@node9/proxy 1.0.2 → 1.0.4

package/dist/index.js

@@ -350,6 +350,23 @@ function extractShellCommand(toolName, args, toolInspection) {
   const value = getNestedValue(args, fieldPath);
   return typeof value === "string" ? value : null;
 }
+function isSqlTool(toolName, toolInspection) {
+  const patterns = Object.keys(toolInspection);
+  const matchingPattern = patterns.find((p) => matchesPattern(toolName, p));
+  if (!matchingPattern) return false;
+  const fieldName = toolInspection[matchingPattern];
+  return fieldName === "sql" || fieldName === "query";
+}
+var SQL_DML_KEYWORDS = /* @__PURE__ */ new Set(["select", "insert", "update", "delete", "merge", "upsert"]);
+function checkDangerousSql(sql) {
+  const norm = sql.replace(/\s+/g, " ").trim().toLowerCase();
+  const hasWhere = /\bwhere\b/.test(norm);
+  if (/^delete\s+from\s+\S+/.test(norm) && !hasWhere)
+    return "DELETE without WHERE \u2014 full table wipe";
+  if (/^update\s+\S+\s+set\s+/.test(norm) && !hasWhere)
+    return "UPDATE without WHERE \u2014 updates every row";
+  return null;
+}
 async function analyzeShellCommand(command) {
   const actions = [];
   const paths = [];
@@ -529,9 +546,20 @@ async function evaluatePolicy(toolName, args, agent) {
     if (INLINE_EXEC_PATTERN.test(shellCommand.trim())) {
       return { decision: "review", blockedByLabel: "Node9 Standard (Inline Execution)" };
     }
+    if (isSqlTool(toolName, config.policy.toolInspection)) {
+      const sqlDanger = checkDangerousSql(shellCommand);
+      if (sqlDanger) return { decision: "review", blockedByLabel: `SQL Safety: ${sqlDanger}` };
+      allTokens = allTokens.filter((t) => !SQL_DML_KEYWORDS.has(t.toLowerCase()));
+      actionTokens = actionTokens.filter((t) => !SQL_DML_KEYWORDS.has(t.toLowerCase()));
+    }
   } else {
     allTokens = tokenize(toolName);
     actionTokens = [toolName];
+    if (args && typeof args === "object") {
+      const flattenedArgs = JSON.stringify(args).toLowerCase();
+      const extraTokens = flattenedArgs.split(/[^a-zA-Z0-9]+/).filter((t) => t.length > 1);
+      allTokens.push(...extraTokens);
+    }
   }
   const isManual = agent === "Terminal";
   if (isManual) {
@@ -760,8 +788,7 @@ async function authorizeHeadless(toolName, args, allowTerminalFallback = false,
   const cloudEnforced = approvers.cloud && !!creds?.apiKey;
   if (cloudEnforced) {
     try {
-      const envConfig = getActiveEnvironment(getConfig());
-      const initResult = await initNode9SaaS(toolName, args, creds, envConfig?.slackChannel, meta);
+      const initResult = await initNode9SaaS(toolName, args, creds, meta);
       if (!initResult.pending) {
         return {
           approved: !!initResult.approved,
@@ -1015,6 +1042,7 @@ function getConfig() {
     if (s.enableHookLogDebug !== void 0)
       mergedSettings.enableHookLogDebug = s.enableHookLogDebug;
     if (s.approvers) mergedSettings.approvers = { ...mergedSettings.approvers, ...s.approvers };
+    if (s.environment !== void 0) mergedSettings.environment = s.environment;
     if (p.sandboxPaths) mergedPolicy.sandboxPaths.push(...p.sandboxPaths);
     if (p.ignoredTools) mergedPolicy.ignoredTools.push(...p.ignoredTools);
     if (p.dangerousWords) mergedPolicy.dangerousWords = [...p.dangerousWords];
@@ -1044,7 +1072,7 @@ function tryLoadConfig(filePath) {
   }
 }
 function getActiveEnvironment(config) {
-  const env = process.env.NODE_ENV || "development";
+  const env = config.settings.environment || process.env.NODE_ENV || "development";
   return config.environments[env] ?? null;
 }
 function getCredentials() {
@@ -1104,7 +1132,7 @@ function auditLocalAllow(toolName, args, checkedBy, creds, meta) {
   }).catch(() => {
   });
 }
-async function initNode9SaaS(toolName, args, creds, slackChannel, meta) {
+async function initNode9SaaS(toolName, args, creds, meta) {
   const controller = new AbortController();
   const timeout = setTimeout(() => controller.abort(), 1e4);
   try {
@@ -1114,7 +1142,6 @@ async function initNode9SaaS(toolName, args, creds, slackChannel, meta) {
       body: JSON.stringify({
         toolName,
         args,
-        slackChannel,
         context: {
           agent: meta?.agent,
           mcpServer: meta?.mcpServer,

package/dist/index.mjs

@@ -314,6 +314,23 @@ function extractShellCommand(toolName, args, toolInspection) {
   const value = getNestedValue(args, fieldPath);
   return typeof value === "string" ? value : null;
 }
+function isSqlTool(toolName, toolInspection) {
+  const patterns = Object.keys(toolInspection);
+  const matchingPattern = patterns.find((p) => matchesPattern(toolName, p));
+  if (!matchingPattern) return false;
+  const fieldName = toolInspection[matchingPattern];
+  return fieldName === "sql" || fieldName === "query";
+}
+var SQL_DML_KEYWORDS = /* @__PURE__ */ new Set(["select", "insert", "update", "delete", "merge", "upsert"]);
+function checkDangerousSql(sql) {
+  const norm = sql.replace(/\s+/g, " ").trim().toLowerCase();
+  const hasWhere = /\bwhere\b/.test(norm);
+  if (/^delete\s+from\s+\S+/.test(norm) && !hasWhere)
+    return "DELETE without WHERE \u2014 full table wipe";
+  if (/^update\s+\S+\s+set\s+/.test(norm) && !hasWhere)
+    return "UPDATE without WHERE \u2014 updates every row";
+  return null;
+}
 async function analyzeShellCommand(command) {
   const actions = [];
   const paths = [];
@@ -493,9 +510,20 @@ async function evaluatePolicy(toolName, args, agent) {
     if (INLINE_EXEC_PATTERN.test(shellCommand.trim())) {
       return { decision: "review", blockedByLabel: "Node9 Standard (Inline Execution)" };
     }
+    if (isSqlTool(toolName, config.policy.toolInspection)) {
+      const sqlDanger = checkDangerousSql(shellCommand);
+      if (sqlDanger) return { decision: "review", blockedByLabel: `SQL Safety: ${sqlDanger}` };
+      allTokens = allTokens.filter((t) => !SQL_DML_KEYWORDS.has(t.toLowerCase()));
+      actionTokens = actionTokens.filter((t) => !SQL_DML_KEYWORDS.has(t.toLowerCase()));
+    }
   } else {
     allTokens = tokenize(toolName);
     actionTokens = [toolName];
+    if (args && typeof args === "object") {
+      const flattenedArgs = JSON.stringify(args).toLowerCase();
+      const extraTokens = flattenedArgs.split(/[^a-zA-Z0-9]+/).filter((t) => t.length > 1);
+      allTokens.push(...extraTokens);
+    }
   }
   const isManual = agent === "Terminal";
   if (isManual) {
@@ -724,8 +752,7 @@ async function authorizeHeadless(toolName, args, allowTerminalFallback = false,
   const cloudEnforced = approvers.cloud && !!creds?.apiKey;
   if (cloudEnforced) {
     try {
-      const envConfig = getActiveEnvironment(getConfig());
-      const initResult = await initNode9SaaS(toolName, args, creds, envConfig?.slackChannel, meta);
+      const initResult = await initNode9SaaS(toolName, args, creds, meta);
       if (!initResult.pending) {
         return {
           approved: !!initResult.approved,
@@ -979,6 +1006,7 @@ function getConfig() {
     if (s.enableHookLogDebug !== void 0)
       mergedSettings.enableHookLogDebug = s.enableHookLogDebug;
     if (s.approvers) mergedSettings.approvers = { ...mergedSettings.approvers, ...s.approvers };
+    if (s.environment !== void 0) mergedSettings.environment = s.environment;
     if (p.sandboxPaths) mergedPolicy.sandboxPaths.push(...p.sandboxPaths);
     if (p.ignoredTools) mergedPolicy.ignoredTools.push(...p.ignoredTools);
     if (p.dangerousWords) mergedPolicy.dangerousWords = [...p.dangerousWords];
@@ -1008,7 +1036,7 @@ function tryLoadConfig(filePath) {
   }
 }
 function getActiveEnvironment(config) {
-  const env = process.env.NODE_ENV || "development";
+  const env = config.settings.environment || process.env.NODE_ENV || "development";
   return config.environments[env] ?? null;
 }
 function getCredentials() {
@@ -1068,7 +1096,7 @@ function auditLocalAllow(toolName, args, checkedBy, creds, meta) {
   }).catch(() => {
   });
 }
-async function initNode9SaaS(toolName, args, creds, slackChannel, meta) {
+async function initNode9SaaS(toolName, args, creds, meta) {
   const controller = new AbortController();
   const timeout = setTimeout(() => controller.abort(), 1e4);
   try {
@@ -1078,7 +1106,6 @@ async function initNode9SaaS(toolName, args, creds, slackChannel, meta) {
       body: JSON.stringify({
         toolName,
         args,
-        slackChannel,
         context: {
           agent: meta?.agent,
           mcpServer: meta?.mcpServer,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code & MCP.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",