@node9/proxy 1.11.6 → 1.11.8

package/dist/cli.js

@@ -2927,12 +2927,12 @@ function notifyActivitySocket(data) {
       const payload = JSON.stringify(data);
       const sock = import_net.default.createConnection(ACTIVITY_SOCKET_PATH);
       sock.on("connect", () => {
-        sock.on("close", resolve);
+        sock.on("close", () => resolve(true));
         sock.end(payload);
       });
-      sock.on("error", resolve);
+      sock.on("error", () => resolve(false));
     } catch {
-      resolve();
+      resolve(false);
     }
   });
 }
@@ -3007,7 +3007,7 @@ function isDaemonRunning() {
     return false;
   }
 }
-async function registerDaemonEntry(toolName, args, meta, riskMetadata, activityId, cwd, recoveryCommand, skipBackgroundAuth, viewOnly, localSmartRuleMatched) {
+async function registerDaemonEntry(toolName, args, meta, riskMetadata, activityId, cwd, recoveryCommand, skipBackgroundAuth, viewOnly, localSmartRuleMatched, socketActivitySent) {
   const base = `http://${DAEMON_HOST}:${DAEMON_PORT}`;
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), 5e3);
@@ -3020,7 +3020,10 @@ async function registerDaemonEntry(toolName, args, meta, riskMetadata, activityI
         args,
         agent: meta?.agent,
         mcpServer: meta?.mcpServer,
-        fromCLI: true,
+        // fromCLI=true tells the daemon the CLI already sent the activity event via
+        // socket. If the socket send failed (socketActivitySent=false), set fromCLI=false
+        // so the daemon emits the activity event itself — tail never misses an entry.
+        fromCLI: socketActivitySent !== false,
         // Pass the flight-recorder ID so the daemon uses the same UUID for
         // activity-result as the CLI used for the pending activity event.
         activityId,
@@ -3750,7 +3753,7 @@ async function authorizeHeadless(toolName, args, meta, options) {
   if (!options?.calledFromDaemon) {
     const actId = (0, import_crypto4.randomUUID)();
     const actTs = Date.now();
-    await notifyActivity({
+    const socketOk = await notifyActivity({
       id: actId,
       ts: actTs,
       tool: toolName,
@@ -3762,7 +3765,10 @@ async function authorizeHeadless(toolName, args, meta, options) {
     });
     const result = await _authorizeHeadlessCore(toolName, args, meta, {
       ...options,
-      activityId: actId
+      activityId: actId,
+      // If socket send failed, tell the daemon NOT to assume we already sent the
+      // activity event — it must emit it itself so tail never misses an entry.
+      socketActivitySent: socketOk
     });
     if (!result.noApprovalMechanism) {
       await notifyActivity({
@@ -4088,7 +4094,8 @@ async function _authorizeHeadlessCore(toolName, args, meta, options) {
           statefulRecoveryCommand,
           void 0,
           void 0,
-          localSmartRuleMatched || options?.localSmartRuleMatched
+          localSmartRuleMatched || options?.localSmartRuleMatched,
+          options?.socketActivitySent
         );
         daemonEntryId = entry.id;
         daemonAllowCount = entry.allowCount;

package/dist/cli.mjs

@@ -2910,12 +2910,12 @@ function notifyActivitySocket(data) {
       const payload = JSON.stringify(data);
       const sock = net.createConnection(ACTIVITY_SOCKET_PATH);
       sock.on("connect", () => {
-        sock.on("close", resolve);
+        sock.on("close", () => resolve(true));
         sock.end(payload);
       });
-      sock.on("error", resolve);
+      sock.on("error", () => resolve(false));
     } catch {
-      resolve();
+      resolve(false);
     }
   });
 }
@@ -2990,7 +2990,7 @@ function isDaemonRunning() {
     return false;
   }
 }
-async function registerDaemonEntry(toolName, args, meta, riskMetadata, activityId, cwd, recoveryCommand, skipBackgroundAuth, viewOnly, localSmartRuleMatched) {
+async function registerDaemonEntry(toolName, args, meta, riskMetadata, activityId, cwd, recoveryCommand, skipBackgroundAuth, viewOnly, localSmartRuleMatched, socketActivitySent) {
   const base = `http://${DAEMON_HOST}:${DAEMON_PORT}`;
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), 5e3);
@@ -3003,7 +3003,10 @@ async function registerDaemonEntry(toolName, args, meta, riskMetadata, activityI
         args,
         agent: meta?.agent,
         mcpServer: meta?.mcpServer,
-        fromCLI: true,
+        // fromCLI=true tells the daemon the CLI already sent the activity event via
+        // socket. If the socket send failed (socketActivitySent=false), set fromCLI=false
+        // so the daemon emits the activity event itself — tail never misses an entry.
+        fromCLI: socketActivitySent !== false,
         // Pass the flight-recorder ID so the daemon uses the same UUID for
         // activity-result as the CLI used for the pending activity event.
         activityId,
@@ -3728,7 +3731,7 @@ async function authorizeHeadless(toolName, args, meta, options) {
   if (!options?.calledFromDaemon) {
     const actId = randomUUID();
     const actTs = Date.now();
-    await notifyActivity({
+    const socketOk = await notifyActivity({
       id: actId,
       ts: actTs,
       tool: toolName,
@@ -3740,7 +3743,10 @@ async function authorizeHeadless(toolName, args, meta, options) {
     });
     const result = await _authorizeHeadlessCore(toolName, args, meta, {
       ...options,
-      activityId: actId
+      activityId: actId,
+      // If socket send failed, tell the daemon NOT to assume we already sent the
+      // activity event — it must emit it itself so tail never misses an entry.
+      socketActivitySent: socketOk
     });
     if (!result.noApprovalMechanism) {
       await notifyActivity({
@@ -4066,7 +4072,8 @@ async function _authorizeHeadlessCore(toolName, args, meta, options) {
           statefulRecoveryCommand,
           void 0,
           void 0,
-          localSmartRuleMatched || options?.localSmartRuleMatched
+          localSmartRuleMatched || options?.localSmartRuleMatched,
+          options?.socketActivitySent
         );
         daemonEntryId = entry.id;
         daemonAllowCount = entry.allowCount;

package/dist/index.js

@@ -2419,12 +2419,12 @@ function notifyActivitySocket(data) {
       const payload = JSON.stringify(data);
       const sock = import_net.default.createConnection(ACTIVITY_SOCKET_PATH);
       sock.on("connect", () => {
-        sock.on("close", resolve);
+        sock.on("close", () => resolve(true));
         sock.end(payload);
       });
-      sock.on("error", resolve);
+      sock.on("error", () => resolve(false));
     } catch {
-      resolve();
+      resolve(false);
     }
   });
 }
@@ -2501,7 +2501,7 @@ function isDaemonRunning() {
     return false;
   }
 }
-async function registerDaemonEntry(toolName, args, meta, riskMetadata, activityId, cwd, recoveryCommand, skipBackgroundAuth, viewOnly, localSmartRuleMatched) {
+async function registerDaemonEntry(toolName, args, meta, riskMetadata, activityId, cwd, recoveryCommand, skipBackgroundAuth, viewOnly, localSmartRuleMatched, socketActivitySent) {
   const base = `http://${DAEMON_HOST}:${DAEMON_PORT}`;
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), 5e3);
@@ -2514,7 +2514,10 @@ async function registerDaemonEntry(toolName, args, meta, riskMetadata, activityI
         args,
         agent: meta?.agent,
         mcpServer: meta?.mcpServer,
-        fromCLI: true,
+        // fromCLI=true tells the daemon the CLI already sent the activity event via
+        // socket. If the socket send failed (socketActivitySent=false), set fromCLI=false
+        // so the daemon emits the activity event itself — tail never misses an entry.
+        fromCLI: socketActivitySent !== false,
         // Pass the flight-recorder ID so the daemon uses the same UUID for
         // activity-result as the CLI used for the pending activity event.
         activityId,
@@ -3195,7 +3198,7 @@ async function authorizeHeadless(toolName, args, meta, options) {
   if (!options?.calledFromDaemon) {
     const actId = (0, import_crypto3.randomUUID)();
     const actTs = Date.now();
-    await notifyActivity({
+    const socketOk = await notifyActivity({
       id: actId,
       ts: actTs,
       tool: toolName,
@@ -3207,7 +3210,10 @@ async function authorizeHeadless(toolName, args, meta, options) {
     });
     const result = await _authorizeHeadlessCore(toolName, args, meta, {
       ...options,
-      activityId: actId
+      activityId: actId,
+      // If socket send failed, tell the daemon NOT to assume we already sent the
+      // activity event — it must emit it itself so tail never misses an entry.
+      socketActivitySent: socketOk
     });
     if (!result.noApprovalMechanism) {
       await notifyActivity({
@@ -3533,7 +3539,8 @@ async function _authorizeHeadlessCore(toolName, args, meta, options) {
           statefulRecoveryCommand,
           void 0,
           void 0,
-          localSmartRuleMatched || options?.localSmartRuleMatched
+          localSmartRuleMatched || options?.localSmartRuleMatched,
+          options?.socketActivitySent
         );
         daemonEntryId = entry.id;
         daemonAllowCount = entry.allowCount;

package/dist/index.mjs

@@ -2389,12 +2389,12 @@ function notifyActivitySocket(data) {
       const payload = JSON.stringify(data);
       const sock = net.createConnection(ACTIVITY_SOCKET_PATH);
       sock.on("connect", () => {
-        sock.on("close", resolve);
+        sock.on("close", () => resolve(true));
         sock.end(payload);
       });
-      sock.on("error", resolve);
+      sock.on("error", () => resolve(false));
     } catch {
-      resolve();
+      resolve(false);
     }
   });
 }
@@ -2471,7 +2471,7 @@ function isDaemonRunning() {
     return false;
   }
 }
-async function registerDaemonEntry(toolName, args, meta, riskMetadata, activityId, cwd, recoveryCommand, skipBackgroundAuth, viewOnly, localSmartRuleMatched) {
+async function registerDaemonEntry(toolName, args, meta, riskMetadata, activityId, cwd, recoveryCommand, skipBackgroundAuth, viewOnly, localSmartRuleMatched, socketActivitySent) {
   const base = `http://${DAEMON_HOST}:${DAEMON_PORT}`;
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), 5e3);
@@ -2484,7 +2484,10 @@ async function registerDaemonEntry(toolName, args, meta, riskMetadata, activityI
         args,
         agent: meta?.agent,
         mcpServer: meta?.mcpServer,
-        fromCLI: true,
+        // fromCLI=true tells the daemon the CLI already sent the activity event via
+        // socket. If the socket send failed (socketActivitySent=false), set fromCLI=false
+        // so the daemon emits the activity event itself — tail never misses an entry.
+        fromCLI: socketActivitySent !== false,
         // Pass the flight-recorder ID so the daemon uses the same UUID for
         // activity-result as the CLI used for the pending activity event.
         activityId,
@@ -3165,7 +3168,7 @@ async function authorizeHeadless(toolName, args, meta, options) {
   if (!options?.calledFromDaemon) {
     const actId = randomUUID();
     const actTs = Date.now();
-    await notifyActivity({
+    const socketOk = await notifyActivity({
       id: actId,
       ts: actTs,
       tool: toolName,
@@ -3177,7 +3180,10 @@ async function authorizeHeadless(toolName, args, meta, options) {
     });
     const result = await _authorizeHeadlessCore(toolName, args, meta, {
       ...options,
-      activityId: actId
+      activityId: actId,
+      // If socket send failed, tell the daemon NOT to assume we already sent the
+      // activity event — it must emit it itself so tail never misses an entry.
+      socketActivitySent: socketOk
     });
     if (!result.noApprovalMechanism) {
       await notifyActivity({
@@ -3503,7 +3509,8 @@ async function _authorizeHeadlessCore(toolName, args, meta, options) {
           statefulRecoveryCommand,
           void 0,
           void 0,
-          localSmartRuleMatched || options?.localSmartRuleMatched
+          localSmartRuleMatched || options?.localSmartRuleMatched,
+          options?.socketActivitySent
         );
         daemonEntryId = entry.id;
         daemonAllowCount = entry.allowCount;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.11.6",
+  "version": "1.11.8",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code & MCP.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",