@node9/proxy 1.10.1 → 1.10.2

package/dist/cli.js

@@ -2457,19 +2457,44 @@ function getInternalToken() {
 function isDaemonRunning() {
   const pidFile = import_path10.default.join(import_os8.default.homedir(), ".node9", "daemon.pid");
   if (import_fs9.default.existsSync(pidFile)) {
+    let pid;
+    let port;
     try {
-      const { pid, port } = JSON.parse(import_fs9.default.readFileSync(pidFile, "utf-8"));
-      if (port !== DAEMON_PORT) return false;
-      process.kill(pid, 0);
-      return true;
+      const data = JSON.parse(import_fs9.default.readFileSync(pidFile, "utf-8"));
+      pid = data.pid;
+      port = data.port;
     } catch {
       return false;
     }
+    if (port !== DAEMON_PORT) {
+      return false;
+    }
+    const MAX_PID = 4194304;
+    if (typeof pid !== "number" || !Number.isInteger(pid) || pid <= 0 || pid > MAX_PID) {
+      return false;
+    }
+    try {
+      process.kill(pid, 0);
+    } catch (err2) {
+      if (err2 instanceof Error && "code" in err2 && err2.code === "ESRCH") {
+        try {
+          import_fs9.default.unlinkSync(pidFile);
+        } catch {
+        }
+      }
+      return false;
+    }
+    const r = (0, import_child_process.spawnSync)("ss", ["-Htnp", `sport = :${DAEMON_PORT}`], {
+      encoding: "utf8",
+      timeout: 300
+    });
+    if (r.status === 0 && (r.stdout ?? "").includes(`:${DAEMON_PORT}`)) return true;
+    return false;
   }
   try {
     const r = (0, import_child_process.spawnSync)("ss", ["-Htnp", `sport = :${DAEMON_PORT}`], {
       encoding: "utf8",
-      timeout: 500
+      timeout: 300
     });
     return r.status === 0 && (r.stdout ?? "").includes(`:${DAEMON_PORT}`);
   } catch {
@@ -9334,10 +9359,10 @@ RAW: ${raw}
             if (typeof scriptPath !== "string" || !import_path22.default.isAbsolute(scriptPath))
               throw new Error("node9: argv[1] is not an absolute path");
             const resolvedScript = import_fs20.default.realpathSync(scriptPath);
-            const expectedCli = import_fs20.default.realpathSync(import_path22.default.resolve(__dirname, "../../cli.js"));
-            if (resolvedScript !== expectedCli)
+            const packageDist = import_fs20.default.realpathSync(import_path22.default.resolve(__dirname, "../.."));
+            if (!resolvedScript.startsWith(packageDist + import_path22.default.sep) && resolvedScript !== packageDist)
               throw new Error(
-                "node9: daemon spawn aborted \u2014 argv[1] does not resolve to the node9 CLI"
+                `node9: daemon spawn aborted \u2014 argv[1] (${resolvedScript}) is outside package dist (${packageDist})`
               );
             const safeEnv = { ...process.env };
             for (const key of [
@@ -9356,7 +9381,17 @@ RAW: ${raw}
               env: { ...safeEnv, NODE9_AUTO_STARTED: "1", NODE9_BROWSER_OPENED: "1" }
             });
             d.unref();
-          } catch {
+          } catch (spawnErr) {
+            const logPath = import_path22.default.join(import_os16.default.homedir(), ".node9", "hook-debug.log");
+            const msg = spawnErr instanceof Error ? spawnErr.message : String(spawnErr);
+            try {
+              import_fs20.default.appendFileSync(
+                logPath,
+                `[${(/* @__PURE__ */ new Date()).toISOString()}] daemon-autostart-failed: ${msg}
+`
+              );
+            } catch {
+            }
           }
         }
         if (process.env.NODE9_DEBUG === "1" || config.settings.enableHookLogDebug) {

package/dist/cli.mjs

@@ -2440,19 +2440,44 @@ function getInternalToken() {
 function isDaemonRunning() {
   const pidFile = path10.join(os8.homedir(), ".node9", "daemon.pid");
   if (fs9.existsSync(pidFile)) {
+    let pid;
+    let port;
     try {
-      const { pid, port } = JSON.parse(fs9.readFileSync(pidFile, "utf-8"));
-      if (port !== DAEMON_PORT) return false;
-      process.kill(pid, 0);
-      return true;
+      const data = JSON.parse(fs9.readFileSync(pidFile, "utf-8"));
+      pid = data.pid;
+      port = data.port;
     } catch {
       return false;
     }
+    if (port !== DAEMON_PORT) {
+      return false;
+    }
+    const MAX_PID = 4194304;
+    if (typeof pid !== "number" || !Number.isInteger(pid) || pid <= 0 || pid > MAX_PID) {
+      return false;
+    }
+    try {
+      process.kill(pid, 0);
+    } catch (err2) {
+      if (err2 instanceof Error && "code" in err2 && err2.code === "ESRCH") {
+        try {
+          fs9.unlinkSync(pidFile);
+        } catch {
+        }
+      }
+      return false;
+    }
+    const r = spawnSync("ss", ["-Htnp", `sport = :${DAEMON_PORT}`], {
+      encoding: "utf8",
+      timeout: 300
+    });
+    if (r.status === 0 && (r.stdout ?? "").includes(`:${DAEMON_PORT}`)) return true;
+    return false;
   }
   try {
     const r = spawnSync("ss", ["-Htnp", `sport = :${DAEMON_PORT}`], {
       encoding: "utf8",
-      timeout: 500
+      timeout: 300
     });
     return r.status === 0 && (r.stdout ?? "").includes(`:${DAEMON_PORT}`);
   } catch {
@@ -9309,10 +9334,10 @@ RAW: ${raw}
             if (typeof scriptPath !== "string" || !path22.isAbsolute(scriptPath))
               throw new Error("node9: argv[1] is not an absolute path");
             const resolvedScript = fs20.realpathSync(scriptPath);
-            const expectedCli = fs20.realpathSync(path22.resolve(__dirname, "../../cli.js"));
-            if (resolvedScript !== expectedCli)
+            const packageDist = fs20.realpathSync(path22.resolve(__dirname, "../.."));
+            if (!resolvedScript.startsWith(packageDist + path22.sep) && resolvedScript !== packageDist)
               throw new Error(
-                "node9: daemon spawn aborted \u2014 argv[1] does not resolve to the node9 CLI"
+                `node9: daemon spawn aborted \u2014 argv[1] (${resolvedScript}) is outside package dist (${packageDist})`
               );
             const safeEnv = { ...process.env };
             for (const key of [
@@ -9331,7 +9356,17 @@ RAW: ${raw}
               env: { ...safeEnv, NODE9_AUTO_STARTED: "1", NODE9_BROWSER_OPENED: "1" }
             });
             d.unref();
-          } catch {
+          } catch (spawnErr) {
+            const logPath = path22.join(os16.homedir(), ".node9", "hook-debug.log");
+            const msg = spawnErr instanceof Error ? spawnErr.message : String(spawnErr);
+            try {
+              fs20.appendFileSync(
+                logPath,
+                `[${(/* @__PURE__ */ new Date()).toISOString()}] daemon-autostart-failed: ${msg}
+`
+              );
+            } catch {
+            }
           }
         }
         if (process.env.NODE9_DEBUG === "1" || config.settings.enableHookLogDebug) {

package/dist/index.js

@@ -1990,19 +1990,44 @@ function getInternalToken() {
 function isDaemonRunning() {
   const pidFile = import_path10.default.join(import_os7.default.homedir(), ".node9", "daemon.pid");
   if (import_fs8.default.existsSync(pidFile)) {
+    let pid;
+    let port;
     try {
-      const { pid, port } = JSON.parse(import_fs8.default.readFileSync(pidFile, "utf-8"));
-      if (port !== DAEMON_PORT) return false;
-      process.kill(pid, 0);
-      return true;
+      const data = JSON.parse(import_fs8.default.readFileSync(pidFile, "utf-8"));
+      pid = data.pid;
+      port = data.port;
     } catch {
       return false;
     }
+    if (port !== DAEMON_PORT) {
+      return false;
+    }
+    const MAX_PID = 4194304;
+    if (typeof pid !== "number" || !Number.isInteger(pid) || pid <= 0 || pid > MAX_PID) {
+      return false;
+    }
+    try {
+      process.kill(pid, 0);
+    } catch (err) {
+      if (err instanceof Error && "code" in err && err.code === "ESRCH") {
+        try {
+          import_fs8.default.unlinkSync(pidFile);
+        } catch {
+        }
+      }
+      return false;
+    }
+    const r = (0, import_child_process.spawnSync)("ss", ["-Htnp", `sport = :${DAEMON_PORT}`], {
+      encoding: "utf8",
+      timeout: 300
+    });
+    if (r.status === 0 && (r.stdout ?? "").includes(`:${DAEMON_PORT}`)) return true;
+    return false;
   }
   try {
     const r = (0, import_child_process.spawnSync)("ss", ["-Htnp", `sport = :${DAEMON_PORT}`], {
       encoding: "utf8",
-      timeout: 500
+      timeout: 300
     });
     return r.status === 0 && (r.stdout ?? "").includes(`:${DAEMON_PORT}`);
   } catch {

package/dist/index.mjs

@@ -1960,19 +1960,44 @@ function getInternalToken() {
 function isDaemonRunning() {
   const pidFile = path10.join(os7.homedir(), ".node9", "daemon.pid");
   if (fs8.existsSync(pidFile)) {
+    let pid;
+    let port;
     try {
-      const { pid, port } = JSON.parse(fs8.readFileSync(pidFile, "utf-8"));
-      if (port !== DAEMON_PORT) return false;
-      process.kill(pid, 0);
-      return true;
+      const data = JSON.parse(fs8.readFileSync(pidFile, "utf-8"));
+      pid = data.pid;
+      port = data.port;
     } catch {
       return false;
     }
+    if (port !== DAEMON_PORT) {
+      return false;
+    }
+    const MAX_PID = 4194304;
+    if (typeof pid !== "number" || !Number.isInteger(pid) || pid <= 0 || pid > MAX_PID) {
+      return false;
+    }
+    try {
+      process.kill(pid, 0);
+    } catch (err) {
+      if (err instanceof Error && "code" in err && err.code === "ESRCH") {
+        try {
+          fs8.unlinkSync(pidFile);
+        } catch {
+        }
+      }
+      return false;
+    }
+    const r = spawnSync("ss", ["-Htnp", `sport = :${DAEMON_PORT}`], {
+      encoding: "utf8",
+      timeout: 300
+    });
+    if (r.status === 0 && (r.stdout ?? "").includes(`:${DAEMON_PORT}`)) return true;
+    return false;
   }
   try {
     const r = spawnSync("ss", ["-Htnp", `sport = :${DAEMON_PORT}`], {
       encoding: "utf8",
-      timeout: 500
+      timeout: 300
     });
     return r.status === 0 && (r.stdout ?? "").includes(`:${DAEMON_PORT}`);
   } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.10.1",
+  "version": "1.10.2",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code & MCP.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",