnion<readonly [import("zod").ZodLiteral<"http">, import("zod").ZodLiteral<"https">, import("zod").ZodNull]>;
+                    port: import("zod").ZodNullable<import("zod").ZodNumber>;
+                    cwd: import("zod").ZodNullable<import("zod").ZodString>;
+                }, import("zod/v4/core").$strip>;
+            }>;
+        }>[];
+        readonly result: Readonly<{
+            mode: "strict";
+            typeSymbol: "dsh-permission-rules/types#AllowHostResult";
+            schema: import("zod").ZodObject<{
+                ok: import("zod").ZodBoolean;
+                path: import("zod").ZodNullable<import("zod").ZodString>;
+                created: import("zod").ZodBoolean;
+                reloaded: import("zod").ZodNumber;
+                outcome: import("zod").ZodUnion<readonly [import("zod").ZodLiteral<"allow">, import("zod").ZodLiteral<"deny">, import("zod").ZodLiteral<"ask">, import("zod").ZodNull]>;
+                alreadyAllowed: import("zod").ZodBoolean;
+                error: import("zod").ZodNullable<import("zod").ZodString>;
+            }, import("zod/v4/core").$strip>;
+        }>;
+        readonly sourceLocation: Readonly<{
+            file: "src/wire.ts";
+            line: 1;
+            column: 1;
+        }>;
     }>)[];
 }>;
 //# sourceMappingURL=remote.d.ts.map

package/lib/types/client/remote.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote.d.ts","sourceRoot":"","sources":["../../../src/client/remote.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,YAAY,EAA4B,MAAM,kCAAkC,CAAA;AAE9F,OAAO,KAAK,EAAE,uBAAuB,EAAE,eAAe,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE9G,OAAO,QAAQ,kCAAkC,CAAC;IAChD,UAAU,qCAAqC;QAC7C,+FAA+F;QAC/F,aAAa,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC,CAAA;QACnE,+CAA+C;QAC/C,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAA;QACnE,8CAA8C;QAC9C,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAA;QACjF,4CAA4C;QAC5C,MAAM,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC,CAAA;KACvD;IACD,UAAU,eAAe;QACvB,+BAA+B,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC,CAAA;QACrF,2BAA2B,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAA;QACrF,2BAA2B,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAA;QACnG,wBAAwB,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC,CAAA;KACzE;IACD,UAAU,wBAAwB;QAChC,eAAe,EAAE,qCAAqC,CAAA;KACvD;CACF;AAED,0EAA0E;AAC1E,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGC,CAAA"}
+{"version":3,"file":"remote.d.ts","sourceRoot":"","sources":["../../../src/client/remote.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,YAAY,EAA4B,MAAM,kCAAkC,CAAA;AAE9F,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,uBAAuB,EAAE,eAAe,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEjJ,OAAO,QAAQ,kCAAkC,CAAC;IAChD,UAAU,qCAAqC;QAC7C,+FAA+F;QAC/F,aAAa,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC,CAAA;QACnE,+CAA+C;QAC/C,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAA;QACnE,8CAA8C;QAC9C,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAA;QACjF,4CAA4C;QAC5C,MAAM,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC,CAAA;QACtD,4FAA4F;QAC5F,SAAS,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAA;KACjF;IACD,UAAU,eAAe;QACvB,+BAA+B,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC,CAAA;QACrF,2BAA2B,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAA;QACrF,2BAA2B,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAA;QACnG,wBAAwB,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC,CAAA;QACxE,2BAA2B,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAA;KACnG;IACD,UAAU,wBAAwB;QAChC,eAAe,EAAE,qCAAqC,CAAA;KACvD;CACF;AAED,0EAA0E;AAC1E,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGC,CAAA"}

package/lib/types/client/section.d.ts

@@ -10,7 +10,7 @@
  */
 import type { ReactElement } from 'react';
 import type { PermissionRulesLocaleKey } from './locales.js';
-import type { PermissionRulesSnapshot, RulesReadResult, RulesReloadResult, RulesSaveResult } from '../wire.js';
+import type { AllowHostRequest, AllowHostResult, PermissionRulesSnapshot, RulesReadResult, RulesReloadResult, RulesSaveResult } from '../wire.js';
 /** Functions the registration injects (wired to the Remote namespace in `./index.ts`). */
 export interface PermissionRulesSectionInjected {
     /** Read the network-policy snapshot. */
@@ -21,6 +21,8 @@ export interface PermissionRulesSectionInjected {
     rulesSave: (path: string, text: string) => Promise<RulesSaveResult>;
     /** Re-read every cached workspace chain. */
     reload: () => Promise<RulesReloadResult>;
+    /** Write one minimal allow rule for one blocked host. */
+    allowHost: (request: AllowHostRequest) => Promise<AllowHostResult>;
     /** The locale-bound translator. */
     t: T;
 }

package/lib/types/client/section.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"section.d.ts","sourceRoot":"","sources":["../../../src/client/section.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,OAAO,CAAA;AACzC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAA;AAC5D,OAAO,KAAK,EAAE,uBAAuB,EAAE,eAAe,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE9G,0FAA0F;AAC1F,MAAM,WAAW,8BAA8B;IAC7C,wCAAwC;IACxC,MAAM,EAAE,MAAM,OAAO,CAAC,uBAAuB,CAAC,CAAA;IAC9C,gCAAgC;IAChC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;IACrD,8CAA8C;IAC9C,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;IACnE,4CAA4C;IAC5C,MAAM,EAAE,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACxC,mCAAmC;IACnC,CAAC,EAAE,CAAC,CAAA;CACL;AAED,4BAA4B;AAC5B,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,wBAAwB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,MAAM,CAAA;AAEjG,sFAAsF;AACtF,MAAM,MAAM,2BAA2B,GAAG,8BAA8B,GAAG;IACzE,KAAK,EAAE,MAAM,IAAI,CAAA;CAClB,CAAA;AAmBD,sCAAsC;AACtC,wBAAgB,sBAAsB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,QAAQ,EAAE,EAAE,2BAA2B,GAAG,YAAY,CAgJ3G"}
+{"version":3,"file":"section.d.ts","sourceRoot":"","sources":["../../../src/client/section.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,OAAO,CAAA;AAEzC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAA;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAoB,uBAAuB,EAAE,eAAe,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEnK,0FAA0F;AAC1F,MAAM,WAAW,8BAA8B;IAC7C,wCAAwC;IACxC,MAAM,EAAE,MAAM,OAAO,CAAC,uBAAuB,CAAC,CAAA;IAC9C,gCAAgC;IAChC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;IACrD,8CAA8C;IAC9C,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;IACnE,4CAA4C;IAC5C,MAAM,EAAE,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACxC,yDAAyD;IACzD,SAAS,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;IAClE,mCAAmC;IACnC,CAAC,EAAE,CAAC,CAAA;CACL;AAED,4BAA4B;AAC5B,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,wBAAwB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,MAAM,CAAA;AAEjG,sFAAsF;AACtF,MAAM,MAAM,2BAA2B,GAAG,8BAA8B,GAAG;IACzE,KAAK,EAAE,MAAM,IAAI,CAAA;CAClB,CAAA;AAwBD,sCAAsC;AACtC,wBAAgB,sBAAsB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,QAAQ,EAAE,EAAE,2BAA2B,GAAG,YAAY,CAiN3G"}

package/lib/types/config.d.ts

@@ -54,7 +54,27 @@ export interface NetworkConfig {
     injectEnv?: boolean;
     /** Subprocess NO_PROXY handling: `clear` enforces the policy (default) or `preserve` keeps ambient values. */
     noProxy?: NoProxyPolicy;
+    /**
+     * Upstream proxy for connections this proxy ALLOWS: `off` (default — dial
+     * directly), `inherit` (reuse the proxy names from the launch environment),
+     * or an explicit `http(s)://` proxy URL. A blocked connection never reaches
+     * it, and `ips`-scoped decisions plus loopback targets are never chained —
+     * see the network section of the READMEs.
+     */
+    upstreamProxy?: UpstreamProxySetting;
+    /**
+     * Whether the settings page may run its "allow this host" action, which
+     * writes one minimal `domains` allow rule into the nearest effective rule
+     * file (`true` by default). `false` hides the button and makes the
+     * `permissionRules/allowHost` RPC refuse: the page's rule EDITOR is
+     * strictly wider (it writes arbitrary rule text) and is not affected, so
+     * this is a narrow safety switch for deployments that want rule changes to
+     * stay a deliberate, hand-written act.
+     */
+    allowHostAction?: boolean;
 }
+/** Upstream chaining setting: `off`, `inherit`, or an explicit http(s) proxy URL. */
+export type UpstreamProxySetting = 'off' | 'inherit' | string;
 /** Raw plugin config — every field optional; {@link Config} supplies the defaults. */
 export interface Config {
     /**
@@ -130,6 +150,8 @@ export interface ResolvedNetworkConfig {
     readonly loopback: LoopbackPolicy;
     readonly injectEnv: boolean;
     readonly noProxy: NoProxyPolicy;
+    readonly upstreamProxy: UpstreamProxySetting;
+    readonly allowHostAction: boolean;
 }
 /** Builtin baseline after {@link resolveConfig}: the switch plus the resolved absolute path. */
 export interface ResolvedBuiltinConfig {

package/lib/types/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,CAAC,MAAM,0BAA0B,CAAA;AACxC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAG/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE5C,wFAAwF;AACxF,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,qBAAqB,CAAA;AAE1D,uEAAuE;AACvE,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,MAAM,CAAA;AAE7C,mDAAmD;AACnD,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,QAAQ,CAAA;AAE/C,oEAAoE;AACpE,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,UAAU,CAAA;AAEhD,6CAA6C;AAC7C,MAAM,WAAW,aAAa;IAC5B,+EAA+E;IAC/E,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,wGAAwG;IACxG,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B,oGAAoG;IACpG,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,CAAA;IAC3B,yFAAyF;IACzF,YAAY,CAAC,EAAE,WAAW,CAAA;IAC1B,qFAAqF;IACrF,QAAQ,CAAC,EAAE,cAAc,CAAA;IACzB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,8DAA8D;IAC9D,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,iGAAiG;IACjG,QAAQ,CAAC,EAAE,cAAc,CAAA;IACzB,yEAAyE;IACzE,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,8GAA8G;IAC9G,OAAO,CAAC,EAAE,aAAa,CAAA;CACxB;AAED,sFAAsF;AACtF,MAAM,WAAW,MAAM;IACrB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,wGAAwG;IACxG,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,2GAA2G;IAC3G,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,uGAAuG;IACvG,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,sEAAsE;IACtE,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,iEAAiE;IACjE,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,oGAAoG;IACpG,QAAQ,CAAC,EAAE,UAAU,CAAA;IACrB,iHAAiH;IACjH,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B,oGAAoG;IACpG,KAAK,CAAC,EAAE,gBAAgB,CAAA;IACxB,kGAAkG;IAClG,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,+FAA+F;IAC/F,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;;;;;;;OASG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,oEAAoE;IACpE,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB,mEAAmE;IACnE,OAAO,CAAC,EAAE,aAAa,CAAA;CACxB;AAED,iGAAiG;AACjG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAA;IACnC,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAA;IAClC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;CAChC;AAED,gGAAgG;AAChG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,mFAAmF;IACnF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,yFAAyF;AACzF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;IACzC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAA;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAA;IAC1C,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAA;IAC7B,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAA;IACtC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAA;IAChC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAA;IACpC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;IACvC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;CACxC;AAED,kFAAkF;AAClF,eAAO,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAgC3B,CAAA;AAEF;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,MAAM,GAAE,MAAW,GAAG,cAAc,CAoDjE"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,CAAC,MAAM,0BAA0B,CAAA;AACxC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAG/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE5C,wFAAwF;AACxF,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,qBAAqB,CAAA;AAE1D,uEAAuE;AACvE,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,MAAM,CAAA;AAE7C,mDAAmD;AACnD,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,QAAQ,CAAA;AAE/C,oEAAoE;AACpE,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,UAAU,CAAA;AAEhD,6CAA6C;AAC7C,MAAM,WAAW,aAAa;IAC5B,+EAA+E;IAC/E,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,wGAAwG;IACxG,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B,oGAAoG;IACpG,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,CAAA;IAC3B,yFAAyF;IACzF,YAAY,CAAC,EAAE,WAAW,CAAA;IAC1B,qFAAqF;IACrF,QAAQ,CAAC,EAAE,cAAc,CAAA;IACzB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,8DAA8D;IAC9D,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,iGAAiG;IACjG,QAAQ,CAAC,EAAE,cAAc,CAAA;IACzB,yEAAyE;IACzE,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,8GAA8G;IAC9G,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAA;IACpC;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED,qFAAqF;AACrF,MAAM,MAAM,oBAAoB,GAAG,KAAK,GAAG,SAAS,GAAG,MAAM,CAAA;AAE7D,sFAAsF;AACtF,MAAM,WAAW,MAAM;IACrB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,wGAAwG;IACxG,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,2GAA2G;IAC3G,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,uGAAuG;IACvG,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,sEAAsE;IACtE,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,iEAAiE;IACjE,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,oGAAoG;IACpG,QAAQ,CAAC,EAAE,UAAU,CAAA;IACrB,iHAAiH;IACjH,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B,oGAAoG;IACpG,KAAK,CAAC,EAAE,gBAAgB,CAAA;IACxB,kGAAkG;IAClG,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,+FAA+F;IAC/F,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;;;;;;;OASG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,oEAAoE;IACpE,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB,mEAAmE;IACnE,OAAO,CAAC,EAAE,aAAa,CAAA;CACxB;AAED,iGAAiG;AACjG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAA;IACnC,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAA;IAClC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAA;IAC5C,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAA;CAClC;AAED,gGAAgG;AAChG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,mFAAmF;IACnF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,yFAAyF;AACzF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;IACzC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAA;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAA;IAC1C,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAA;IAC7B,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAA;IACtC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAA;IAChC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAA;IACpC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;IACvC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;CACxC;AAED,kFAAkF;AAClF,eAAO,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAkC3B,CAAA;AAEF;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,MAAM,GAAE,MAAW,GAAG,cAAc,CAoDjE"}

package/lib/types/prose.d.ts

@@ -62,6 +62,7 @@ export interface UiProse {
     networkHeader: (mode: string, sandboxMode: string | undefined, configuredMode: string, proxyActive: boolean, proxyPort: number) => string;
     /** Cumulative block counters line. */
     networkCounters: (denied: number, askBlocked: number) => string;
+    networkUpstream: (mode: 'off' | 'inherit' | 'url', http: string | null, https: string | null, active: boolean, chained: number) => string;
     /** Line shown when no proxy blocks were recorded yet. */
     noNetworkBlocks: string;
     /** One recent proxy-block row. */

package/lib/types/prose.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prose.d.ts","sourceRoot":"","sources":["../../src/prose.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,0CAA0C;AAC1C,MAAM,MAAM,UAAU,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAA;AAEzD,2EAA2E;AAC3E,MAAM,WAAW,OAAO;IACtB,6EAA6E;IAC7E,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,CAAA;IAC/E,iDAAiD;IACjD,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACtD,oEAAoE;IACpE,eAAe,EAAE,MAAM,CAAA;IACvB,uCAAuC;IACvC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,CAAA;IACnD,qCAAqC;IACrC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IACvC,8DAA8D;IAC9D,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IAC5C,mFAAmF;IACnF,YAAY,EAAE,MAAM,CAAA;IACpB,iDAAiD;IACjD,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAA;IACnC,kBAAkB;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,0DAA0D;IAC1D,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IACzD,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAA;IACnB,4HAA4H;IAC5H,mBAAmB,EAAE,MAAM,CAAA;IAC3B,gDAAgD;IAChD,qBAAqB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAA;IAC9C,qEAAqE;IACrE,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,CAAA;IAChL,iCAAiC;IACjC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,CAAA;IACpF,sCAAsC;IACtC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACrC,6DAA6D;IAC7D,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACrC,kDAAkD;IAClD,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACzC,kFAAkF;IAClF,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACrC,kDAAkD;IAClD,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IAC1C,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,qEAAqE;IACrE,kBAAkB,EAAE,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,KAAK,MAAM,CAAA;IAC1D,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAA;IACnB,iFAAiF;IACjF,eAAe,EAAE,MAAM,CAAA;IACvB,8EAA8E;IAC9E,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,CAAA;IACzI,sCAAsC;IACtC,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,MAAM,CAAA;IAC/D,yDAAyD;IACzD,eAAe,EAAE,MAAM,CAAA;IACvB,kCAAkC;IAClC,gBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,CAAA;CACjP;AAED,mEAAmE;AACnE,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,sDAAsD;IACtD,GAAG,EAAE,MAAM,CAAA;CACZ;AA8ND,8CAA8C;AAC9C,eAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAA8C,CAAA;AAEzG,yDAAyD;AACzD,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,CAMxE,CAAA"}
+{"version":3,"file":"prose.d.ts","sourceRoot":"","sources":["../../src/prose.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,0CAA0C;AAC1C,MAAM,MAAM,UAAU,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAA;AAEzD,2EAA2E;AAC3E,MAAM,WAAW,OAAO;IACtB,6EAA6E;IAC7E,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,CAAA;IAC/E,iDAAiD;IACjD,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACtD,oEAAoE;IACpE,eAAe,EAAE,MAAM,CAAA;IACvB,uCAAuC;IACvC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,CAAA;IACnD,qCAAqC;IACrC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IACvC,8DAA8D;IAC9D,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IAC5C,mFAAmF;IACnF,YAAY,EAAE,MAAM,CAAA;IACpB,iDAAiD;IACjD,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAA;IACnC,kBAAkB;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,0DAA0D;IAC1D,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IACzD,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAA;IACnB,4HAA4H;IAC5H,mBAAmB,EAAE,MAAM,CAAA;IAC3B,gDAAgD;IAChD,qBAAqB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAA;IAC9C,qEAAqE;IACrE,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,CAAA;IAChL,iCAAiC;IACjC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,CAAA;IACpF,sCAAsC;IACtC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACrC,6DAA6D;IAC7D,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACrC,kDAAkD;IAClD,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACzC,kFAAkF;IAClF,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACrC,kDAAkD;IAClD,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IAC1C,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,qEAAqE;IACrE,kBAAkB,EAAE,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,KAAK,MAAM,CAAA;IAC1D,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAA;IACnB,iFAAiF;IACjF,eAAe,EAAE,MAAM,CAAA;IACvB,8EAA8E;IAC9E,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,CAAA;IACzI,sCAAsC;IACtC,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,MAAM,CAAA;IAC/D,eAAe,EAAE,CAAC,IAAI,EAAE,KAAK,GAAG,SAAS,GAAG,KAAK,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,CAAA;IACzI,yDAAyD;IACzD,eAAe,EAAE,MAAM,CAAA;IACvB,kCAAkC;IAClC,gBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,CAAA;CACjP;AAED,mEAAmE;AACnE,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,sDAAsD;IACtD,GAAG,EAAE,MAAM,CAAA;CACZ;AAmOD,8CAA8C;AAC9C,eAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAA8C,CAAA;AAEzG,yDAAyD;AACzD,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,CAMxE,CAAA"}

package/lib/types/proxy.d.ts

@@ -21,6 +21,29 @@ import type { NetworkTarget, SchemeName } from './rules.js';
 export declare const PROXY_ENV_NAMES: readonly string[];
 /** NO_PROXY names cleared (or preserved) by the injector. */
 export declare const NO_PROXY_ENV_NAMES: readonly string[];
+/** The upstream proxies the launch environment supplies, resolved per scheme. */
+export interface AmbientUpstream {
+    readonly http?: string;
+    readonly https?: string;
+}
+/**
+ * Resolve ambient upstream candidates the way the harness's own proxy policy
+ * does: the scheme-specific name (lowercase first, blank treated as unset),
+ * then `ALL_PROXY`, then — for https only — the http name. A value that is not
+ * a parseable `http(s)://` URL is dropped here; the runtime reports those once.
+ * @param lookup - reads one environment name (the launch snapshot, or `process.env`).
+ * @returns the usable candidates, each absent when it is unusable.
+ */
+export declare function readAmbientProxy(lookup: (name: string) => string | undefined): AmbientUpstream;
+/**
+ * The loggable form of a proxy URL: the password is replaced, everything else
+ * is kept verbatim. An upstream URL may carry credentials, and a proxy URL is
+ * printed in warnings, `/rules network` and the settings snapshot, so it must
+ * never be emitted raw.
+ * @param value - the configured upstream URL.
+ * @returns the same URL with its password masked, or the input when unparseable.
+ */
+export declare function redactProxyUrl(value: string): string;
 /** One recorded proxy-layer block (settings-page list + session audit + logger). */
 export interface NetworkBlockRecord {
     readonly time: number;
@@ -36,6 +59,13 @@ export interface NetworkBlockRecord {
     readonly source: string;
     readonly ruleIndex?: number;
     readonly reason?: string;
+    /**
+     * The attributed agent's workspace root, when the block could be attributed
+     * to a session at all. The settings page needs it to name the rule file an
+     * "allow this host" action would write; an unattributed (host-level) block
+     * leaves it unset.
+     */
+    readonly cwd?: string;
 }
 /** Cumulative proxy-layer block counters. */
 export interface NetworkStats {
@@ -48,6 +78,10 @@ export interface ProxyAttribution {
     readonly callId?: CallId;
     readonly agent?: {
         readonly session: {
+            /** The session header the block's workspace is read from. */
+            readonly header: {
+                readonly cwd?: string;
+            };
             append(type: 'permissionRules/network', data: unknown, options?: {
                 ignorable?: true;
             }): unknown;
@@ -72,6 +106,12 @@ export interface NetworkProxyOptions {
     readonly logger: {
         warn(message: string): void;
     };
+    /**
+     * The upstream proxies an ALLOWED connection may be chained through, or
+     * undefined to dial directly. A getter, so a live settings change takes
+     * effect on the next connection.
+     */
+    readonly upstream?: () => AmbientUpstream | undefined;
 }
 /**
  * The local HTTP/CONNECT policy proxy. Binds on demand (the plugin calls
@@ -86,7 +126,10 @@ export declare class NetworkProxy {
     private readonly recent;
     private readonly stats;
     private actualPort;
+    private chained;
     constructor(options: NetworkProxyOptions);
+    /** Connections dispatched through the configured upstream since mount. */
+    chainedConnections(): number;
     /** The bound port (valid after {@link start} resolves). */
     get port(): number;
     /** Deny/ask blocks recorded since mount, newest first (settings-page list). */
@@ -97,6 +140,36 @@ export declare class NetworkProxy {
     start(): Promise<number>;
     /** Stop the server and destroy every tunnel; resolves when sockets are closed. */
     close(): Promise<void>;
+    /**
+     * The upstream one ALLOWED connection may be chained through, or undefined to
+     * dial directly. Three vetoes, in order:
+     *
+     * 1. a loopback target never chains — a proxy outside this host cannot route
+     *    its loopback, and the harness's own policy bypasses loopback for the same
+     *    reason;
+     * 2. an `ips`-scoped decision never chains — chaining hands the hostname to
+     *    the upstream, so "the connection lands on an address the rules saw"
+     *    (the issue #21 invariant) would stop holding exactly where the rules
+     *    cared about the address;
+     * 3. no usable upstream for the target's scheme.
+     *
+     * A blocked connection never reaches this method: it is called only on the
+     * `allow` branch, after the decision is final.
+     * @param target - the adjudicated target.
+     * @param decision - the decision that allowed it.
+     * @returns the upstream URL to chain through, or undefined.
+     */
+    private upstreamRouteFor;
+    /**
+     * Open a tunnel by asking the upstream for one, and hand back the socket it
+     * established. The upstream's own hostname is resolved by the system: it is
+     * operator configuration, not agent input, so it takes no part in rule
+     * adjudication and is outside the adjudicated-address invariant.
+     * @param upstream - the upstream proxy URL.
+     * @param authority - the `host:port` to ask for (IPv6 already bracketed).
+     * @returns the established tunnel socket.
+     */
+    private connectViaUpstream;
     /** Plain-HTTP proxying: absolute-form requests are adjudicated and forwarded (or blocked with a structured 403). */
     private handleRequest;
     /**

package/lib/types/proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AASH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAGhE,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE3D,oHAAoH;AACpH,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAAyF,CAAA;AAEtI,6DAA6D;AAC7D,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAA6B,CAAA;AAE7E,oFAAoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAA;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAA;IAC/B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,sGAAsG;AACtG,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE;QACf,QAAQ,CAAC,OAAO,EAAE;YAAE,MAAM,CAAC,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;gBAAE,SAAS,CAAC,EAAE,IAAI,CAAA;aAAE,GAAG,OAAO,CAAA;SAAE,CAAA;KACtH,CAAA;CACF;AAED,qDAAqD;AACrD,MAAM,WAAW,mBAAmB;IAClC,yCAAyC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,kDAAkD;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,eAAe,CAAA;IAC3D,4EAA4E;IAC5E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,gBAAgB,GAAG,SAAS,CAAA;IACzD,uEAAuE;IACvE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,gBAAgB,GAAG,SAAS,KAAK,IAAI,CAAA;IAClG,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,EAAE;QAAE,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAA;CACjD;AAED;;;;;GAKG;AACH,qBAAa,YAAY;IAOX,OAAO,CAAC,QAAQ,CAAC,OAAO;IANpC,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAClD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6C;IACnE,OAAO,CAAC,UAAU,CAAI;gBAEO,OAAO,EAAE,mBAAmB;IAEzD,2DAA2D;IAC3D,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,+EAA+E;IAC/E,YAAY,IAAI,SAAS,kBAAkB,EAAE;IAI7C,iCAAiC;IACjC,UAAU,IAAI,YAAY;IAI1B,kDAAkD;IAClD,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IA4BxB,kFAAkF;IAClF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAWtB,oHAAoH;YACtG,aAAa;IAyC3B;;;;;;;;;;;;;;OAcG;YACW,eAAe;IAqB7B,uGAAuG;YACzF,aAAa;IAiD3B,yFAAyF;YAC3E,oBAAoB;IAgBlC,4FAA4F;IAC5F,OAAO,CAAC,WAAW;CA4BpB;AAsCD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,UAAU,GAAG,MAAM,IAAI,CAyBtF"}
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AASH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAGhE,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE3D,oHAAoH;AACpH,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAAyF,CAAA;AAEtI,6DAA6D;AAC7D,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAA6B,CAAA;AAK7E,iFAAiF;AACjF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAAG,eAAe,CAqB9F;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUpD;AASD,oFAAoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAA;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAA;IAC/B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,sGAAsG;AACtG,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE;QACf,QAAQ,CAAC,OAAO,EAAE;YAChB,6DAA6D;YAC7D,QAAQ,CAAC,MAAM,EAAE;gBAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;YAC1C,MAAM,CAAC,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;gBAAE,SAAS,CAAC,EAAE,IAAI,CAAA;aAAE,GAAG,OAAO,CAAA;SAChG,CAAA;KACF,CAAA;CACF;AAED,qDAAqD;AACrD,MAAM,WAAW,mBAAmB;IAClC,yCAAyC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,kDAAkD;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,eAAe,CAAA;IAC3D,4EAA4E;IAC5E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,gBAAgB,GAAG,SAAS,CAAA;IACzD,uEAAuE;IACvE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,gBAAgB,GAAG,SAAS,KAAK,IAAI,CAAA;IAClG,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,EAAE;QAAE,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAA;IAChD;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,eAAe,GAAG,SAAS,CAAA;CACtD;AAED;;;;;GAKG;AACH,qBAAa,YAAY;IAQX,OAAO,CAAC,QAAQ,CAAC,OAAO;IAPpC,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAClD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6C;IACnE,OAAO,CAAC,UAAU,CAAI;IACtB,OAAO,CAAC,OAAO,CAAI;gBAEU,OAAO,EAAE,mBAAmB;IAEzD,0EAA0E;IAC1E,kBAAkB,IAAI,MAAM;IAI5B,2DAA2D;IAC3D,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,+EAA+E;IAC/E,YAAY,IAAI,SAAS,kBAAkB,EAAE;IAI7C,iCAAiC;IACjC,UAAU,IAAI,YAAY;IAI1B,kDAAkD;IAClD,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IA4BxB,kFAAkF;IAClF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAWtB;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,gBAAgB;IASxB;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IAiC1B,oHAAoH;YACtG,aAAa;IA6D3B;;;;;;;;;;;;;;OAcG;YACW,eAAe;IAqB7B,uGAAuG;YACzF,aAAa;IAqD3B,yFAAyF;YAC3E,oBAAoB;IAgBlC,4FAA4F;IAC5F,OAAO,CAAC,WAAW;CA8BpB;AAsCD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,UAAU,GAAG,MAAM,IAAI,CAyBtF"}