@node9/proxy 1.11.13 → 1.12.1

package/dist/index.js

@@ -2159,7 +2159,12 @@ async function evaluatePolicy(toolName, args, agent, cwd) {
     pathTokens = analyzed.paths;
     const INLINE_EXEC_PATTERN = /^(python3?|bash|sh|zsh|perl|ruby|node|php|lua)\s+(-c|-e|-eval)\s/i;
     if (INLINE_EXEC_PATTERN.test(shellCommand.trim())) {
-      return { decision: "review", blockedByLabel: "Node9 Standard (Inline Execution)", tier: 3 };
+      return {
+        decision: "review",
+        blockedByLabel: "Node9 Standard (Inline Execution)",
+        ruleDescription: "The AI is running code directly from the command line. Review the full script below before allowing it to execute.",
+        tier: 3
+      };
     }
     const evalVerdict = detectDangerousShellExec(shellCommand);
     if (evalVerdict === "block") {
@@ -2167,6 +2172,7 @@ async function evaluatePolicy(toolName, args, agent, cwd) {
         decision: "block",
         blockedByLabel: "Node9: Eval Remote Execution",
         reason: "eval of remote download (curl/wget) is a near-certain supply-chain attack",
+        ruleDescription: "The AI is downloading a script from the internet and running it immediately without inspection. This is a common way malware gets installed.",
         tier: 3
       };
     }
@@ -2175,6 +2181,7 @@ async function evaluatePolicy(toolName, args, agent, cwd) {
         decision: "review",
         blockedByLabel: "Node9: Eval Dynamic Content",
         reason: "eval of dynamic content (variable or subshell expansion) requires approval",
+        ruleDescription: "The AI is running a command that includes a variable or subshell expansion. The actual command executed at runtime may differ from what is shown here.",
         tier: 3
       };
     }
@@ -2304,6 +2311,7 @@ async function evaluatePolicy(toolName, args, agent, cwd) {
       blockedByLabel: `Project/Global Config \u2014 dangerous word: "${matchedDangerousWord}"`,
       matchedWord: matchedDangerousWord,
       matchedField,
+      ruleDescription: `This command contains a flagged keyword ("${matchedDangerousWord}") from your node9 config. Review it before allowing.`,
       tier: 6
     };
   }

package/dist/index.mjs

@@ -2129,7 +2129,12 @@ async function evaluatePolicy(toolName, args, agent, cwd) {
     pathTokens = analyzed.paths;
     const INLINE_EXEC_PATTERN = /^(python3?|bash|sh|zsh|perl|ruby|node|php|lua)\s+(-c|-e|-eval)\s/i;
     if (INLINE_EXEC_PATTERN.test(shellCommand.trim())) {
-      return { decision: "review", blockedByLabel: "Node9 Standard (Inline Execution)", tier: 3 };
+      return {
+        decision: "review",
+        blockedByLabel: "Node9 Standard (Inline Execution)",
+        ruleDescription: "The AI is running code directly from the command line. Review the full script below before allowing it to execute.",
+        tier: 3
+      };
     }
     const evalVerdict = detectDangerousShellExec(shellCommand);
     if (evalVerdict === "block") {
@@ -2137,6 +2142,7 @@ async function evaluatePolicy(toolName, args, agent, cwd) {
         decision: "block",
         blockedByLabel: "Node9: Eval Remote Execution",
         reason: "eval of remote download (curl/wget) is a near-certain supply-chain attack",
+        ruleDescription: "The AI is downloading a script from the internet and running it immediately without inspection. This is a common way malware gets installed.",
         tier: 3
       };
     }
@@ -2145,6 +2151,7 @@ async function evaluatePolicy(toolName, args, agent, cwd) {
         decision: "review",
         blockedByLabel: "Node9: Eval Dynamic Content",
         reason: "eval of dynamic content (variable or subshell expansion) requires approval",
+        ruleDescription: "The AI is running a command that includes a variable or subshell expansion. The actual command executed at runtime may differ from what is shown here.",
         tier: 3
       };
     }
@@ -2274,6 +2281,7 @@ async function evaluatePolicy(toolName, args, agent, cwd) {
       blockedByLabel: `Project/Global Config \u2014 dangerous word: "${matchedDangerousWord}"`,
       matchedWord: matchedDangerousWord,
       matchedField,
+      ruleDescription: `This command contains a flagged keyword ("${matchedDangerousWord}") from your node9 config. Review it before allowing.`,
       tier: 6
     };
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.11.13",
+  "version": "1.12.1",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code & MCP.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",