procsi 0.2.7 → 0.4.0

package/dist/daemon/proxy.js

@@ -1,7 +1,21 @@
 import * as mockttp from "mockttp";
 import { createLogger } from "../shared/logger.js";
+import { PROCSI_RUNTIME_SOURCE_HEADER, PROCSI_SESSION_ID_HEADER, PROCSI_SESSION_TOKEN_HEADER, } from "../shared/constants.js";
 /** Default maximum body size to capture (10MB) */
 export const DEFAULT_MAX_BODY_SIZE = 10 * 1024 * 1024;
+const MAX_RUNTIME_SOURCE_LENGTH = 32;
+const RUNTIME_SOURCE_PATTERN = /^[a-z0-9._-]+$/;
+const LEGACY_SESSION_HEADER = "x-procsi-session";
+function normaliseRuntimeSource(value) {
+    if (typeof value !== "string") {
+        return undefined;
+    }
+    const trimmed = value.trim().toLowerCase();
+    if (!trimmed || trimmed.length > MAX_RUNTIME_SOURCE_LENGTH) {
+        return undefined;
+    }
+    return RUNTIME_SOURCE_PATTERN.test(trimmed) ? trimmed : undefined;
+}
 /**
  * Create and start a MITM proxy server that captures all HTTP/HTTPS traffic.
  */
@@ -12,6 +26,28 @@ export async function createProxy(options) {
     // Map to track request info for response correlation
     const requestInfo = new Map();
     const maxBodySize = options.maxBodySize ?? DEFAULT_MAX_BODY_SIZE;
+    // Cache session source lookups to avoid repeated DB queries
+    const sessionSourceCache = new Map();
+    function getSessionSource(sid) {
+        if (!sessionSourceCache.has(sid)) {
+            const session = storage.getSession(sid);
+            sessionSourceCache.set(sid, session?.source);
+        }
+        return sessionSourceCache.get(sid);
+    }
+    // Cache trusted session auth lookups by (sessionId, token)
+    const sessionAuthCache = new Map();
+    function getTrustedSessionSource(sid, token) {
+        const cacheKey = `${sid}:${token}`;
+        const cached = sessionAuthCache.get(cacheKey);
+        if (cached) {
+            return cached;
+        }
+        const auth = storage.getSessionAuth(sid, token);
+        const resolved = auth ? { valid: true, source: auth.source } : { valid: false };
+        sessionAuthCache.set(cacheKey, resolved);
+        return resolved;
+    }
     const server = mockttp.getLocal({
         https: {
             keyPath: options.caKeyPath,
@@ -53,22 +89,64 @@ export async function createProxy(options) {
             // Strip content-encoding from stored headers since we store the decoded body
             const storedHeaders = { ...headers };
             delete storedHeaders["content-encoding"];
+            // Read and strip internal procsi attribution headers
+            const requestSessionId = storedHeaders[PROCSI_SESSION_ID_HEADER];
+            const requestSessionToken = storedHeaders[PROCSI_SESSION_TOKEN_HEADER];
+            const runtimeSourceHeader = storedHeaders[PROCSI_RUNTIME_SOURCE_HEADER];
+            const legacySessionId = storedHeaders[LEGACY_SESSION_HEADER];
+            const headersCopy = { ...storedHeaders };
+            // eslint-disable-next-line @typescript-eslint/no-dynamic-delete
+            delete headersCopy[PROCSI_SESSION_ID_HEADER];
+            // eslint-disable-next-line @typescript-eslint/no-dynamic-delete
+            delete headersCopy[PROCSI_SESSION_TOKEN_HEADER];
+            // eslint-disable-next-line @typescript-eslint/no-dynamic-delete
+            delete headersCopy[PROCSI_RUNTIME_SOURCE_HEADER];
+            // Legacy header used before token hardening. Strip it for compatibility.
+            // eslint-disable-next-line @typescript-eslint/no-dynamic-delete
+            delete headersCopy[LEGACY_SESSION_HEADER];
+            const finalStoredHeaders = headersCopy;
+            // Trust runtime attribution only when both session ID and token are valid.
+            let effectiveSessionId = sessionId;
+            let sessionSource = getSessionSource(sessionId);
+            let trustedAttribution = false;
+            if (typeof requestSessionId === "string" && typeof requestSessionToken === "string") {
+                const trusted = getTrustedSessionSource(requestSessionId, requestSessionToken);
+                if (trusted.valid) {
+                    effectiveSessionId = requestSessionId;
+                    sessionSource = trusted.source;
+                    trustedAttribution = true;
+                }
+                else {
+                    logger?.warn("Ignoring untrusted procsi session attribution headers", {
+                        sessionId: requestSessionId,
+                    });
+                }
+            }
+            if (requestSessionId === undefined && typeof legacySessionId === "string") {
+                logger?.warn("Ignoring legacy untrusted procsi session header without token");
+            }
+            // Runtime hint wins when present; otherwise fall back to the session source.
+            const runtimeSource = trustedAttribution
+                ? normaliseRuntimeSource(runtimeSourceHeader)
+                : undefined;
+            const source = runtimeSource ?? sessionSource;
             logger?.trace("Request received", {
                 method: request.method,
                 url: request.url,
-                headers: storedHeaders,
+                headers: finalStoredHeaders,
                 bodyTruncated: requestBodyTruncated,
             });
             // Save request to storage and track the ID
             const ourId = storage.saveRequest({
-                sessionId,
+                sessionId: effectiveSessionId,
                 label,
+                source,
                 timestamp,
                 method: request.method,
                 url: request.url,
                 host: url.host,
                 path: url.pathname + url.search,
-                requestHeaders: storedHeaders,
+                requestHeaders: finalStoredHeaders,
                 requestBody: decodedBody,
                 requestBodyTruncated,
             });
@@ -81,7 +159,7 @@ export async function createProxy(options) {
                     url: request.url,
                     host: url.host,
                     path: url.pathname + url.search,
-                    headers: { ...storedHeaders },
+                    headers: { ...finalStoredHeaders },
                     body: decodedBody,
                 };
                 const result = await interceptorRunner.handleRequest(ourId, interceptorRequest);
@@ -107,6 +185,23 @@ export async function createProxy(options) {
                     storage.updateRequestInterception(ourId, result.interception.name, result.interception.type);
                 }
             }
+            // Strip internal procsi attribution headers from the upstream request.
+            if (requestSessionId !== undefined ||
+                requestSessionToken !== undefined ||
+                runtimeSourceHeader !== undefined ||
+                legacySessionId !== undefined) {
+                const upstreamHeaders = flattenHeaders(request.headers);
+                const cleanedHeaders = { ...upstreamHeaders };
+                // eslint-disable-next-line @typescript-eslint/no-dynamic-delete
+                delete cleanedHeaders[PROCSI_SESSION_ID_HEADER];
+                // eslint-disable-next-line @typescript-eslint/no-dynamic-delete
+                delete cleanedHeaders[PROCSI_SESSION_TOKEN_HEADER];
+                // eslint-disable-next-line @typescript-eslint/no-dynamic-delete
+                delete cleanedHeaders[PROCSI_RUNTIME_SOURCE_HEADER];
+                // eslint-disable-next-line @typescript-eslint/no-dynamic-delete
+                delete cleanedHeaders[LEGACY_SESSION_HEADER];
+                return { headers: cleanedHeaders };
+            }
             // Return undefined to pass through without modification
             return undefined;
         },

package/dist/daemon/proxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../src/daemon/proxy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AAKnC,OAAO,EAAE,YAAY,EAAiB,MAAM,qBAAqB,CAAC;AAelE,kDAAkD;AAClD,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAuBtD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAqB;IACrD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC;IAExF,2CAA2C;IAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEtF,qDAAqD;IACrD,MAAM,WAAW,GAAG,IAAI,GAAG,EAGxB,CAAC;IAEJ,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,qBAAqB,CAAC;IAEjE,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC9B,KAAK,EAAE;YACL,OAAO,EAAE,OAAO,CAAC,SAAS;YAC1B,QAAQ,EAAE,OAAO,CAAC,UAAU;SAC7B;QACD,yCAAyC;QACzC,aAAa,EAAE,KAAK;QACpB,8DAA8D;QAC9D,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjC,oDAAoD;IACpD,+EAA+E;IAC/E,MAAM,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,IAAI,IAAI,iBAAiB,EAAE,CAAC;YAC9B,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;QACD,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC,eAAe,CAAC;QAC3C,gEAAgE;QAChE,qBAAqB,EAAE,IAAI;QAE3B,aAAa,EAAE,KAAK,EAAE,OAAyB,EAAE,EAAE;YACjD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE7B,qCAAqC;YACrC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAEjC,mCAAmC;YACnC,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAEhD,kDAAkD;YAClD,gFAAgF;YAChF,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;YACrE,MAAM,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,GAAG,CAAC,CAAC;YAEnF,kEAAkE;YAClE,2DAA2D;YAC3D,MAAM,WAAW,GACf,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBAC5B,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;gBAClE,CAAC,CAAC,SAAS,CAAC;YAEhB,6EAA6E;YAC7E,MAAM,aAAa,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;YACrC,OAAO,aAAa,CAAC,kBAAkB,CAAC,CAAC;YAEzC,MAAM,EAAE,KAAK,CAAC,kBAAkB,EAAE;gBAChC,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,OAAO,EAAE,aAAa;gBACtB,aAAa,EAAE,oBAAoB;aACpC,CAAC,CAAC;YAEH,2CAA2C;YAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC;gBAChC,SAAS;gBACT,KAAK;gBACL,SAAS;gBACT,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM;gBAC/B,cAAc,EAAE,aAAa;gBAC7B,WAAW,EAAE,WAAW;gBACxB,oBAAoB;aACrB,CAAC,CAAC;YAEH,wDAAwD;YACxD,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC,CAAC;YAExE,+BAA+B;YAC/B,IAAI,iBAAiB,EAAE,CAAC;gBACtB,MAAM,kBAAkB,GAAuB;oBAC7C,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,IAAI,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM;oBAC/B,OAAO,EAAE,EAAE,GAAG,aAAa,EAAE;oBAC7B,IAAI,EAAE,WAAW;iBAClB,CAAC;gBAEF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,aAAa,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;gBAEhF,IAAI,MAAM,EAAE,YAAY,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;oBAChD,mEAAmE;oBACnE,OAAO,CAAC,yBAAyB,CAC/B,KAAK,EACL,MAAM,CAAC,YAAY,CAAC,IAAI,EACxB,MAAM,CAAC,YAAY,CAAC,IAAI,CACzB,CAAC;oBAEF,MAAM,QAAQ,GACZ,OAAO,MAAM,CAAC,YAAY,CAAC,IAAI,KAAK,QAAQ;wBAC1C,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC;wBACvC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC;oBAE/B,OAAO,CAAC,qBAAqB,CAAC,KAAK,EAAE;wBACnC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM;wBAClC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC,OAAO,IAAI,EAAE;wBAC1C,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;wBAClC,qBAAqB,EAAE,KAAK;qBAC7B,CAAC,CAAC;oBAEH,OAAO;wBACL,QAAQ,EAAE,oBAAoB,CAAC,MAAM,CAAC,YAAY,CAAC;qBACpD,CAAC;gBACJ,CAAC;gBAED,IAAI,MAAM,EAAE,YAAY,EAAE,CAAC;oBACzB,0EAA0E;oBAC1E,OAAO,CAAC,yBAAyB,CAC/B,KAAK,EACL,MAAM,CAAC,YAAY,CAAC,IAAI,EACxB,MAAM,CAAC,YAAY,CAAC,IAAI,CACzB,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,wDAAwD;YACxD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,cAAc,EAAE,KAAK,EAAE,QAA6B,EAAE,OAAyB,EAAE,EAAE;YACjF,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACzC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAE/B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,mEAAmE;gBACnE,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;YAE/C,mCAAmC;YACnC,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAEjD,kDAAkD;YAClD,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;YACrE,MAAM,qBAAqB,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,GAAG,CAAC,CAAC;YAErF,0DAA0D;YAC1D,mDAAmD;YACnD,MAAM,WAAW,GACf,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBAC7B,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;gBACpE,CAAC,CAAC,SAAS,CAAC;YAEhB,6EAA6E;YAC7E,MAAM,aAAa,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;YACrC,OAAO,aAAa,CAAC,kBAAkB,CAAC,CAAC;YAEzC,MAAM,EAAE,KAAK,CAAC,eAAe,EAAE;gBAC7B,MAAM,EAAE,QAAQ,CAAC,UAAU;gBAC3B,UAAU;gBACV,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,aAAa,EAAE,qBAAqB;aACrC,CAAC,CAAC;YAEH,gDAAgD;YAChD,IAAI,iBAAiB,EAAE,CAAC;gBACtB,MAAM,gBAAgB,GAAwB;oBAC5C,MAAM,EAAE,QAAQ,CAAC,UAAU;oBAC3B,OAAO,EAAE,EAAE,GAAG,aAAa,EAAE;oBAC7B,IAAI,EAAE,WAAW;iBAClB,CAAC;gBAEF,MAAM,eAAe,GAAG,MAAM,iBAAiB,CAAC,cAAc,CAC5D,IAAI,CAAC,KAAK,EACV,gBAAgB,CACjB,CAAC;gBAEF,IAAI,eAAe,EAAE,gBAAgB,IAAI,eAAe,CAAC,YAAY,EAAE,CAAC;oBACtE,gDAAgD;oBAChD,OAAO,CAAC,yBAAyB,CAC/B,IAAI,CAAC,KAAK,EACV,eAAe,CAAC,YAAY,CAAC,IAAI,EACjC,eAAe,CAAC,YAAY,CAAC,IAAI,CAClC,CAAC;oBAEF,MAAM,YAAY,GAChB,OAAO,eAAe,CAAC,gBAAgB,CAAC,IAAI,KAAK,QAAQ;wBACvD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,IAAI,CAAC;wBACpD,CAAC,CAAC,eAAe,CAAC,gBAAgB,CAAC,IAAI,CAAC;oBAE5C,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE;wBACxC,MAAM,EAAE,eAAe,CAAC,gBAAgB,CAAC,MAAM;wBAC/C,OAAO,EAAE,eAAe,CAAC,gBAAgB,CAAC,OAAO,IAAI,aAAa;wBAClE,IAAI,EAAE,YAAY;wBAClB,UAAU;wBACV,qBAAqB,EAAE,KAAK;qBAC7B,CAAC,CAAC;oBAEH,OAAO,oBAAoB,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;gBAChE,CAAC;gBAED,IAAI,eAAe,EAAE,YAAY,EAAE,CAAC;oBAClC,wEAAwE;oBACxE,OAAO,CAAC,yBAAyB,CAC/B,IAAI,CAAC,KAAK,EACV,eAAe,CAAC,YAAY,CAAC,IAAI,EACjC,eAAe,CAAC,YAAY,CAAC,IAAI,CAClC,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,iDAAiD;YACjD,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE;gBACxC,MAAM,EAAE,QAAQ,CAAC,UAAU;gBAC3B,OAAO,EAAE,aAAa;gBACtB,IAAI,EAAE,WAAW;gBACjB,UAAU;gBACV,qBAAqB;aACtB,CAAC,CAAC;YAEH,wDAAwD;YACxD,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,QAA6B;IAMzD,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,MAAM;QAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;KACpB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC7C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;aAAM,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../src/daemon/proxy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AAKnC,OAAO,EAAE,YAAY,EAAiB,MAAM,qBAAqB,CAAC;AAClE,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAehC,kDAAkD;AAClD,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACtD,MAAM,yBAAyB,GAAG,EAAE,CAAC;AACrC,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;AAChD,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAuBjD,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;QAC3D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAqB;IACrD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC;IAExF,2CAA2C;IAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEtF,qDAAqD;IACrD,MAAM,WAAW,GAAG,IAAI,GAAG,EAGxB,CAAC;IAEJ,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,qBAAqB,CAAC;IAEjE,4DAA4D;IAC5D,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAA8B,CAAC;IACjE,SAAS,gBAAgB,CAAC,GAAW;QACnC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACxC,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAED,2DAA2D;IAC3D,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA+C,CAAC;IAChF,SAAS,uBAAuB,CAC9B,GAAW,EACX,KAAa;QAEb,MAAM,QAAQ,GAAG,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAChF,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACzC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC9B,KAAK,EAAE;YACL,OAAO,EAAE,OAAO,CAAC,SAAS;YAC1B,QAAQ,EAAE,OAAO,CAAC,UAAU;SAC7B;QACD,yCAAyC;QACzC,aAAa,EAAE,KAAK;QACpB,8DAA8D;QAC9D,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjC,oDAAoD;IACpD,+EAA+E;IAC/E,MAAM,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,IAAI,IAAI,iBAAiB,EAAE,CAAC;YAC9B,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;QACD,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC,eAAe,CAAC;QAC3C,gEAAgE;QAChE,qBAAqB,EAAE,IAAI;QAE3B,aAAa,EAAE,KAAK,EAAE,OAAyB,EAAE,EAAE;YACjD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE7B,qCAAqC;YACrC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAEjC,mCAAmC;YACnC,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAEhD,kDAAkD;YAClD,gFAAgF;YAChF,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;YACrE,MAAM,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,GAAG,CAAC,CAAC;YAEnF,kEAAkE;YAClE,2DAA2D;YAC3D,MAAM,WAAW,GACf,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBAC5B,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;gBAClE,CAAC,CAAC,SAAS,CAAC;YAEhB,6EAA6E;YAC7E,MAAM,aAAa,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;YACrC,OAAO,aAAa,CAAC,kBAAkB,CAAC,CAAC;YAEzC,qDAAqD;YACrD,MAAM,gBAAgB,GAAG,aAAa,CAAC,wBAAwB,CAAC,CAAC;YACjE,MAAM,mBAAmB,GAAG,aAAa,CAAC,2BAA2B,CAAC,CAAC;YACvE,MAAM,mBAAmB,GAAG,aAAa,CAAC,4BAA4B,CAAC,CAAC;YACxE,MAAM,eAAe,GAAG,aAAa,CAAC,qBAAqB,CAAC,CAAC;YAC7D,MAAM,WAAW,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC;YACzC,gEAAgE;YAChE,OAAO,WAAW,CAAC,wBAAwB,CAAC,CAAC;YAC7C,gEAAgE;YAChE,OAAO,WAAW,CAAC,2BAA2B,CAAC,CAAC;YAChD,gEAAgE;YAChE,OAAO,WAAW,CAAC,4BAA4B,CAAC,CAAC;YACjD,yEAAyE;YACzE,gEAAgE;YAChE,OAAO,WAAW,CAAC,qBAAqB,CAAC,CAAC;YAC1C,MAAM,kBAAkB,GAAG,WAAW,CAAC;YAEvC,2EAA2E;YAC3E,IAAI,kBAAkB,GAAG,SAAS,CAAC;YACnC,IAAI,aAAa,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,kBAAkB,GAAG,KAAK,CAAC;YAC/B,IAAI,OAAO,gBAAgB,KAAK,QAAQ,IAAI,OAAO,mBAAmB,KAAK,QAAQ,EAAE,CAAC;gBACpF,MAAM,OAAO,GAAG,uBAAuB,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;gBAC/E,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;oBAClB,kBAAkB,GAAG,gBAAgB,CAAC;oBACtC,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;oBAC/B,kBAAkB,GAAG,IAAI,CAAC;gBAC5B,CAAC;qBAAM,CAAC;oBACN,MAAM,EAAE,IAAI,CAAC,uDAAuD,EAAE;wBACpE,SAAS,EAAE,gBAAgB;qBAC5B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,IAAI,gBAAgB,KAAK,SAAS,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;gBAC1E,MAAM,EAAE,IAAI,CAAC,+DAA+D,CAAC,CAAC;YAChF,CAAC;YAED,6EAA6E;YAC7E,MAAM,aAAa,GAAG,kBAAkB;gBACtC,CAAC,CAAC,sBAAsB,CAAC,mBAAmB,CAAC;gBAC7C,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,MAAM,GAAG,aAAa,IAAI,aAAa,CAAC;YAE9C,MAAM,EAAE,KAAK,CAAC,kBAAkB,EAAE;gBAChC,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,OAAO,EAAE,kBAAkB;gBAC3B,aAAa,EAAE,oBAAoB;aACpC,CAAC,CAAC;YAEH,2CAA2C;YAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC;gBAChC,SAAS,EAAE,kBAAkB;gBAC7B,KAAK;gBACL,MAAM;gBACN,SAAS;gBACT,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM;gBAC/B,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,WAAW;gBACxB,oBAAoB;aACrB,CAAC,CAAC;YAEH,wDAAwD;YACxD,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC,CAAC;YAExE,+BAA+B;YAC/B,IAAI,iBAAiB,EAAE,CAAC;gBACtB,MAAM,kBAAkB,GAAuB;oBAC7C,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,IAAI,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM;oBAC/B,OAAO,EAAE,EAAE,GAAG,kBAAkB,EAAE;oBAClC,IAAI,EAAE,WAAW;iBAClB,CAAC;gBAEF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,aAAa,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;gBAEhF,IAAI,MAAM,EAAE,YAAY,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;oBAChD,mEAAmE;oBACnE,OAAO,CAAC,yBAAyB,CAC/B,KAAK,EACL,MAAM,CAAC,YAAY,CAAC,IAAI,EACxB,MAAM,CAAC,YAAY,CAAC,IAAI,CACzB,CAAC;oBAEF,MAAM,QAAQ,GACZ,OAAO,MAAM,CAAC,YAAY,CAAC,IAAI,KAAK,QAAQ;wBAC1C,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC;wBACvC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC;oBAE/B,OAAO,CAAC,qBAAqB,CAAC,KAAK,EAAE;wBACnC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM;wBAClC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC,OAAO,IAAI,EAAE;wBAC1C,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;wBAClC,qBAAqB,EAAE,KAAK;qBAC7B,CAAC,CAAC;oBAEH,OAAO;wBACL,QAAQ,EAAE,oBAAoB,CAAC,MAAM,CAAC,YAAY,CAAC;qBACpD,CAAC;gBACJ,CAAC;gBAED,IAAI,MAAM,EAAE,YAAY,EAAE,CAAC;oBACzB,0EAA0E;oBAC1E,OAAO,CAAC,yBAAyB,CAC/B,KAAK,EACL,MAAM,CAAC,YAAY,CAAC,IAAI,EACxB,MAAM,CAAC,YAAY,CAAC,IAAI,CACzB,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,uEAAuE;YACvE,IACE,gBAAgB,KAAK,SAAS;gBAC9B,mBAAmB,KAAK,SAAS;gBACjC,mBAAmB,KAAK,SAAS;gBACjC,eAAe,KAAK,SAAS,EAC7B,CAAC;gBACD,MAAM,eAAe,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACxD,MAAM,cAAc,GAAG,EAAE,GAAG,eAAe,EAAE,CAAC;gBAC9C,gEAAgE;gBAChE,OAAO,cAAc,CAAC,wBAAwB,CAAC,CAAC;gBAChD,gEAAgE;gBAChE,OAAO,cAAc,CAAC,2BAA2B,CAAC,CAAC;gBACnD,gEAAgE;gBAChE,OAAO,cAAc,CAAC,4BAA4B,CAAC,CAAC;gBACpD,gEAAgE;gBAChE,OAAO,cAAc,CAAC,qBAAqB,CAAC,CAAC;gBAC7C,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;YACrC,CAAC;YAED,wDAAwD;YACxD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,cAAc,EAAE,KAAK,EAAE,QAA6B,EAAE,OAAyB,EAAE,EAAE;YACjF,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACzC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAE/B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,mEAAmE;gBACnE,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;YAE/C,mCAAmC;YACnC,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAEjD,kDAAkD;YAClD,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;YACrE,MAAM,qBAAqB,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,GAAG,CAAC,CAAC;YAErF,0DAA0D;YAC1D,mDAAmD;YACnD,MAAM,WAAW,GACf,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBAC7B,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;gBACpE,CAAC,CAAC,SAAS,CAAC;YAEhB,6EAA6E;YAC7E,MAAM,aAAa,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;YACrC,OAAO,aAAa,CAAC,kBAAkB,CAAC,CAAC;YAEzC,MAAM,EAAE,KAAK,CAAC,eAAe,EAAE;gBAC7B,MAAM,EAAE,QAAQ,CAAC,UAAU;gBAC3B,UAAU;gBACV,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,aAAa,EAAE,qBAAqB;aACrC,CAAC,CAAC;YAEH,gDAAgD;YAChD,IAAI,iBAAiB,EAAE,CAAC;gBACtB,MAAM,gBAAgB,GAAwB;oBAC5C,MAAM,EAAE,QAAQ,CAAC,UAAU;oBAC3B,OAAO,EAAE,EAAE,GAAG,aAAa,EAAE;oBAC7B,IAAI,EAAE,WAAW;iBAClB,CAAC;gBAEF,MAAM,eAAe,GAAG,MAAM,iBAAiB,CAAC,cAAc,CAC5D,IAAI,CAAC,KAAK,EACV,gBAAgB,CACjB,CAAC;gBAEF,IAAI,eAAe,EAAE,gBAAgB,IAAI,eAAe,CAAC,YAAY,EAAE,CAAC;oBACtE,gDAAgD;oBAChD,OAAO,CAAC,yBAAyB,CAC/B,IAAI,CAAC,KAAK,EACV,eAAe,CAAC,YAAY,CAAC,IAAI,EACjC,eAAe,CAAC,YAAY,CAAC,IAAI,CAClC,CAAC;oBAEF,MAAM,YAAY,GAChB,OAAO,eAAe,CAAC,gBAAgB,CAAC,IAAI,KAAK,QAAQ;wBACvD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,IAAI,CAAC;wBACpD,CAAC,CAAC,eAAe,CAAC,gBAAgB,CAAC,IAAI,CAAC;oBAE5C,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE;wBACxC,MAAM,EAAE,eAAe,CAAC,gBAAgB,CAAC,MAAM;wBAC/C,OAAO,EAAE,eAAe,CAAC,gBAAgB,CAAC,OAAO,IAAI,aAAa;wBAClE,IAAI,EAAE,YAAY;wBAClB,UAAU;wBACV,qBAAqB,EAAE,KAAK;qBAC7B,CAAC,CAAC;oBAEH,OAAO,oBAAoB,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;gBAChE,CAAC;gBAED,IAAI,eAAe,EAAE,YAAY,EAAE,CAAC;oBAClC,wEAAwE;oBACxE,OAAO,CAAC,yBAAyB,CAC/B,IAAI,CAAC,KAAK,EACV,eAAe,CAAC,YAAY,CAAC,IAAI,EACjC,eAAe,CAAC,YAAY,CAAC,IAAI,CAClC,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,iDAAiD;YACjD,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE;gBACxC,MAAM,EAAE,QAAQ,CAAC,UAAU;gBAC3B,OAAO,EAAE,aAAa;gBACtB,IAAI,EAAE,WAAW;gBACjB,UAAU;gBACV,qBAAqB;aACtB,CAAC,CAAC;YAEH,wDAAwD;YACxD,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,QAA6B;IAMzD,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,MAAM;QAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;KACpB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC7C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;aAAM,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/daemon/storage.d.ts

@@ -1,4 +1,4 @@
-import type { CapturedRequest, CapturedRequestSummary, InterceptionType, JsonQueryResult, RequestFilter, Session } from "../shared/types.js";
+import type { CapturedRequest, CapturedRequestSummary, InterceptionType, JsonQueryResult, RegisteredSession, RequestFilter, Session } from "../shared/types.js";
 import { type LogLevel } from "../shared/logger.js";
 export interface RepositoryOptions {
     maxStoredRequests?: number;
@@ -16,13 +16,19 @@ export declare class RequestRepository {
     /**
      * Register a new session.
      */
-    registerSession(label?: string, pid?: number): Session;
+    registerSession(label?: string, pid?: number, source?: string): RegisteredSession;
     /**
      * Ensure a session exists with a specific ID.
      * If the session already exists, returns it unchanged.
      * If not, creates a new session with the given ID.
      */
-    ensureSession(id: string, label?: string, pid?: number): Session;
+    ensureSession(id: string, label?: string, pid?: number, source?: string): Session;
+    /**
+     * Validate a session ID/token pair and return that session's source when valid.
+     */
+    getSessionAuth(id: string, token: string): {
+        source?: string;
+    } | undefined;
     /**
      * Get a session by ID.
      */
@@ -105,7 +111,15 @@ export declare class RequestRepository {
         filter?: RequestFilter;
     }): JsonQueryResult[];
     /**
-     * Delete all requests (useful for cleanup).
+     * Mark a request as saved (bookmarked). Returns whether a row was affected.
+     */
+    bookmarkRequest(id: string): boolean;
+    /**
+     * Remove the saved (bookmark) flag from a request. Returns whether a row was affected.
+     */
+    unbookmarkRequest(id: string): boolean;
+    /**
+     * Delete all unsaved requests. Saved (bookmarked) requests are preserved.
      */
     clearRequests(): void;
     /**

package/dist/daemon/storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/daemon/storage.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,eAAe,EACf,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,OAAO,EACR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAgB,KAAK,QAAQ,EAAe,MAAM,qBAAqB,CAAC;AA+P/E,MAAM,WAAW,iBAAiB;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,EAAE,CAAoB;IAC9B,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,6BAA6B,CAAK;gBAGxC,MAAM,EAAE,MAAM,EACd,WAAW,CAAC,EAAE,MAAM,EACpB,QAAQ,CAAC,EAAE,QAAQ,EACnB,OAAO,CAAC,EAAE,iBAAiB;IA4B7B;;OAEG;IACH,OAAO,CAAC,eAAe;IAgBvB;;OAEG;IACH,eAAe,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,MAAoB,GAAG,OAAO;IAkBnE;;;;OAIG;IACH,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,MAAoB,GAAG,OAAO;IAkB7E;;OAEG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAqB3C;;OAEG;IACH,YAAY,IAAI,OAAO,EAAE;IAiBzB;;OAEG;IACH,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,MAAM;IAgDzD;;OAEG;IACH,qBAAqB,CACnB,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,qBAAqB,CAAC,EAAE,OAAO,CAAC;KACjC,GACA,IAAI;IAoBP;;OAEG;IACH,yBAAyB,CACvB,EAAE,EAAE,MAAM,EACV,aAAa,EAAE,MAAM,EACrB,gBAAgB,EAAE,gBAAgB,GACjC,IAAI;IASP;;OAEG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAUnD;;OAEG;IACH,YAAY,CACV,OAAO,GAAE;QACP,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,aAAa,CAAC;KACnB,GACL,eAAe,EAAE;IAkCpB;;;OAGG;IACH,mBAAmB,CACjB,OAAO,GAAE;QACP,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,aAAa,CAAC;KACnB,GACL,sBAAsB,EAAE;IAiD3B;;OAEG;IACH,aAAa,CACX,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,aAAa,CAAA;KAAO,GAC3E,MAAM;IA2BT;;;OAGG;IACH,YAAY,CAAC,OAAO,EAAE;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,aAAa,CAAC;KACxB,GAAG,sBAAsB,EAAE;IAoD5B;;;OAGG;IACH,eAAe,CAAC,OAAO,EAAE;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;QACzC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,aAAa,CAAC;KACxB,GAAG,eAAe,EAAE;IA0IrB;;OAEG;IACH,aAAa,IAAI,IAAI;IAIrB;;;OAGG;IACH,eAAe,IAAI,IAAI;IAKvB;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;;;OAIG;IACH,OAAO,CAAC,aAAa;IA+BrB,OAAO,CAAC,YAAY;IAsBpB,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,YAAY;CA2BrB"}
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/daemon/storage.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,eAAe,EACf,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,OAAO,EACR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAgB,KAAK,QAAQ,EAAe,MAAM,qBAAqB,CAAC;AAwS/E,MAAM,WAAW,iBAAiB;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,EAAE,CAAoB;IAC9B,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,6BAA6B,CAAK;gBAGxC,MAAM,EAAE,MAAM,EACd,WAAW,CAAC,EAAE,MAAM,EACpB,QAAQ,CAAC,EAAE,QAAQ,EACnB,OAAO,CAAC,EAAE,iBAAiB;IA4B7B;;OAEG;IACH,OAAO,CAAC,eAAe;IAgBvB;;OAEG;IACH,eAAe,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,MAAoB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB;IA2B9F;;;;OAIG;IACH,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,MAAoB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO;IAkB9F;;OAEG;IACH,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS;IAgB1E;;OAEG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAsB3C;;OAEG;IACH,YAAY,IAAI,OAAO,EAAE;IAkBzB;;OAEG;IACH,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,MAAM;IAiDzD;;OAEG;IACH,qBAAqB,CACnB,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,qBAAqB,CAAC,EAAE,OAAO,CAAC;KACjC,GACA,IAAI;IAoBP;;OAEG;IACH,yBAAyB,CACvB,EAAE,EAAE,MAAM,EACV,aAAa,EAAE,MAAM,EACrB,gBAAgB,EAAE,gBAAgB,GACjC,IAAI;IASP;;OAEG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAUnD;;OAEG;IACH,YAAY,CACV,OAAO,GAAE;QACP,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,aAAa,CAAC;KACnB,GACL,eAAe,EAAE;IAkCpB;;;OAGG;IACH,mBAAmB,CACjB,OAAO,GAAE;QACP,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,aAAa,CAAC;KACnB,GACL,sBAAsB,EAAE;IAmD3B;;OAEG;IACH,aAAa,CACX,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,aAAa,CAAA;KAAO,GAC3E,MAAM;IA2BT;;;OAGG;IACH,YAAY,CAAC,OAAO,EAAE;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,aAAa,CAAC;KACxB,GAAG,sBAAsB,EAAE;IAsD5B;;;OAGG;IACH,eAAe,CAAC,OAAO,EAAE;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;QACzC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,aAAa,CAAC;KACxB,GAAG,eAAe,EAAE;IA0IrB;;OAEG;IACH,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAKpC;;OAEG;IACH,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAKtC;;OAEG;IACH,aAAa,IAAI,IAAI;IAIrB;;;OAGG;IACH,eAAe,IAAI,IAAI;IAKvB;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAiCrB,OAAO,CAAC,YAAY;IAwBpB,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,YAAY;CA6BrB"}

package/dist/daemon/storage.js

@@ -1,16 +1,20 @@
 import Database from "better-sqlite3";
+import { randomBytes } from "node:crypto";
 import { v4 as uuidv4 } from "uuid";
 import { createLogger } from "../shared/logger.js";
 import { normaliseContentType, buildTextContentTypeSqlCondition, buildJsonContentTypeSqlCondition, } from "../shared/content-type.js";
 import { DEFAULT_MAX_STORED_REQUESTS } from "../shared/config.js";
 const DEFAULT_QUERY_LIMIT = 1000;
 const EVICTION_CHECK_INTERVAL = 100;
+const SESSION_TOKEN_BYTES = 16;
 const SCHEMA = `
 CREATE TABLE IF NOT EXISTS sessions (
     id TEXT PRIMARY KEY,
     label TEXT,
     pid INTEGER NOT NULL,
-    started_at INTEGER NOT NULL
+    started_at INTEGER NOT NULL,
+    source TEXT,
+    internal_token TEXT
 );
 
 CREATE TABLE IF NOT EXISTS requests (
@@ -34,6 +38,8 @@ CREATE TABLE IF NOT EXISTS requests (
     response_content_type TEXT,
     intercepted_by TEXT,
     interception_type TEXT CHECK(interception_type IN ('modified', 'mocked')),
+    source TEXT,
+    saved INTEGER DEFAULT 0,
     created_at INTEGER DEFAULT (unixepoch()),
     FOREIGN KEY (session_id) REFERENCES sessions(id)
 );
@@ -83,10 +89,31 @@ const MIGRATIONS = [
       ALTER TABLE requests ADD COLUMN interception_type TEXT;
     `,
     },
+    {
+        version: 6,
+        description: "Add saved/bookmark column",
+        sql: `ALTER TABLE requests ADD COLUMN saved INTEGER DEFAULT 0;`,
+    },
+    {
+        version: 7,
+        description: "Add source column for request/session attribution",
+        sql: `
+      ALTER TABLE sessions ADD COLUMN source TEXT;
+      ALTER TABLE requests ADD COLUMN source TEXT;
+    `,
+    },
+    {
+        version: 8,
+        description: "Add internal session token for trusted runtime attribution headers",
+        sql: `ALTER TABLE sessions ADD COLUMN internal_token TEXT;`,
+    },
 ];
 const STATUS_RANGE_MULTIPLIER = 100;
 const MIN_HTTP_STATUS = 100;
 const MAX_HTTP_STATUS = 599;
+function generateSessionToken() {
+    return randomBytes(SESSION_TOKEN_BYTES).toString("hex");
+}
 /**
  * Escape SQL LIKE wildcards in user input to prevent unintended pattern matching.
  */
@@ -148,10 +175,13 @@ function applyFilterConditions(conditions, params, filter) {
         applyStatusCondition(conditions, params, filter.statusRange);
     }
     if (filter.search) {
-        const escaped = escapeLikeWildcards(filter.search);
-        const pattern = `%${escaped}%`;
-        conditions.push("(url LIKE ? ESCAPE '\\' OR path LIKE ? ESCAPE '\\')");
-        params.push(pattern, pattern);
+        const terms = filter.search.split(/\s+/).filter(Boolean);
+        for (const term of terms) {
+            const escaped = escapeLikeWildcards(term);
+            const pattern = `%${escaped}%`;
+            conditions.push("(url LIKE ? ESCAPE '\\' OR path LIKE ? ESCAPE '\\')");
+            params.push(pattern, pattern);
+        }
     }
     if (filter.host) {
         if (filter.host.startsWith(".")) {
@@ -183,6 +213,16 @@ function applyFilterConditions(conditions, params, filter) {
         conditions.push("intercepted_by = ?");
         params.push(filter.interceptedBy);
     }
+    if (filter.saved === true) {
+        conditions.push("saved = 1");
+    }
+    else if (filter.saved === false) {
+        conditions.push("saved = 0");
+    }
+    if (filter.source) {
+        conditions.push("source = ?");
+        params.push(filter.source);
+    }
     if (filter.headerName) {
         const name = filter.headerName.toLowerCase();
         const jsonPath = `$."${name}"`;
@@ -264,18 +304,20 @@ export class RequestRepository {
     /**
      * Register a new session.
      */
-    registerSession(label, pid = process.pid) {
+    registerSession(label, pid = process.pid, source) {
         const session = {
             id: uuidv4(),
             label,
+            source,
+            token: generateSessionToken(),
             pid,
             startedAt: Date.now(),
         };
         const stmt = this.db.prepare(`
-      INSERT INTO sessions (id, label, pid, started_at)
-      VALUES (?, ?, ?, ?)
+      INSERT INTO sessions (id, label, pid, started_at, source, internal_token)
+      VALUES (?, ?, ?, ?, ?, ?)
     `);
-        stmt.run(session.id, session.label ?? null, session.pid, session.startedAt);
+        stmt.run(session.id, session.label ?? null, session.pid, session.startedAt, session.source ?? null, session.token);
         return session;
     }
     /**
@@ -283,27 +325,45 @@ export class RequestRepository {
      * If the session already exists, returns it unchanged.
      * If not, creates a new session with the given ID.
      */
-    ensureSession(id, label, pid = process.pid) {
+    ensureSession(id, label, pid = process.pid, source) {
         const startedAt = Date.now();
         const stmt = this.db.prepare(`
-      INSERT OR IGNORE INTO sessions (id, label, pid, started_at)
-      VALUES (?, ?, ?, ?)
+      INSERT OR IGNORE INTO sessions (id, label, pid, started_at, source, internal_token)
+      VALUES (?, ?, ?, ?, ?, ?)
     `);
-        stmt.run(id, label ?? null, pid, startedAt);
+        stmt.run(id, label ?? null, pid, startedAt, source ?? null, null);
         // Return the session (either newly created or existing)
         const existing = this.getSession(id);
         if (existing) {
             return existing;
         }
         // This should never happen since we just inserted, but satisfies the type checker
-        return { id, label, pid, startedAt };
+        return { id, label, source, pid, startedAt };
+    }
+    /**
+     * Validate a session ID/token pair and return that session's source when valid.
+     */
+    getSessionAuth(id, token) {
+        const stmt = this.db.prepare(`
+      SELECT source
+      FROM sessions
+      WHERE id = ? AND internal_token = ?
+      LIMIT 1
+    `);
+        const row = stmt.get(id, token);
+        if (!row) {
+            return undefined;
+        }
+        return {
+            source: row.source ?? undefined,
+        };
     }
     /**
      * Get a session by ID.
      */
     getSession(id) {
         const stmt = this.db.prepare(`
-      SELECT id, label, pid, started_at as startedAt
+      SELECT id, label, pid, started_at as startedAt, source
       FROM sessions
       WHERE id = ?
     `);
@@ -314,6 +374,7 @@ export class RequestRepository {
         return {
             id: row.id,
             label: row.label ?? undefined,
+            source: row.source ?? undefined,
             pid: row.pid,
             startedAt: row.startedAt,
         };
@@ -323,7 +384,7 @@ export class RequestRepository {
      */
     listSessions() {
         const stmt = this.db.prepare(`
-      SELECT id, label, pid, started_at as startedAt
+      SELECT id, label, pid, started_at as startedAt, source
       FROM sessions
       ORDER BY started_at DESC
     `);
@@ -331,6 +392,7 @@ export class RequestRepository {
         return rows.map((row) => ({
             id: row.id,
             label: row.label ?? undefined,
+            source: row.source ?? undefined,
             pid: row.pid,
             startedAt: row.startedAt,
         }));
@@ -347,11 +409,11 @@ export class RequestRepository {
       INSERT INTO requests (
         id, session_id, label, timestamp, method, url, host, path,
         request_headers, request_body, request_body_truncated, response_status, response_headers,
-        response_body, response_body_truncated, duration_ms, request_content_type
+        response_body, response_body_truncated, duration_ms, request_content_type, source
       )
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
     `);
-        stmt.run(id, request.sessionId, request.label ?? null, request.timestamp, request.method, request.url, request.host, request.path, request.requestHeaders ? JSON.stringify(request.requestHeaders) : null, request.requestBody ?? null, request.requestBodyTruncated ? 1 : 0, request.responseStatus ?? null, request.responseHeaders ? JSON.stringify(request.responseHeaders) : null, request.responseBody ?? null, request.responseBodyTruncated ? 1 : 0, request.durationMs ?? null, requestContentType);
+        stmt.run(id, request.sessionId, request.label ?? null, request.timestamp, request.method, request.url, request.host, request.path, request.requestHeaders ? JSON.stringify(request.requestHeaders) : null, request.requestBody ?? null, request.requestBodyTruncated ? 1 : 0, request.responseStatus ?? null, request.responseHeaders ? JSON.stringify(request.responseHeaders) : null, request.responseBody ?? null, request.responseBodyTruncated ? 1 : 0, request.durationMs ?? null, requestContentType, request.source ?? null);
         this.logger?.debug("Request saved", {
             id,
             sessionId: request.sessionId,
@@ -446,6 +508,7 @@ export class RequestRepository {
         id,
         session_id,
         label,
+        source,
         timestamp,
         method,
         url,
@@ -456,7 +519,8 @@ export class RequestRepository {
         COALESCE(LENGTH(request_body), 0) as request_body_size,
         COALESCE(LENGTH(response_body), 0) as response_body_size,
         intercepted_by,
-        interception_type
+        interception_type,
+        saved
       FROM requests
       ${whereClause}
       ORDER BY timestamp DESC
@@ -512,6 +576,7 @@ export class RequestRepository {
         id,
         session_id,
         label,
+        source,
         timestamp,
         method,
         url,
@@ -522,7 +587,8 @@ export class RequestRepository {
         COALESCE(LENGTH(request_body), 0) as request_body_size,
         COALESCE(LENGTH(response_body), 0) as response_body_size,
         intercepted_by,
-        interception_type
+        interception_type,
+        saved
       FROM requests
       ${whereClause}
       ORDER BY timestamp DESC
@@ -658,10 +724,24 @@ export class RequestRepository {
         }));
     }
     /**
-     * Delete all requests (useful for cleanup).
+     * Mark a request as saved (bookmarked). Returns whether a row was affected.
+     */
+    bookmarkRequest(id) {
+        const result = this.db.prepare("UPDATE requests SET saved = 1 WHERE id = ?").run(id);
+        return result.changes > 0;
+    }
+    /**
+     * Remove the saved (bookmark) flag from a request. Returns whether a row was affected.
+     */
+    unbookmarkRequest(id) {
+        const result = this.db.prepare("UPDATE requests SET saved = 0 WHERE id = ?").run(id);
+        return result.changes > 0;
+    }
+    /**
+     * Delete all unsaved requests. Saved (bookmarked) requests are preserved.
      */
     clearRequests() {
-        this.db.exec("DELETE FROM requests");
+        this.db.exec("DELETE FROM requests WHERE saved = 0");
     }
     /**
      * Reclaim disk space by checkpointing the WAL and vacuuming.
@@ -688,14 +768,16 @@ export class RequestRepository {
             return;
         }
         this.insertsSinceLastEvictionCheck = 0;
-        const { count } = this.db.prepare("SELECT COUNT(*) as count FROM requests").get();
+        const { count } = this.db
+            .prepare("SELECT COUNT(*) as count FROM requests WHERE saved = 0")
+            .get();
         if (count <= this.maxStoredRequests) {
             return;
         }
         const excess = count - this.maxStoredRequests;
         this.db
             .prepare(`DELETE FROM requests WHERE id IN (
-          SELECT id FROM requests ORDER BY timestamp ASC LIMIT ?
+          SELECT id FROM requests WHERE saved = 0 ORDER BY timestamp ASC LIMIT ?
         )`)
             .run(excess);
         this.logger?.debug("Evicted old requests", {
@@ -708,6 +790,7 @@ export class RequestRepository {
             id: row.id,
             sessionId: row.session_id,
             label: row.label ?? undefined,
+            source: row.source ?? undefined,
             timestamp: row.timestamp,
             method: row.method,
             url: row.url,
@@ -721,6 +804,7 @@ export class RequestRepository {
             interceptionType: row.interception_type === "modified" || row.interception_type === "mocked"
                 ? row.interception_type
                 : undefined,
+            ...(row.saved === 1 ? { saved: true } : {}),
         };
     }
     safeParseHeaders(json) {
@@ -736,6 +820,7 @@ export class RequestRepository {
             id: row.id,
             sessionId: row.session_id,
             label: row.label ?? undefined,
+            source: row.source ?? undefined,
             timestamp: row.timestamp,
             method: row.method,
             url: row.url,
@@ -755,6 +840,7 @@ export class RequestRepository {
             interceptionType: row.interception_type === "modified" || row.interception_type === "mocked"
                 ? row.interception_type
                 : undefined,
+            ...(row.saved === 1 ? { saved: true } : {}),
         };
     }
 }