forkit-connect 0.1.12 → 0.1.14

package/dist/cli.js

@@ -90,7 +90,7 @@ const PUBLIC_COMMANDS = [
     ['workspace', 'List, select, or inspect optional governed workspace/project scope'],
     ['runtime', 'Register or review governed runtimes for the current repo/worktree'],
     ['register', 'Register ready local models into the current scope'],
-    ['ignore', 'Ignore one detected local model'],
+    ['ignore', 'Deny one detected local model on this device'],
     ['doctor', 'Run local environment diagnostics'],
 ];
 const ADVANCED_COMMAND_GROUPS = [
@@ -139,7 +139,7 @@ function usage() {
     console.log('  --no-api-key            Skip automatic runtime API key creation');
     console.log('  --dry-run               Show the inferred runtime payload without creating it');
     console.log('  --all-ready             Register every ready local model in the current scope');
-    console.log('  --ignore-model <name>   Ignore detected model by name with --ignore-digest');
+    console.log('  --ignore-model <name>   Deny a detected model on this device with --ignore-digest');
     console.log('  --ignore-digest <sha>   Digest used with --ignore-model');
     console.log('  --digest <sha>          Digest used by ignore when the model name is ambiguous');
     console.log('  --interval-seconds <n>  Override daemon scan interval');
@@ -1022,7 +1022,7 @@ function buildInteractiveInboxSections(inbox) {
                 shellLine('Ready to connect', inbox.groups.ready_to_connect.length),
                 shellLine('Needs confirmation', inbox.groups.needs_confirmation.length),
                 shellLine('Connected', inbox.groups.connected.length),
-                shellLine('Ignored', inbox.groups.ignored.length),
+                shellLine('Denied on this device', inbox.groups.ignored.length),
                 ...(inbox.summary.next_recommended_action ? [shellLine('Next action', formatSmartInboxActionValue(inbox.summary.next_recommended_action))] : []),
             ],
         },
@@ -1044,7 +1044,7 @@ function buildInteractiveInboxItemSections(item, group) {
             : group === 'connected'
                 ? 'Connected'
                 : group === 'ignored'
-                    ? 'Ignored'
+                    ? 'Denied on this device'
                     : group.replaceAll('_', ' ');
     const detailKeys = [
         'verification_summary',
@@ -1424,7 +1424,7 @@ function formatSmartInboxActionValue(action, itemType, connectableModelName) {
         case 'defer':
             return 'Ask Later';
         case 'ignore':
-            return 'Do Not Register';
+            return 'Deny on This Device';
         default:
             return action.replaceAll('_', ' ');
     }
@@ -1451,7 +1451,7 @@ function printSmartInbox(inbox) {
     printInboxGroup('Ready to Connect', inbox.groups.ready_to_connect);
     printInboxGroup('Needs Confirmation', inbox.groups.needs_confirmation);
     printInboxGroup('Connected', inbox.groups.connected);
-    printInboxGroup('Ignored', inbox.groups.ignored);
+    printInboxGroup('Denied on This Device', inbox.groups.ignored);
     if (inbox.summary.next_recommended_action) {
         console.log(`Next recommended action: ${formatSmartInboxActionValue(inbox.summary.next_recommended_action)}`);
     }
@@ -1881,11 +1881,11 @@ async function run() {
         if (ignoreModel && ignoreDigest) {
             const ignored = service.markModelIgnored(ignoreModel, ignoreDigest);
             if (!ignored) {
-                console.error(`[forkit-connect] Model not found for ignore: ${ignoreModel} ${ignoreDigest}`);
+                console.error(`[forkit-connect] Model not found for deny-on-this-device: ${ignoreModel} ${ignoreDigest}`);
                 process.exitCode = 2;
                 return;
             }
-            console.log(`[forkit-connect] Ignored model: ${ignoreModel} (${ignoreDigest})`);
+            console.log(`[forkit-connect] Denied model on this device: ${ignoreModel} (${ignoreDigest})`);
             return;
         }
         const result = await service.runDiscoveryCycle();
@@ -2840,7 +2840,7 @@ async function run() {
             case 'connected':
                 return 'Connected';
             case 'ignored':
-                return 'Ignored';
+                return 'Denied on this device';
             default:
                 return group.replaceAll('_', ' ');
         }
@@ -2907,21 +2907,21 @@ async function run() {
             }
             const ignored = service.markModelIgnored(model.model, model.digest);
             if (!ignored) {
-                console.error('Ignore failed.');
+                console.error('Deny on this device failed.');
                 process.exitCode = 2;
                 return;
             }
-            console.log(`[forkit-connect] Ignored model: ${model.model} (${model.digest})`);
+            console.log(`[forkit-connect] Denied model on this device: ${model.model} (${model.digest})`);
             process.exitCode = 0;
             return;
         }
         if (item.item_type === 'runtime') {
             service.markRuntimeIgnored(selector);
-            console.log(`[forkit-connect] Ignored runtime: ${item.display_name}`);
+            console.log(`[forkit-connect] Denied runtime on this device: ${item.display_name}`);
             process.exitCode = 0;
             return;
         }
-        console.log('[forkit-connect] Ignore is not available for this inbox item type from the public menu yet.');
+        console.log('[forkit-connect] Deny on this device is not available for this inbox item type from the public menu yet.');
     };
     const runInteractiveDeferInboxItem = (item) => {
         const selector = extractInboxItemSelector(item);
@@ -4060,7 +4060,7 @@ async function run() {
         }
         const ignored = service.markModelIgnored(resolvedModel.model, resolvedModel.digest);
         if (!ignored) {
-            console.error('Ignore failed.');
+            console.error('Deny on this device failed.');
             process.exitCode = 2;
             return;
         }

package/dist/launcher.js

@@ -687,8 +687,8 @@ function buildDiscovery(service) {
         let actionLabel = 'Register';
         let actionTone = 'primary';
         if (group === 'ignored') {
-            statusLabel = 'Ignored';
-            statusMeta = 'Held back locally until you review it again.';
+            statusLabel = 'Denied on this device';
+            statusMeta = 'This device will keep it out of the active review queue until you reopen it.';
             statusTone = 'muted';
             actionLabel = 'Review';
             actionTone = 'muted';
@@ -777,7 +777,14 @@ function buildDiscovery(service) {
         let statusTone = 'ok';
         let actionLabel = 'Register';
         let actionTone = 'primary';
-        if (agent.status === 'inactive' || group === 'ignored') {
+        if (group === 'ignored') {
+            statusLabel = 'Denied on this device';
+            statusMeta = 'This device will keep it out of the active review queue until you reopen it.';
+            statusTone = 'muted';
+            actionLabel = 'Review';
+            actionTone = 'muted';
+        }
+        else if (agent.status === 'inactive') {
             statusLabel = 'Inactive';
             statusMeta = 'Paused locally until the agent is seen again.';
             statusTone = 'muted';
@@ -861,8 +868,8 @@ function buildDiscovery(service) {
             statusTone = 'ok';
         }
         else if (group === 'ignored') {
-            statusLabel = 'Ignored';
-            statusMeta = 'Runtime review is deferred locally.';
+            statusLabel = 'Denied on this device';
+            statusMeta = 'This device will keep runtime review out of the active queue until you reopen it.';
             statusTone = 'muted';
         }
         else if (group === 'needs_confirmation') {
@@ -6558,7 +6565,7 @@ function renderLauncherHtml(launcherToken) {
                       </button>
                       <button id="quick-review-ignore" class="danger" type="button">
                         <span class="quick-review-menu-copy">
-                          <span class="quick-review-menu-label">Ignore locally</span>
+                          <span class="quick-review-menu-label">Deny on this device</span>
                           <span class="quick-review-menu-meta">Keep it out of this device review queue.</span>
                         </span>
                       </button>
@@ -6953,7 +6960,7 @@ function renderLauncherHtml(launcherToken) {
               <div class="discovery-review-actions">
                 <button class="primary" id="discovery-review-primary" type="button" disabled>Review</button>
                 <button class="secondary" id="discovery-review-defer" type="button" disabled>Defer 24h</button>
-                <button class="danger" id="discovery-review-ignore" type="button" disabled>Ignore</button>
+                <button class="danger" id="discovery-review-ignore" type="button" disabled>Deny on this device</button>
               </div>
               <div class="review-resolution-actions" id="discovery-review-resolution" hidden>
                 <button class="review-resolution-button" id="discovery-review-resolution-primary" type="button" hidden></button>
@@ -7592,11 +7599,11 @@ function renderLauncherHtml(launcherToken) {
     }
 
     function canReviewDefer(item) {
-      return Boolean(item && (item.kind === 'model' || item.kind === 'runtime') && item.inboxGroup !== 'ignored');
+      return Boolean(item && (item.kind === 'model' || item.kind === 'agent' || item.kind === 'runtime') && item.inboxGroup !== 'ignored');
     }
 
     function canReviewIgnore(item) {
-      return Boolean(item && (item.kind === 'model' || item.kind === 'runtime') && item.inboxGroup !== 'ignored');
+      return Boolean(item && (item.kind === 'model' || item.kind === 'agent' || item.kind === 'runtime') && item.inboxGroup !== 'ignored');
     }
 
     function getQuickReviewItems() {
@@ -8183,15 +8190,15 @@ function renderLauncherHtml(launcherToken) {
     async function submitQuickReviewIgnore() {
       const item = getQuickReviewItem();
       if (!item || !canReviewIgnore(item)) {
-        setQuickReviewStatus('Ignore is not available for this item.', 'warn');
+        setQuickReviewStatus('Deny on this device is not available for this item.', 'warn');
         return;
       }
       const result = await postAction('/api/discovery/review/ignore', 'Ignoring this review item...', {
         method: 'POST',
         body: JSON.stringify({ kind: item.kind, selector: item.selector }),
       });
-      setQuickReviewStatus(result.message || 'Item ignored locally.', result.ok ? 'ok' : 'warn');
-      setActivityMessage(result.message || 'Item ignored locally.', result.ok ? 'ok' : 'warn');
+      setQuickReviewStatus(result.message || 'Item denied on this device.', result.ok ? 'ok' : 'warn');
+      setActivityMessage(result.message || 'Item denied on this device.', result.ok ? 'ok' : 'warn');
       await refreshAll();
       resetReviewResolutionActions('quick-review');
       setQuickReviewOptionsOpen(false);
@@ -8433,15 +8440,15 @@ function renderLauncherHtml(launcherToken) {
     async function submitDiscoveryReviewIgnore() {
       const item = getSelectedDiscoveryItem();
       if (!item || !canReviewIgnore(item)) {
-        setDiscoveryReviewStatus('Ignore is not available for this item.', 'warn');
+        setDiscoveryReviewStatus('Deny on this device is not available for this item.', 'warn');
         return;
       }
       const result = await postAction('/api/discovery/review/ignore', 'Ignoring this review item...', {
         method: 'POST',
         body: JSON.stringify({ kind: item.kind, selector: item.selector }),
       });
-      setDiscoveryReviewStatus(result.message || 'Item ignored locally.', result.ok ? 'ok' : 'warn');
-      setActivityMessage(result.message || 'Item ignored locally.', result.ok ? 'ok' : 'warn');
+      setDiscoveryReviewStatus(result.message || 'Item denied on this device.', result.ok ? 'ok' : 'warn');
+      setActivityMessage(result.message || 'Item denied on this device.', result.ok ? 'ok' : 'warn');
       await refreshAll();
       resetReviewResolutionActions('discovery-review');
     }
@@ -9689,14 +9696,14 @@ function renderLauncherHtml(launcherToken) {
       selectedDiscoveryId = item.id;
       if (item.kind === 'runtime') {
         if (item.inboxGroup === 'ignored') {
-          setActivityMessage(item.detailSummary || item.statusMeta || (item.name + ' is currently ignored locally.'), 'warn');
+          setActivityMessage(item.detailSummary || item.statusMeta || (item.name + ' is currently denied on this device.'), 'warn');
           return;
         }
         setView('runtime');
         return;
       }
       if (item.inboxGroup === 'ignored') {
-        setActivityMessage(item.detailSummary || item.statusMeta || (item.name + ' is currently ignored locally.'), 'warn');
+        setActivityMessage(item.detailSummary || item.statusMeta || (item.name + ' is currently denied on this device.'), 'warn');
         return;
       }
       if (item.kind === 'model' && (item.actionLabel === 'Open' || item.actionLabel === 'Review')) {
@@ -9704,7 +9711,7 @@ function renderLauncherHtml(launcherToken) {
         return;
       }
       if (item.kind === 'model' && item.actionLabel === 'Undo') {
-        setActivityMessage('Ignored model restore is not available from the launcher yet.', 'warn');
+        setActivityMessage('Restore from denied-on-this-device state is not available from the launcher yet.', 'warn');
         return;
       }
       if (item.kind === 'model') {
@@ -9726,14 +9733,14 @@ function renderLauncherHtml(launcherToken) {
       selectedDiscoveryId = item.id;
       if (item.kind === 'runtime') {
         if (item.inboxGroup === 'ignored') {
-          setActivityMessage(item.detailSummary || item.statusMeta || (item.name + ' is currently ignored locally.'), 'warn');
+          setActivityMessage(item.detailSummary || item.statusMeta || (item.name + ' is currently denied on this device.'), 'warn');
           return;
         }
         setView('runtime');
         return;
       }
       if (item.inboxGroup === 'ignored') {
-        setActivityMessage(item.detailSummary || item.statusMeta || (item.name + ' is currently ignored locally.'), 'warn');
+        setActivityMessage(item.detailSummary || item.statusMeta || (item.name + ' is currently denied on this device.'), 'warn');
         return;
       }
       if (item.actionLabel === 'Open' || item.actionLabel === 'Review') {
@@ -9742,7 +9749,7 @@ function renderLauncherHtml(launcherToken) {
       }
       if (item.kind === 'model') {
         if (item.actionLabel === 'Undo') {
-          setActivityMessage('Ignored model restore is not available from the launcher yet.', 'warn');
+          setActivityMessage('Restore from denied-on-this-device state is not available from the launcher yet.', 'warn');
           return;
         }
         await openRegistrationScopeDialog(item);
@@ -11239,10 +11246,8 @@ function createLauncherApp(options) {
                 return;
             }
             if (kind === 'agent') {
-                response.status(400).json({
-                    ok: false,
-                    message: 'Agent defer is not available yet in the local review surface.',
-                });
+                options.service.deferDetectedAgent(selector, Number.isFinite(hours) ? hours : 24);
+                response.json({ ok: true, message: 'Agent review deferred for 24 hours.' });
                 return;
             }
             response.status(400).json({ ok: false, message: 'Unsupported review kind.' });
@@ -11262,19 +11267,17 @@ function createLauncherApp(options) {
             }
             if (kind === 'model') {
                 options.service.ignoreDetectedModel(selector);
-                response.json({ ok: true, message: 'Model review ignored locally.' });
+                response.json({ ok: true, message: 'Model review denied on this device.' });
                 return;
             }
             if (kind === 'runtime') {
                 options.service.ignoreRuntimeSuggestion(selector);
-                response.json({ ok: true, message: 'Runtime review ignored locally.' });
+                response.json({ ok: true, message: 'Runtime review denied on this device.' });
                 return;
             }
             if (kind === 'agent') {
-                response.status(400).json({
-                    ok: false,
-                    message: 'Agent ignore is not available yet in the local review surface.',
-                });
+                options.service.ignoreDetectedAgent(selector);
+                response.json({ ok: true, message: 'Agent review denied on this device.' });
                 return;
             }
             response.status(400).json({ ok: false, message: 'Unsupported review kind.' });

package/dist/v1/service.d.ts

@@ -402,6 +402,7 @@ export declare class ConnectV1Service {
     private buildInboxItemId;
     private isDeferredReviewActive;
     private getModelReviewDisposition;
+    private getAgentReviewDisposition;
     private getRuntimeReviewDisposition;
     private buildModelVerificationSummary;
     private buildRuntimeVerificationSummary;
@@ -768,7 +769,9 @@ export declare class ConnectV1Service {
     runDoctorChecks(): Promise<DoctorCheck[]>;
     markModelIgnored(modelName: string, digest: string): boolean;
     ignoreDetectedModel(selector: string): boolean;
+    ignoreDetectedAgent(selector: string): boolean;
     deferDetectedModel(selector: string, deferHours?: number): boolean;
+    deferDetectedAgent(selector: string, deferHours?: number): boolean;
     markRuntimeIgnored(selector: string): boolean;
     deferRuntimeSuggestion(selector: string, deferHours?: number): boolean;
     ignoreRuntimeSuggestion(selector: string): boolean;

package/dist/v1/service.js

@@ -2153,6 +2153,15 @@ class ConnectV1Service {
         }
         return 'active';
     }
+    getAgentReviewDisposition(agent) {
+        if (agent.review_state === 'ignored') {
+            return 'ignored';
+        }
+        if (agent.review_state === 'deferred' && this.isDeferredReviewActive(agent.review_deferred_until)) {
+            return 'deferred';
+        }
+        return 'active';
+    }
     getRuntimeReviewDisposition(runtimePassport) {
         if (runtimePassport.review_state === 'ignored') {
             return 'ignored';
@@ -3607,6 +3616,8 @@ class ConnectV1Service {
                 source_label: input.candidate.source_label ?? null,
                 detection_reason: input.candidate.reason ?? null,
             },
+            review_state: input.existing?.review_state,
+            review_deferred_until: input.existing?.review_deferred_until ?? null,
         };
     }
     queueAgentC2Event(agent, eventType, metadata = {}, occurredAt) {
@@ -4434,29 +4445,35 @@ class ConnectV1Service {
             const sourceLabel = typeof metadata.source_label === 'string' && metadata.source_label.trim()
                 ? metadata.source_label.trim()
                 : null;
-            const reviewDisposition = link
+            const agentReviewStatus = link
                 ? 'linked_agent'
                 : agent.agent_type === 'unknown_ai_tool'
                     ? 'unknown_ai_tool'
                     : agent.detected_at === agent.last_seen_at
                         ? 'new_agent'
                         : 'known_agent';
+            const reviewDisposition = this.getAgentReviewDisposition(agent);
+            if (reviewDisposition === 'deferred') {
+                continue;
+            }
             const agentObservation = this.buildAgentObservationStatus(agent);
-            const group = agent.status === 'inactive'
+            const group = reviewDisposition === 'ignored'
                 ? 'ignored'
-                : link
-                    ? 'connected'
-                    : candidate.model
-                        ? 'needs_confirmation'
-                        : 'ready_to_connect';
+                : agent.status === 'inactive'
+                    ? 'ignored'
+                    : link
+                        ? 'connected'
+                        : candidate.model
+                            ? 'needs_confirmation'
+                            : 'ready_to_connect';
             const observedWorkspaceId = normalizeDisplayText(metadata.observation_workspace_id ?? metadata.workspaceId ?? metadata.workspace_id);
             const observedProjectId = normalizeDisplayText(metadata.observation_project_id ?? metadata.projectId ?? metadata.project_id);
             const scopeSuggestion = this.resolveScopeSuggestion(currentState, observedWorkspaceId, observedProjectId);
             const itemId = this.buildInboxItemId('agent', agent.agent_id);
             const recommendedAction = link ? 'open_on_forkit' : 'link_agent_to_model';
             const allowedActions = this.filterInboxActionsForBinding(link
-                ? ['open_on_forkit', 'ignore']
-                : ['link_agent_to_model', 'ignore', 'open_on_forkit'], currentState);
+                ? ['open_on_forkit', 'defer', 'ignore']
+                : ['link_agent_to_model', 'defer', 'ignore', 'open_on_forkit'], currentState);
             if (scopeSuggestion.scope_mismatch_detected && scopeSuggestion.scope_mismatch_reason) {
                 this.maybeRecordScopeMismatchEvidence(currentState, {
                     itemType: 'agent',
@@ -4501,7 +4518,8 @@ class ConnectV1Service {
                     last_observed_tool_at: agentObservation.lastObservedToolAt,
                     last_tool_decision: agentObservation.lastToolDecision,
                     source_label: sourceLabel,
-                    review_disposition: reviewDisposition,
+                    review_disposition: agentReviewStatus,
+                    local_review_disposition: reviewDisposition,
                     scope_suggestion: scopeSuggestion.scope_suggestion,
                     scope_suggestion_kind: scopeSuggestion.scope_suggestion_kind,
                     scope_suggestion_source_label: scopeSuggestion.scope_suggestion_source_label,
@@ -9024,6 +9042,21 @@ class ConnectV1Service {
         const model = this.resolveModelSelection(selector, state);
         return this.markModelIgnored(model.model, model.digest);
     }
+    ignoreDetectedAgent(selector) {
+        const state = this.stateStore.readState();
+        const agent = this.findAgentByIdOrName(state, selector);
+        if (!agent)
+            return false;
+        const nextAgents = state.detected_agents.map((item) => item.agent_id === agent.agent_id
+            ? {
+                ...item,
+                review_state: 'ignored',
+                review_deferred_until: null,
+            }
+            : item);
+        this.stateStore.replaceDetectedAgents(nextAgents);
+        return true;
+    }
     deferDetectedModel(selector, deferHours = 24) {
         const state = this.stateStore.readState();
         const model = this.resolveModelSelection(selector, state);
@@ -9038,6 +9071,22 @@ class ConnectV1Service {
         this.stateStore.replaceDetectedModels(nextModels);
         return true;
     }
+    deferDetectedAgent(selector, deferHours = 24) {
+        const state = this.stateStore.readState();
+        const agent = this.findAgentByIdOrName(state, selector);
+        if (!agent)
+            return false;
+        const deferredUntil = new Date(Date.now() + Math.max(1, deferHours) * 60 * 60 * 1000).toISOString();
+        const nextAgents = state.detected_agents.map((item) => item.agent_id === agent.agent_id
+            ? {
+                ...item,
+                review_state: 'deferred',
+                review_deferred_until: deferredUntil,
+            }
+            : item);
+        this.stateStore.replaceDetectedAgents(nextAgents);
+        return true;
+    }
     markRuntimeIgnored(selector) {
         const state = this.stateStore.readState();
         const runtimePassport = this.resolveRuntimePassportSelection(selector, state);

package/dist/v1/types.d.ts

@@ -569,6 +569,8 @@ export interface DetectedAgent {
     persistence?: 'temporary' | 'permanent';
     discovery_sources: AgentDiscoverySource[];
     metadata: Record<string, unknown>;
+    review_state?: ReviewDisposition | undefined;
+    review_deferred_until?: string | null;
 }
 /**
  * AgentLink (M2: Agent Class Metadata in linkage)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "forkit-connect",
-  "version": "0.1.12",
+  "version": "0.1.14",
   "description": "Forkit Connect Local Engine - The Global AI Governance Fabric",
   "license": "MIT",
   "main": "dist/index.js",