@node9/proxy 1.0.6 → 1.0.8

package/dist/cli.js

@@ -30,13 +30,14 @@ var import_commander = require("commander");
 var import_chalk2 = __toESM(require("chalk"));
 var import_prompts = require("@inquirer/prompts");
 var import_fs = __toESM(require("fs"));
-var import_path = __toESM(require("path"));
+var import_path2 = __toESM(require("path"));
 var import_os = __toESM(require("os"));
 var import_picomatch = __toESM(require("picomatch"));
 var import_sh_syntax = require("sh-syntax");
 
 // src/ui/native.ts
 var import_child_process = require("child_process");
+var import_path = __toESM(require("path"));
 var import_chalk = __toESM(require("chalk"));
 var isTestEnv = () => {
   return process.env.NODE_ENV === "test" || process.env.VITEST === "true" || !!process.env.VITEST || process.env.CI === "true" || !!process.env.CI || process.env.NODE9_TESTING === "1";
@@ -46,8 +47,29 @@ function smartTruncate(str, maxLen = 500) {
   const edge = Math.floor(maxLen / 2) - 3;
   return `${str.slice(0, edge)} ... ${str.slice(-edge)}`;
 }
-function formatArgs(args) {
-  if (args === null || args === void 0) return "(none)";
+function extractContext(text, matchedWord) {
+  const lines = text.split("\n");
+  if (lines.length <= 7 || !matchedWord) return smartTruncate(text, 500);
+  const escaped = matchedWord.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const pattern = new RegExp(`\\b${escaped}\\b`, "i");
+  const allHits = lines.map((line, i) => ({ i, line })).filter(({ line }) => pattern.test(line));
+  if (allHits.length === 0) return smartTruncate(text, 500);
+  const nonComment = allHits.find(({ line }) => {
+    const trimmed = line.trim();
+    return !trimmed.startsWith("//") && !trimmed.startsWith("#");
+  });
+  const hitIndex = (nonComment ?? allHits[0]).i;
+  const start = Math.max(0, hitIndex - 3);
+  const end = Math.min(lines.length, hitIndex + 4);
+  const snippet = lines.slice(start, end).map((line, i) => `${start + i === hitIndex ? "\u{1F6D1} " : "   "}${line}`).join("\n");
+  const head = start > 0 ? `... [${start} lines hidden] ...
+` : "";
+  const tail = end < lines.length ? `
+... [${lines.length - end} lines hidden] ...` : "";
+  return `${head}${snippet}${tail}`;
+}
+function formatArgs(args, matchedField, matchedWord) {
+  if (args === null || args === void 0) return { message: "(none)", intent: "EXEC" };
   let parsed = args;
   if (typeof args === "string") {
     const trimmed = args.trim();
@@ -58,11 +80,39 @@ function formatArgs(args) {
         parsed = args;
       }
     } else {
-      return smartTruncate(args, 600);
+      return { message: smartTruncate(args, 600), intent: "EXEC" };
     }
   }
   if (typeof parsed === "object" && !Array.isArray(parsed)) {
     const obj = parsed;
+    if (obj.old_string !== void 0 && obj.new_string !== void 0) {
+      const file = obj.file_path ? import_path.default.basename(String(obj.file_path)) : "file";
+      const oldPreview = smartTruncate(String(obj.old_string), 120);
+      const newPreview = extractContext(String(obj.new_string), matchedWord);
+      return {
+        intent: "EDIT",
+        message: `\u{1F4DD} EDITING: ${file}
+\u{1F4C2} PATH: ${obj.file_path}
+
+--- REPLACING ---
+${oldPreview}
+
++++ NEW CODE +++
+${newPreview}`
+      };
+    }
+    if (matchedField && obj[matchedField] !== void 0) {
+      const otherKeys = Object.keys(obj).filter((k) => k !== matchedField);
+      const context = otherKeys.length > 0 ? `\u2699\uFE0F  Context: ${otherKeys.map((k) => `${k}=${smartTruncate(typeof obj[k] === "object" ? JSON.stringify(obj[k]) : String(obj[k]), 30)}`).join(", ")}
+
+` : "";
+      const content = extractContext(String(obj[matchedField]), matchedWord);
+      return {
+        intent: "EXEC",
+        message: `${context}\u{1F6D1} [${matchedField.toUpperCase()}]:
+${content}`
+      };
+    }
     const codeKeys = [
       "command",
       "cmd",
@@ -83,14 +133,18 @@ function formatArgs(args) {
     if (foundKey) {
       const val = obj[foundKey];
       const str = typeof val === "string" ? val : JSON.stringify(val);
-      return `[${foundKey.toUpperCase()}]:
-${smartTruncate(str, 500)}`;
+      return {
+        intent: "EXEC",
+        message: `[${foundKey.toUpperCase()}]:
+${smartTruncate(str, 500)}`
+      };
     }
-    return Object.entries(obj).slice(0, 5).map(
+    const msg = Object.entries(obj).slice(0, 5).map(
       ([k, v]) => `  ${k}: ${smartTruncate(typeof v === "string" ? v : JSON.stringify(v), 300)}`
     ).join("\n");
+    return { intent: "EXEC", message: msg };
   }
-  return smartTruncate(JSON.stringify(parsed), 200);
+  return { intent: "EXEC", message: smartTruncate(JSON.stringify(parsed), 200) };
 }
 function sendDesktopNotification(title, body) {
   if (isTestEnv()) return;
@@ -143,10 +197,11 @@ function buildPangoMessage(toolName, formattedArgs, agent, explainableLabel, loc
   }
   return lines.join("\n");
 }
-async function askNativePopup(toolName, args, agent, explainableLabel, locked = false, signal) {
+async function askNativePopup(toolName, args, agent, explainableLabel, locked = false, signal, matchedField, matchedWord) {
   if (isTestEnv()) return "deny";
-  const formattedArgs = formatArgs(args);
-  const title = locked ? `\u26A1 Node9 \u2014 Locked` : `\u{1F6E1}\uFE0F Node9 \u2014 Action Approval`;
+  const { message: formattedArgs, intent } = formatArgs(args, matchedField, matchedWord);
+  const intentLabel = intent === "EDIT" ? "Code Edit" : "Action Approval";
+  const title = locked ? `\u26A1 Node9 \u2014 Locked` : `\u{1F6E1}\uFE0F Node9 \u2014 ${intentLabel}`;
   const message = buildPlainMessage(toolName, formattedArgs, agent, explainableLabel, locked);
   process.stderr.write(import_chalk.default.yellow(`
 \u{1F6E1}\uFE0F  Node9: Intercepted "${toolName}" \u2014 awaiting user...
@@ -224,10 +279,10 @@ end run`;
 }
 
 // src/core.ts
-var PAUSED_FILE = import_path.default.join(import_os.default.homedir(), ".node9", "PAUSED");
-var TRUST_FILE = import_path.default.join(import_os.default.homedir(), ".node9", "trust.json");
-var LOCAL_AUDIT_LOG = import_path.default.join(import_os.default.homedir(), ".node9", "audit.log");
-var HOOK_DEBUG_LOG = import_path.default.join(import_os.default.homedir(), ".node9", "hook-debug.log");
+var PAUSED_FILE = import_path2.default.join(import_os.default.homedir(), ".node9", "PAUSED");
+var TRUST_FILE = import_path2.default.join(import_os.default.homedir(), ".node9", "trust.json");
+var LOCAL_AUDIT_LOG = import_path2.default.join(import_os.default.homedir(), ".node9", "audit.log");
+var HOOK_DEBUG_LOG = import_path2.default.join(import_os.default.homedir(), ".node9", "hook-debug.log");
 function checkPause() {
   try {
     if (!import_fs.default.existsSync(PAUSED_FILE)) return { paused: false };
@@ -245,7 +300,7 @@ function checkPause() {
   }
 }
 function atomicWriteSync(filePath, data, options) {
-  const dir = import_path.default.dirname(filePath);
+  const dir = import_path2.default.dirname(filePath);
   if (!import_fs.default.existsSync(dir)) import_fs.default.mkdirSync(dir, { recursive: true });
   const tmpPath = `${filePath}.${import_os.default.hostname()}.${process.pid}.tmp`;
   import_fs.default.writeFileSync(tmpPath, data, options);
@@ -296,7 +351,7 @@ function writeTrustSession(toolName, durationMs) {
 }
 function appendToLog(logPath, entry) {
   try {
-    const dir = import_path.default.dirname(logPath);
+    const dir = import_path2.default.dirname(logPath);
     if (!import_fs.default.existsSync(dir)) import_fs.default.mkdirSync(dir, { recursive: true });
     import_fs.default.appendFileSync(logPath, JSON.stringify(entry) + "\n");
   } catch {
@@ -340,9 +395,21 @@ function matchesPattern(text, patterns) {
   const withoutDotSlash = text.replace(/^\.\//, "");
   return isMatch(withoutDotSlash) || isMatch(`./${withoutDotSlash}`);
 }
-function getNestedValue(obj, path6) {
+function getNestedValue(obj, path7) {
   if (!obj || typeof obj !== "object") return null;
-  return path6.split(".").reduce((prev, curr) => prev?.[curr], obj);
+  return path7.split(".").reduce((prev, curr) => prev?.[curr], obj);
+}
+function shouldSnapshot(toolName, args, config) {
+  if (!config.settings.enableUndo) return false;
+  const snap = config.policy.snapshot;
+  if (!snap.tools.includes(toolName.toLowerCase())) return false;
+  const a = args && typeof args === "object" ? args : {};
+  const filePath = String(a.file_path ?? a.path ?? a.filename ?? "");
+  if (filePath) {
+    if (snap.ignorePaths.length && (0, import_picomatch.default)(snap.ignorePaths)(filePath)) return false;
+    if (snap.onlyPaths.length && !(0, import_picomatch.default)(snap.onlyPaths)(filePath)) return false;
+  }
+  return true;
 }
 function evaluateSmartConditions(args, rule) {
   if (!rule.conditions || rule.conditions.length === 0) return true;
@@ -531,6 +598,18 @@ var DEFAULT_CONFIG = {
       "terminal.execute": "command",
       "postgres:query": "sql"
     },
+    snapshot: {
+      tools: [
+        "str_replace_based_edit_tool",
+        "write_file",
+        "edit_file",
+        "create_file",
+        "edit",
+        "replace"
+      ],
+      onlyPaths: [],
+      ignorePaths: ["**/node_modules/**", "dist/**", "build/**", ".next/**", "**/*.log"]
+    },
     rules: [
       {
         action: "rm",
@@ -569,7 +648,7 @@ function _resetConfigCache() {
 }
 function getGlobalSettings() {
   try {
-    const globalConfigPath = import_path.default.join(import_os.default.homedir(), ".node9", "config.json");
+    const globalConfigPath = import_path2.default.join(import_os.default.homedir(), ".node9", "config.json");
     if (import_fs.default.existsSync(globalConfigPath)) {
       const parsed = JSON.parse(import_fs.default.readFileSync(globalConfigPath, "utf-8"));
       const settings = parsed.settings || {};
@@ -593,7 +672,7 @@ function getGlobalSettings() {
 }
 function getInternalToken() {
   try {
-    const pidFile = import_path.default.join(import_os.default.homedir(), ".node9", "daemon.pid");
+    const pidFile = import_path2.default.join(import_os.default.homedir(), ".node9", "daemon.pid");
     if (!import_fs.default.existsSync(pidFile)) return null;
     const data = JSON.parse(import_fs.default.readFileSync(pidFile, "utf-8"));
     process.kill(data.pid, 0);
@@ -697,9 +776,29 @@ async function evaluatePolicy(toolName, args, agent) {
     })
   );
   if (isDangerous) {
+    let matchedField;
+    if (matchedDangerousWord && args && typeof args === "object" && !Array.isArray(args)) {
+      const obj = args;
+      for (const [key, value] of Object.entries(obj)) {
+        if (typeof value === "string") {
+          try {
+            if (new RegExp(
+              `\\b${matchedDangerousWord.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\b`,
+              "i"
+            ).test(value)) {
+              matchedField = key;
+              break;
+            }
+          } catch {
+          }
+        }
+      }
+    }
     return {
       decision: "review",
-      blockedByLabel: `Project/Global Config \u2014 dangerous word: "${matchedDangerousWord}"`
+      blockedByLabel: `Project/Global Config \u2014 dangerous word: "${matchedDangerousWord}"`,
+      matchedWord: matchedDangerousWord,
+      matchedField
     };
   }
   if (config.settings.mode === "strict") {
@@ -711,9 +810,9 @@ async function evaluatePolicy(toolName, args, agent) {
 }
 async function explainPolicy(toolName, args) {
   const steps = [];
-  const globalPath = import_path.default.join(import_os.default.homedir(), ".node9", "config.json");
-  const projectPath = import_path.default.join(process.cwd(), "node9.config.json");
-  const credsPath = import_path.default.join(import_os.default.homedir(), ".node9", "credentials.json");
+  const globalPath = import_path2.default.join(import_os.default.homedir(), ".node9", "config.json");
+  const projectPath = import_path2.default.join(process.cwd(), "node9.config.json");
+  const credsPath = import_path2.default.join(import_os.default.homedir(), ".node9", "credentials.json");
   const waterfall = [
     {
       tier: 1,
@@ -1017,7 +1116,7 @@ var DAEMON_PORT = 7391;
 var DAEMON_HOST = "127.0.0.1";
 function isDaemonRunning() {
   try {
-    const pidFile = import_path.default.join(import_os.default.homedir(), ".node9", "daemon.pid");
+    const pidFile = import_path2.default.join(import_os.default.homedir(), ".node9", "daemon.pid");
     if (!import_fs.default.existsSync(pidFile)) return false;
     const { pid, port } = JSON.parse(import_fs.default.readFileSync(pidFile, "utf-8"));
     if (port !== DAEMON_PORT) return false;
@@ -1029,7 +1128,7 @@ function isDaemonRunning() {
 }
 function getPersistentDecision(toolName) {
   try {
-    const file = import_path.default.join(import_os.default.homedir(), ".node9", "decisions.json");
+    const file = import_path2.default.join(import_os.default.homedir(), ".node9", "decisions.json");
     if (!import_fs.default.existsSync(file)) return null;
     const decisions = JSON.parse(import_fs.default.readFileSync(file, "utf-8"));
     const d = decisions[toolName];
@@ -1100,7 +1199,7 @@ async function resolveViaDaemon(id, decision, internalToken) {
     signal: AbortSignal.timeout(3e3)
   });
 }
-async function authorizeHeadless(toolName, args, allowTerminalFallback = false, meta) {
+async function authorizeHeadless(toolName, args, allowTerminalFallback = false, meta, options) {
   if (process.env.NODE9_PAUSED === "1") return { approved: true, checkedBy: "paused" };
   const pauseState = checkPause();
   if (pauseState.paused) return { approved: true, checkedBy: "paused" };
@@ -1120,6 +1219,8 @@ async function authorizeHeadless(toolName, args, allowTerminalFallback = false,
   }
   const isManual = meta?.agent === "Terminal";
   let explainableLabel = "Local Config";
+  let policyMatchedField;
+  let policyMatchedWord;
   if (config.settings.mode === "audit") {
     if (!isIgnoredTool(toolName)) {
       const policyResult = await evaluatePolicy(toolName, args, meta?.agent);
@@ -1155,6 +1256,8 @@ async function authorizeHeadless(toolName, args, allowTerminalFallback = false,
       };
     }
     explainableLabel = policyResult.blockedByLabel || "Local Config";
+    policyMatchedField = policyResult.matchedField;
+    policyMatchedWord = policyResult.matchedWord;
     const persistent = getPersistentDecision(toolName);
     if (persistent === "allow") {
       if (creds?.apiKey) auditLocalAllow(toolName, args, "persistent", creds, meta);
@@ -1247,7 +1350,7 @@ async function authorizeHeadless(toolName, args, allowTerminalFallback = false,
     racePromises.push(
       (async () => {
         try {
-          if (isDaemonRunning() && internalToken) {
+          if (isDaemonRunning() && internalToken && !options?.calledFromDaemon) {
             viewerId = await notifyDaemonViewer(toolName, args, meta).catch(() => null);
           }
           const cloudResult = await pollNode9SaaS(cloudRequestId, creds, signal);
@@ -1275,7 +1378,9 @@ async function authorizeHeadless(toolName, args, allowTerminalFallback = false,
           meta?.agent,
           explainableLabel,
           isRemoteLocked,
-          signal
+          signal,
+          policyMatchedField,
+          policyMatchedWord
         );
         if (decision === "always_allow") {
           writeTrustSession(toolName, 36e5);
@@ -1292,7 +1397,7 @@ async function authorizeHeadless(toolName, args, allowTerminalFallback = false,
       })()
     );
   }
-  if (approvers.browser && isDaemonRunning()) {
+  if (approvers.browser && isDaemonRunning() && !options?.calledFromDaemon) {
     racePromises.push(
       (async () => {
         try {
@@ -1428,8 +1533,8 @@ REASON: Action blocked because no approval channels are available. (Native/Brows
 }
 function getConfig() {
   if (cachedConfig) return cachedConfig;
-  const globalPath = import_path.default.join(import_os.default.homedir(), ".node9", "config.json");
-  const projectPath = import_path.default.join(process.cwd(), "node9.config.json");
+  const globalPath = import_path2.default.join(import_os.default.homedir(), ".node9", "config.json");
+  const projectPath = import_path2.default.join(process.cwd(), "node9.config.json");
   const globalConfig = tryLoadConfig(globalPath);
   const projectConfig = tryLoadConfig(projectPath);
   const mergedSettings = {
@@ -1442,7 +1547,12 @@ function getConfig() {
     ignoredTools: [...DEFAULT_CONFIG.policy.ignoredTools],
     toolInspection: { ...DEFAULT_CONFIG.policy.toolInspection },
     rules: [...DEFAULT_CONFIG.policy.rules],
-    smartRules: [...DEFAULT_CONFIG.policy.smartRules]
+    smartRules: [...DEFAULT_CONFIG.policy.smartRules],
+    snapshot: {
+      tools: [...DEFAULT_CONFIG.policy.snapshot.tools],
+      onlyPaths: [...DEFAULT_CONFIG.policy.snapshot.onlyPaths],
+      ignorePaths: [...DEFAULT_CONFIG.policy.snapshot.ignorePaths]
+    }
   };
   const applyLayer = (source) => {
     if (!source) return;
@@ -1454,6 +1564,7 @@ function getConfig() {
     if (s.enableHookLogDebug !== void 0)
       mergedSettings.enableHookLogDebug = s.enableHookLogDebug;
     if (s.approvers) mergedSettings.approvers = { ...mergedSettings.approvers, ...s.approvers };
+    if (s.approvalTimeoutMs !== void 0) mergedSettings.approvalTimeoutMs = s.approvalTimeoutMs;
     if (s.environment !== void 0) mergedSettings.environment = s.environment;
     if (p.sandboxPaths) mergedPolicy.sandboxPaths.push(...p.sandboxPaths);
     if (p.ignoredTools) mergedPolicy.ignoredTools.push(...p.ignoredTools);
@@ -1462,6 +1573,12 @@ function getConfig() {
       mergedPolicy.toolInspection = { ...mergedPolicy.toolInspection, ...p.toolInspection };
     if (p.rules) mergedPolicy.rules.push(...p.rules);
     if (p.smartRules) mergedPolicy.smartRules.push(...p.smartRules);
+    if (p.snapshot) {
+      const s2 = p.snapshot;
+      if (s2.tools) mergedPolicy.snapshot.tools.push(...s2.tools);
+      if (s2.onlyPaths) mergedPolicy.snapshot.onlyPaths.push(...s2.onlyPaths);
+      if (s2.ignorePaths) mergedPolicy.snapshot.ignorePaths.push(...s2.ignorePaths);
+    }
   };
   applyLayer(globalConfig);
   applyLayer(projectConfig);
@@ -1469,6 +1586,9 @@ function getConfig() {
   mergedPolicy.sandboxPaths = [...new Set(mergedPolicy.sandboxPaths)];
   mergedPolicy.dangerousWords = [...new Set(mergedPolicy.dangerousWords)];
   mergedPolicy.ignoredTools = [...new Set(mergedPolicy.ignoredTools)];
+  mergedPolicy.snapshot.tools = [...new Set(mergedPolicy.snapshot.tools)];
+  mergedPolicy.snapshot.onlyPaths = [...new Set(mergedPolicy.snapshot.onlyPaths)];
+  mergedPolicy.snapshot.ignorePaths = [...new Set(mergedPolicy.snapshot.ignorePaths)];
   cachedConfig = {
     settings: mergedSettings,
     policy: mergedPolicy,
@@ -1497,7 +1617,7 @@ function getCredentials() {
     };
   }
   try {
-    const credPath = import_path.default.join(import_os.default.homedir(), ".node9", "credentials.json");
+    const credPath = import_path2.default.join(import_os.default.homedir(), ".node9", "credentials.json");
     if (import_fs.default.existsSync(credPath)) {
       const creds = JSON.parse(import_fs.default.readFileSync(credPath, "utf-8"));
       const profileName = process.env.NODE9_PROFILE || "default";
@@ -1615,7 +1735,7 @@ async function resolveNode9SaaS(requestId, creds, approved) {
 
 // src/setup.ts
 var import_fs2 = __toESM(require("fs"));
-var import_path2 = __toESM(require("path"));
+var import_path3 = __toESM(require("path"));
 var import_os2 = __toESM(require("os"));
 var import_chalk3 = __toESM(require("chalk"));
 var import_prompts2 = require("@inquirer/prompts");
@@ -1640,14 +1760,14 @@ function readJson(filePath) {
   return null;
 }
 function writeJson(filePath, data) {
-  const dir = import_path2.default.dirname(filePath);
+  const dir = import_path3.default.dirname(filePath);
   if (!import_fs2.default.existsSync(dir)) import_fs2.default.mkdirSync(dir, { recursive: true });
   import_fs2.default.writeFileSync(filePath, JSON.stringify(data, null, 2) + "\n");
 }
 async function setupClaude() {
   const homeDir2 = import_os2.default.homedir();
-  const mcpPath = import_path2.default.join(homeDir2, ".claude.json");
-  const hooksPath = import_path2.default.join(homeDir2, ".claude", "settings.json");
+  const mcpPath = import_path3.default.join(homeDir2, ".claude.json");
+  const hooksPath = import_path3.default.join(homeDir2, ".claude", "settings.json");
   const claudeConfig = readJson(mcpPath) ?? {};
   const settings = readJson(hooksPath) ?? {};
   const servers = claudeConfig.mcpServers ?? {};
@@ -1722,7 +1842,7 @@ async function setupClaude() {
 }
 async function setupGemini() {
   const homeDir2 = import_os2.default.homedir();
-  const settingsPath = import_path2.default.join(homeDir2, ".gemini", "settings.json");
+  const settingsPath = import_path3.default.join(homeDir2, ".gemini", "settings.json");
   const settings = readJson(settingsPath) ?? {};
   const servers = settings.mcpServers ?? {};
   let anythingChanged = false;
@@ -1805,8 +1925,8 @@ async function setupGemini() {
 }
 async function setupCursor() {
   const homeDir2 = import_os2.default.homedir();
-  const mcpPath = import_path2.default.join(homeDir2, ".cursor", "mcp.json");
-  const hooksPath = import_path2.default.join(homeDir2, ".cursor", "hooks.json");
+  const mcpPath = import_path3.default.join(homeDir2, ".cursor", "mcp.json");
+  const hooksPath = import_path3.default.join(homeDir2, ".cursor", "hooks.json");
   const mcpConfig = readJson(mcpPath) ?? {};
   const hooksFile = readJson(hooksPath) ?? { version: 1 };
   const servers = mcpConfig.mcpServers ?? {};
@@ -2844,7 +2964,7 @@ var UI_HTML_TEMPLATE = ui_default;
 // src/daemon/index.ts
 var import_http = __toESM(require("http"));
 var import_fs3 = __toESM(require("fs"));
-var import_path3 = __toESM(require("path"));
+var import_path4 = __toESM(require("path"));
 var import_os3 = __toESM(require("os"));
 var import_child_process2 = require("child_process");
 var import_crypto = require("crypto");
@@ -2852,14 +2972,14 @@ var import_chalk4 = __toESM(require("chalk"));
 var DAEMON_PORT2 = 7391;
 var DAEMON_HOST2 = "127.0.0.1";
 var homeDir = import_os3.default.homedir();
-var DAEMON_PID_FILE = import_path3.default.join(homeDir, ".node9", "daemon.pid");
-var DECISIONS_FILE = import_path3.default.join(homeDir, ".node9", "decisions.json");
-var GLOBAL_CONFIG_FILE = import_path3.default.join(homeDir, ".node9", "config.json");
-var CREDENTIALS_FILE = import_path3.default.join(homeDir, ".node9", "credentials.json");
-var AUDIT_LOG_FILE = import_path3.default.join(homeDir, ".node9", "audit.log");
-var TRUST_FILE2 = import_path3.default.join(homeDir, ".node9", "trust.json");
+var DAEMON_PID_FILE = import_path4.default.join(homeDir, ".node9", "daemon.pid");
+var DECISIONS_FILE = import_path4.default.join(homeDir, ".node9", "decisions.json");
+var GLOBAL_CONFIG_FILE = import_path4.default.join(homeDir, ".node9", "config.json");
+var CREDENTIALS_FILE = import_path4.default.join(homeDir, ".node9", "credentials.json");
+var AUDIT_LOG_FILE = import_path4.default.join(homeDir, ".node9", "audit.log");
+var TRUST_FILE2 = import_path4.default.join(homeDir, ".node9", "trust.json");
 function atomicWriteSync2(filePath, data, options) {
-  const dir = import_path3.default.dirname(filePath);
+  const dir = import_path4.default.dirname(filePath);
   if (!import_fs3.default.existsSync(dir)) import_fs3.default.mkdirSync(dir, { recursive: true });
   const tmpPath = `${filePath}.${(0, import_crypto.randomUUID)()}.tmp`;
   import_fs3.default.writeFileSync(tmpPath, data, options);
@@ -2903,7 +3023,7 @@ function appendAuditLog(data) {
       decision: data.decision,
       source: "daemon"
     };
-    const dir = import_path3.default.dirname(AUDIT_LOG_FILE);
+    const dir = import_path4.default.dirname(AUDIT_LOG_FILE);
     if (!import_fs3.default.existsSync(dir)) import_fs3.default.mkdirSync(dir, { recursive: true });
     import_fs3.default.appendFileSync(AUDIT_LOG_FILE, JSON.stringify(entry) + "\n");
   } catch {
@@ -3108,25 +3228,70 @@ data: ${JSON.stringify(readPersistentDecisions())}
                 args: e.args,
                 decision: "auto-deny"
               });
-              if (e.waiter) e.waiter("deny");
-              else e.earlyDecision = "deny";
+              if (e.waiter) e.waiter("deny", "No response \u2014 auto-denied after timeout");
+              else {
+                e.earlyDecision = "deny";
+                e.earlyReason = "No response \u2014 auto-denied after timeout";
+              }
               pending.delete(id);
               broadcast("remove", { id });
             }
           }, AUTO_DENY_MS)
         };
         pending.set(id, entry);
-        broadcast("add", {
-          id,
+        const browserEnabled = getConfig().settings.approvers?.browser !== false;
+        if (browserEnabled) {
+          broadcast("add", {
+            id,
+            toolName,
+            args,
+            slackDelegated: entry.slackDelegated,
+            agent: entry.agent,
+            mcpServer: entry.mcpServer
+          });
+          if (sseClients.size === 0 && !autoStarted)
+            openBrowser(`http://127.0.0.1:${DAEMON_PORT2}/`);
+        }
+        res.writeHead(200, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({ id }));
+        authorizeHeadless(
           toolName,
           args,
-          slackDelegated: entry.slackDelegated,
-          agent: entry.agent,
-          mcpServer: entry.mcpServer
+          false,
+          {
+            agent: typeof agent === "string" ? agent : void 0,
+            mcpServer: typeof mcpServer === "string" ? mcpServer : void 0
+          },
+          { calledFromDaemon: true }
+        ).then((result) => {
+          const e = pending.get(id);
+          if (!e) return;
+          if (result.noApprovalMechanism) return;
+          clearTimeout(e.timer);
+          const decision = result.approved ? "allow" : "deny";
+          appendAuditLog({ toolName: e.toolName, args: e.args, decision });
+          if (e.waiter) {
+            e.waiter(decision, result.reason);
+            pending.delete(id);
+            broadcast("remove", { id });
+          } else {
+            e.earlyDecision = decision;
+            e.earlyReason = result.reason;
+          }
+        }).catch((err) => {
+          const e = pending.get(id);
+          if (!e) return;
+          clearTimeout(e.timer);
+          const reason = err?.reason || "No response \u2014 request timed out";
+          if (e.waiter) e.waiter("deny", reason);
+          else {
+            e.earlyDecision = "deny";
+            e.earlyReason = reason;
+          }
+          pending.delete(id);
+          broadcast("remove", { id });
         });
-        if (sseClients.size === 0 && !autoStarted) openBrowser(`http://127.0.0.1:${DAEMON_PORT2}/`);
-        res.writeHead(200, { "Content-Type": "application/json" });
-        return res.end(JSON.stringify({ id }));
+        return;
       } catch {
         res.writeHead(400).end();
       }
@@ -3136,12 +3301,18 @@ data: ${JSON.stringify(readPersistentDecisions())}
       const entry = pending.get(id);
       if (!entry) return res.writeHead(404).end();
       if (entry.earlyDecision) {
+        pending.delete(id);
+        broadcast("remove", { id });
         res.writeHead(200, { "Content-Type": "application/json" });
-        return res.end(JSON.stringify({ decision: entry.earlyDecision }));
+        const body = { decision: entry.earlyDecision };
+        if (entry.earlyReason) body.reason = entry.earlyReason;
+        return res.end(JSON.stringify(body));
       }
-      entry.waiter = (d) => {
+      entry.waiter = (d, reason) => {
         res.writeHead(200, { "Content-Type": "application/json" });
-        res.end(JSON.stringify({ decision: d }));
+        const body = { decision: d };
+        if (reason) body.reason = reason;
+        res.end(JSON.stringify(body));
       };
       return;
     }
@@ -3151,7 +3322,7 @@ data: ${JSON.stringify(readPersistentDecisions())}
         const id = pathname.split("/").pop();
         const entry = pending.get(id);
         if (!entry) return res.writeHead(404).end();
-        const { decision, persist, trustDuration } = JSON.parse(await readBody(req));
+        const { decision, persist, trustDuration, reason } = JSON.parse(await readBody(req));
         if (decision === "trust" && trustDuration) {
           const ms = TRUST_DURATIONS[trustDuration] ?? 60 * 6e4;
           writeTrustEntry(entry.toolName, ms);
@@ -3176,8 +3347,11 @@ data: ${JSON.stringify(readPersistentDecisions())}
           decision: resolvedDecision
         });
         clearTimeout(entry.timer);
-        if (entry.waiter) entry.waiter(resolvedDecision);
-        else entry.earlyDecision = resolvedDecision;
+        if (entry.waiter) entry.waiter(resolvedDecision, reason);
+        else {
+          entry.earlyDecision = resolvedDecision;
+          entry.earlyReason = reason;
+        }
         pending.delete(id);
         broadcast("remove", { id });
         res.writeHead(200);
@@ -3340,16 +3514,16 @@ var import_execa2 = require("execa");
 var import_chalk5 = __toESM(require("chalk"));
 var import_readline = __toESM(require("readline"));
 var import_fs5 = __toESM(require("fs"));
-var import_path5 = __toESM(require("path"));
+var import_path6 = __toESM(require("path"));
 var import_os5 = __toESM(require("os"));
 
 // src/undo.ts
 var import_child_process3 = require("child_process");
 var import_fs4 = __toESM(require("fs"));
-var import_path4 = __toESM(require("path"));
+var import_path5 = __toESM(require("path"));
 var import_os4 = __toESM(require("os"));
-var SNAPSHOT_STACK_PATH = import_path4.default.join(import_os4.default.homedir(), ".node9", "snapshots.json");
-var UNDO_LATEST_PATH = import_path4.default.join(import_os4.default.homedir(), ".node9", "undo_latest.txt");
+var SNAPSHOT_STACK_PATH = import_path5.default.join(import_os4.default.homedir(), ".node9", "snapshots.json");
+var UNDO_LATEST_PATH = import_path5.default.join(import_os4.default.homedir(), ".node9", "undo_latest.txt");
 var MAX_SNAPSHOTS = 10;
 function readStack() {
   try {
@@ -3360,7 +3534,7 @@ function readStack() {
   return [];
 }
 function writeStack(stack) {
-  const dir = import_path4.default.dirname(SNAPSHOT_STACK_PATH);
+  const dir = import_path5.default.dirname(SNAPSHOT_STACK_PATH);
   if (!import_fs4.default.existsSync(dir)) import_fs4.default.mkdirSync(dir, { recursive: true });
   import_fs4.default.writeFileSync(SNAPSHOT_STACK_PATH, JSON.stringify(stack, null, 2));
 }
@@ -3378,8 +3552,8 @@ function buildArgsSummary(tool, args) {
 async function createShadowSnapshot(tool = "unknown", args = {}) {
   try {
     const cwd = process.cwd();
-    if (!import_fs4.default.existsSync(import_path4.default.join(cwd, ".git"))) return null;
-    const tempIndex = import_path4.default.join(cwd, ".git", `node9_index_${Date.now()}`);
+    if (!import_fs4.default.existsSync(import_path5.default.join(cwd, ".git"))) return null;
+    const tempIndex = import_path5.default.join(cwd, ".git", `node9_index_${Date.now()}`);
     const env = { ...process.env, GIT_INDEX_FILE: tempIndex };
     (0, import_child_process3.spawnSync)("git", ["add", "-A"], { env });
     const treeRes = (0, import_child_process3.spawnSync)("git", ["write-tree"], { env });
@@ -3443,7 +3617,7 @@ function applyUndo(hash, cwd) {
     const tracked = (0, import_child_process3.spawnSync)("git", ["ls-files"], { cwd: dir }).stdout.toString().trim().split("\n").filter(Boolean);
     const untracked = (0, import_child_process3.spawnSync)("git", ["ls-files", "--others", "--exclude-standard"], { cwd: dir }).stdout.toString().trim().split("\n").filter(Boolean);
     for (const file of [...tracked, ...untracked]) {
-      const fullPath = import_path4.default.join(dir, file);
+      const fullPath = import_path5.default.join(dir, file);
       if (!snapshotFiles.has(file) && import_fs4.default.existsSync(fullPath)) {
         import_fs4.default.unlinkSync(fullPath);
       }
@@ -3457,7 +3631,7 @@ function applyUndo(hash, cwd) {
 // src/cli.ts
 var import_prompts3 = require("@inquirer/prompts");
 var { version } = JSON.parse(
-  import_fs5.default.readFileSync(import_path5.default.join(__dirname, "../package.json"), "utf-8")
+  import_fs5.default.readFileSync(import_path6.default.join(__dirname, "../package.json"), "utf-8")
 );
 function parseDuration(str) {
   const m = str.trim().match(/^(\d+(?:\.\d+)?)\s*(s|m|h|d)?$/i);
@@ -3650,9 +3824,9 @@ async function runProxy(targetCommand) {
 }
 program.command("login").argument("<apiKey>").option("--local", "Save key for audit/logging only \u2014 local config still controls all decisions").option("--profile <name>", 'Save as a named profile (default: "default")').action((apiKey, options) => {
   const DEFAULT_API_URL = "https://api.node9.ai/api/v1/intercept";
-  const credPath = import_path5.default.join(import_os5.default.homedir(), ".node9", "credentials.json");
-  if (!import_fs5.default.existsSync(import_path5.default.dirname(credPath)))
-    import_fs5.default.mkdirSync(import_path5.default.dirname(credPath), { recursive: true });
+  const credPath = import_path6.default.join(import_os5.default.homedir(), ".node9", "credentials.json");
+  if (!import_fs5.default.existsSync(import_path6.default.dirname(credPath)))
+    import_fs5.default.mkdirSync(import_path6.default.dirname(credPath), { recursive: true });
   const profileName = options.profile || "default";
   let existingCreds = {};
   try {
@@ -3671,7 +3845,7 @@ program.command("login").argument("<apiKey>").option("--local", "Save key for au
   existingCreds[profileName] = { apiKey, apiUrl: DEFAULT_API_URL };
   import_fs5.default.writeFileSync(credPath, JSON.stringify(existingCreds, null, 2), { mode: 384 });
   if (profileName === "default") {
-    const configPath = import_path5.default.join(import_os5.default.homedir(), ".node9", "config.json");
+    const configPath = import_path6.default.join(import_os5.default.homedir(), ".node9", "config.json");
     let config = {};
     try {
       if (import_fs5.default.existsSync(configPath))
@@ -3688,8 +3862,8 @@ program.command("login").argument("<apiKey>").option("--local", "Save key for au
     };
     approvers.cloud = !options.local;
     s.approvers = approvers;
-    if (!import_fs5.default.existsSync(import_path5.default.dirname(configPath)))
-      import_fs5.default.mkdirSync(import_path5.default.dirname(configPath), { recursive: true });
+    if (!import_fs5.default.existsSync(import_path6.default.dirname(configPath)))
+      import_fs5.default.mkdirSync(import_path6.default.dirname(configPath), { recursive: true });
     import_fs5.default.writeFileSync(configPath, JSON.stringify(config, null, 2), { mode: 384 });
   }
   if (options.profile && profileName !== "default") {
@@ -3775,7 +3949,7 @@ program.command("doctor").description("Check that Node9 is installed and configu
     );
   }
   section("Configuration");
-  const globalConfigPath = import_path5.default.join(homeDir2, ".node9", "config.json");
+  const globalConfigPath = import_path6.default.join(homeDir2, ".node9", "config.json");
   if (import_fs5.default.existsSync(globalConfigPath)) {
     try {
       JSON.parse(import_fs5.default.readFileSync(globalConfigPath, "utf-8"));
@@ -3786,7 +3960,7 @@ program.command("doctor").description("Check that Node9 is installed and configu
   } else {
     warn("~/.node9/config.json not found (using defaults)", "Run: node9 init");
   }
-  const projectConfigPath = import_path5.default.join(process.cwd(), "node9.config.json");
+  const projectConfigPath = import_path6.default.join(process.cwd(), "node9.config.json");
   if (import_fs5.default.existsSync(projectConfigPath)) {
     try {
       JSON.parse(import_fs5.default.readFileSync(projectConfigPath, "utf-8"));
@@ -3795,7 +3969,7 @@ program.command("doctor").description("Check that Node9 is installed and configu
       fail("node9.config.json is invalid JSON", "Fix the JSON or delete it and run: node9 init");
     }
   }
-  const credsPath = import_path5.default.join(homeDir2, ".node9", "credentials.json");
+  const credsPath = import_path6.default.join(homeDir2, ".node9", "credentials.json");
   if (import_fs5.default.existsSync(credsPath)) {
     pass("Cloud credentials found (~/.node9/credentials.json)");
   } else {
@@ -3805,7 +3979,7 @@ program.command("doctor").description("Check that Node9 is installed and configu
     );
   }
   section("Agent Hooks");
-  const claudeSettingsPath = import_path5.default.join(homeDir2, ".claude", "settings.json");
+  const claudeSettingsPath = import_path6.default.join(homeDir2, ".claude", "settings.json");
   if (import_fs5.default.existsSync(claudeSettingsPath)) {
     try {
       const cs = JSON.parse(import_fs5.default.readFileSync(claudeSettingsPath, "utf-8"));
@@ -3821,7 +3995,7 @@ program.command("doctor").description("Check that Node9 is installed and configu
   } else {
     warn("Claude Code \u2014 not configured", "Run: node9 setup claude");
   }
-  const geminiSettingsPath = import_path5.default.join(homeDir2, ".gemini", "settings.json");
+  const geminiSettingsPath = import_path6.default.join(homeDir2, ".gemini", "settings.json");
   if (import_fs5.default.existsSync(geminiSettingsPath)) {
     try {
       const gs = JSON.parse(import_fs5.default.readFileSync(geminiSettingsPath, "utf-8"));
@@ -3837,7 +4011,7 @@ program.command("doctor").description("Check that Node9 is installed and configu
   } else {
     warn("Gemini CLI  \u2014 not configured", "Run: node9 setup gemini  (skip if not using Gemini)");
   }
-  const cursorHooksPath = import_path5.default.join(homeDir2, ".cursor", "hooks.json");
+  const cursorHooksPath = import_path6.default.join(homeDir2, ".cursor", "hooks.json");
   if (import_fs5.default.existsSync(cursorHooksPath)) {
     try {
       const cur = JSON.parse(import_fs5.default.readFileSync(cursorHooksPath, "utf-8"));
@@ -3942,7 +4116,7 @@ program.command("explain").description(
   console.log("");
 });
 program.command("init").description("Create ~/.node9/config.json with default policy (safe to run multiple times)").option("--force", "Overwrite existing config").option("-m, --mode <mode>", "Set initial security mode (standard, strict, audit)", "standard").action((options) => {
-  const configPath = import_path5.default.join(import_os5.default.homedir(), ".node9", "config.json");
+  const configPath = import_path6.default.join(import_os5.default.homedir(), ".node9", "config.json");
   if (import_fs5.default.existsSync(configPath) && !options.force) {
     console.log(import_chalk5.default.yellow(`\u2139\uFE0F  Global config already exists: ${configPath}`));
     console.log(import_chalk5.default.gray(`   Run with --force to overwrite.`));
@@ -3957,7 +4131,7 @@ program.command("init").description("Create ~/.node9/config.json with default po
       mode: safeMode
     }
   };
-  const dir = import_path5.default.dirname(configPath);
+  const dir = import_path6.default.dirname(configPath);
   if (!import_fs5.default.existsSync(dir)) import_fs5.default.mkdirSync(dir, { recursive: true });
   import_fs5.default.writeFileSync(configPath, JSON.stringify(configToSave, null, 2));
   console.log(import_chalk5.default.green(`\u2705 Global config created: ${configPath}`));
@@ -3977,7 +4151,7 @@ function formatRelativeTime(timestamp) {
   return new Date(timestamp).toLocaleDateString();
 }
 program.command("audit").description("View local execution audit log").option("--tail <n>", "Number of entries to show", "20").option("--tool <pattern>", "Filter by tool name (substring match)").option("--deny", "Show only denied actions").option("--json", "Output raw JSON").action((options) => {
-  const logPath = import_path5.default.join(import_os5.default.homedir(), ".node9", "audit.log");
+  const logPath = import_path6.default.join(import_os5.default.homedir(), ".node9", "audit.log");
   if (!import_fs5.default.existsSync(logPath)) {
     console.log(
       import_chalk5.default.yellow("No audit logs found. Run node9 with an agent to generate entries.")
@@ -4067,8 +4241,8 @@ program.command("status").description("Show current Node9 mode, policy source, a
   console.log("");
   const modeLabel = settings.mode === "audit" ? import_chalk5.default.blue("audit") : settings.mode === "strict" ? import_chalk5.default.red("strict") : import_chalk5.default.white("standard");
   console.log(`  Mode:    ${modeLabel}`);
-  const projectConfig = import_path5.default.join(process.cwd(), "node9.config.json");
-  const globalConfig = import_path5.default.join(import_os5.default.homedir(), ".node9", "config.json");
+  const projectConfig = import_path6.default.join(process.cwd(), "node9.config.json");
+  const globalConfig = import_path6.default.join(import_os5.default.homedir(), ".node9", "config.json");
   console.log(
     `  Local:   ${import_fs5.default.existsSync(projectConfig) ? import_chalk5.default.green("Active (node9.config.json)") : import_chalk5.default.gray("Not present")}`
   );
@@ -4136,7 +4310,7 @@ program.command("check").description("Hook handler \u2014 evaluates a tool call
       } catch (err) {
         const tempConfig = getConfig();
         if (process.env.NODE9_DEBUG === "1" || tempConfig.settings.enableHookLogDebug) {
-          const logPath = import_path5.default.join(import_os5.default.homedir(), ".node9", "hook-debug.log");
+          const logPath = import_path6.default.join(import_os5.default.homedir(), ".node9", "hook-debug.log");
           const errMsg = err instanceof Error ? err.message : String(err);
           import_fs5.default.appendFileSync(
             logPath,
@@ -4156,9 +4330,9 @@ RAW: ${raw}
       }
       const config = getConfig();
       if (process.env.NODE9_DEBUG === "1" || config.settings.enableHookLogDebug) {
-        const logPath = import_path5.default.join(import_os5.default.homedir(), ".node9", "hook-debug.log");
-        if (!import_fs5.default.existsSync(import_path5.default.dirname(logPath)))
-          import_fs5.default.mkdirSync(import_path5.default.dirname(logPath), { recursive: true });
+        const logPath = import_path6.default.join(import_os5.default.homedir(), ".node9", "hook-debug.log");
+        if (!import_fs5.default.existsSync(import_path6.default.dirname(logPath)))
+          import_fs5.default.mkdirSync(import_path6.default.dirname(logPath), { recursive: true });
         import_fs5.default.appendFileSync(logPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] STDIN: ${raw}
 `);
       }
@@ -4196,16 +4370,7 @@ RAW: ${raw}
         return;
       }
       const meta = { agent, mcpServer };
-      const STATE_CHANGING_TOOLS_PRE = [
-        "write_file",
-        "edit_file",
-        "edit",
-        "replace",
-        "terminal.execute",
-        "str_replace_based_edit_tool",
-        "create_file"
-      ];
-      if (config.settings.enableUndo && STATE_CHANGING_TOOLS_PRE.includes(toolName.toLowerCase())) {
+      if (shouldSnapshot(toolName, toolInput, config)) {
         await createShadowSnapshot(toolName, toolInput);
       }
       const result = await authorizeHeadless(toolName, toolInput, false, meta);
@@ -4239,7 +4404,7 @@ RAW: ${raw}
       });
     } catch (err) {
       if (process.env.NODE9_DEBUG === "1") {
-        const logPath = import_path5.default.join(import_os5.default.homedir(), ".node9", "hook-debug.log");
+        const logPath = import_path6.default.join(import_os5.default.homedir(), ".node9", "hook-debug.log");
         const errMsg = err instanceof Error ? err.message : String(err);
         import_fs5.default.appendFileSync(logPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] ERROR: ${errMsg}
 `);
@@ -4286,20 +4451,12 @@ program.command("log").description("PostToolUse hook \u2014 records executed too
         decision: "allowed",
         source: "post-hook"
       };
-      const logPath = import_path5.default.join(import_os5.default.homedir(), ".node9", "audit.log");
-      if (!import_fs5.default.existsSync(import_path5.default.dirname(logPath)))
-        import_fs5.default.mkdirSync(import_path5.default.dirname(logPath), { recursive: true });
+      const logPath = import_path6.default.join(import_os5.default.homedir(), ".node9", "audit.log");
+      if (!import_fs5.default.existsSync(import_path6.default.dirname(logPath)))
+        import_fs5.default.mkdirSync(import_path6.default.dirname(logPath), { recursive: true });
       import_fs5.default.appendFileSync(logPath, JSON.stringify(entry) + "\n");
       const config = getConfig();
-      const STATE_CHANGING_TOOLS = [
-        "bash",
-        "shell",
-        "write_file",
-        "edit_file",
-        "replace",
-        "terminal.execute"
-      ];
-      if (config.settings.enableUndo && STATE_CHANGING_TOOLS.includes(tool.toLowerCase())) {
+      if (shouldSnapshot(tool, {}, config)) {
         await createShadowSnapshot();
       }
     } catch {
@@ -4471,7 +4628,7 @@ process.on("unhandledRejection", (reason) => {
   const isCheckHook = process.argv[2] === "check";
   if (isCheckHook) {
     if (process.env.NODE9_DEBUG === "1" || getConfig().settings.enableHookLogDebug) {
-      const logPath = import_path5.default.join(import_os5.default.homedir(), ".node9", "hook-debug.log");
+      const logPath = import_path6.default.join(import_os5.default.homedir(), ".node9", "hook-debug.log");
       const msg = reason instanceof Error ? reason.message : String(reason);
       import_fs5.default.appendFileSync(logPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] UNHANDLED: ${msg}
 `);