@node9/proxy 1.24.3 → 1.26.0

package/dist/dashboard.mjs

@@ -1030,6 +1030,42 @@ var init_dist = __esm({
         regex: /\bAGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JNLH]{58}\b/,
         severity: "block",
         keywords: ["age-secret-key-"]
+      },
+      // ── Database connection strings ───────────────────────────────────────────
+      // Universal <scheme>://[user]:<password>@<host> shape. Covers the gap
+      // vendor-prefix patterns (AWS / GitHub / Stripe / …) leave open. Matches
+      // the whole URL so maskSecret produces `<scheme>...:****@...<host>` —
+      // the password value never appears in the redacted sample.
+      //
+      // Schemes covered: redis, rediss (TLS), postgres, postgresql,
+      // mongodb, mongodb+srv, mysql, mariadb, amqp, amqps, kafka,
+      // clickhouse, cassandra. HTTP(S) / FTP / SSH are intentionally
+      // excluded — they're not database URLs and adding them would
+      // create false positives on every basic-auth URL in the wild.
+      //
+      // Requires `:password@` (4+ char password) so user-only URLs like
+      // `redis://user@host` don't match. Stopwords ('your', '${', '<your',
+      // 'placeholder', 'changeme', etc.) keep doc/README scans clean.
+      {
+        name: "Database Connection String",
+        regex: /\b(redis|rediss|postgres|postgresql|mongodb|mongodb\+srv|mysql|mariadb|amqp|amqps|kafka|clickhouse|cassandra):\/\/[^:/\s@]*:[^@\s]{4,}@[^\s/]+/,
+        severity: "block",
+        keywords: [
+          "redis://",
+          "rediss://",
+          "postgres://",
+          "postgresql://",
+          "mongodb://",
+          "mongodb+srv://",
+          "mysql://",
+          "mariadb://",
+          "amqp://",
+          "amqps://",
+          "kafka://",
+          "clickhouse://",
+          "cassandra://"
+        ],
+        minEntropy: 3
       }
     ];
     DLP_PATTERNS_GLOBAL = DLP_PATTERNS.map(
@@ -1132,7 +1168,7 @@ var init_dist = __esm({
       },
       {
         // Mirrors the JSON shield's `.env` pattern (project-jail.json's
-        // review-read-env-any-tool) so the AST FS-op path catches the
+        // block-read-env-any-tool) so the AST FS-op path catches the
         // same set the regex shield does — including Next.js / Vite's
         // `.env.<env>.local` double-suffix overrides which are commonly
         // gitignored AND commonly contain real secrets.
@@ -1742,7 +1778,7 @@ var init_dist = __esm({
             {
               field: "command",
               op: "matches",
-              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.ssh[\\/\\\\]",
+              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.ssh[\\/\\\\]",
               flags: "i"
             }
           ],
@@ -1756,7 +1792,7 @@ var init_dist = __esm({
             {
               field: "command",
               op: "matches",
-              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.aws[\\/\\\\]",
+              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.aws[\\/\\\\]",
               flags: "i"
             }
           ],
@@ -1770,7 +1806,7 @@ var init_dist = __esm({
             {
               field: "command",
               op: "matches",
-              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*\\.env(\\.local|\\.production|\\.staging)?\\b",
+              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.env(\\.(local|production|staging|development|production\\.local|staging\\.local|development\\.local))?(?=\\s|$|[;&|>)<])",
               flags: "i"
             }
           ],
@@ -1784,7 +1820,7 @@ var init_dist = __esm({
             {
               field: "command",
               op: "matches",
-              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials)",
+              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials)",
               flags: "i"
             }
           ],
@@ -1820,7 +1856,7 @@ var init_dist = __esm({
           reason: "Reading AWS credentials is blocked by project-jail shield"
         },
         {
-          name: "shield:project-jail:review-read-env-any-tool",
+          name: "shield:project-jail:block-read-env-any-tool",
           tool: "*",
           conditions: [
             {
@@ -1830,8 +1866,8 @@ var init_dist = __esm({
               flags: "i"
             }
           ],
-          verdict: "review",
-          reason: "Reading .env files requires approval (project-jail shield)"
+          verdict: "block",
+          reason: "Reading .env files is blocked by project-jail shield"
         },
         {
           name: "shield:project-jail:review-read-credentials-any-tool",
@@ -3340,6 +3376,13 @@ var init_mcp_pin = __esm({
   }
 });
 
+// src/setup-opencode-shim.ts
+var init_setup_opencode_shim = __esm({
+  "src/setup-opencode-shim.ts"() {
+    "use strict";
+  }
+});
+
 // src/setup.ts
 import chalk2 from "chalk";
 import { confirm } from "@inquirer/prompts";
@@ -3348,6 +3391,7 @@ var init_setup = __esm({
   "src/setup.ts"() {
     "use strict";
     init_mcp_pin();
+    init_setup_opencode_shim();
   }
 });
 

package/dist/index.js

@@ -739,6 +739,42 @@ var DLP_PATTERNS = [
     regex: /\bAGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JNLH]{58}\b/,
     severity: "block",
     keywords: ["age-secret-key-"]
+  },
+  // ── Database connection strings ───────────────────────────────────────────
+  // Universal <scheme>://[user]:<password>@<host> shape. Covers the gap
+  // vendor-prefix patterns (AWS / GitHub / Stripe / …) leave open. Matches
+  // the whole URL so maskSecret produces `<scheme>...:****@...<host>` —
+  // the password value never appears in the redacted sample.
+  //
+  // Schemes covered: redis, rediss (TLS), postgres, postgresql,
+  // mongodb, mongodb+srv, mysql, mariadb, amqp, amqps, kafka,
+  // clickhouse, cassandra. HTTP(S) / FTP / SSH are intentionally
+  // excluded — they're not database URLs and adding them would
+  // create false positives on every basic-auth URL in the wild.
+  //
+  // Requires `:password@` (4+ char password) so user-only URLs like
+  // `redis://user@host` don't match. Stopwords ('your', '${', '<your',
+  // 'placeholder', 'changeme', etc.) keep doc/README scans clean.
+  {
+    name: "Database Connection String",
+    regex: /\b(redis|rediss|postgres|postgresql|mongodb|mongodb\+srv|mysql|mariadb|amqp|amqps|kafka|clickhouse|cassandra):\/\/[^:/\s@]*:[^@\s]{4,}@[^\s/]+/,
+    severity: "block",
+    keywords: [
+      "redis://",
+      "rediss://",
+      "postgres://",
+      "postgresql://",
+      "mongodb://",
+      "mongodb+srv://",
+      "mysql://",
+      "mariadb://",
+      "amqp://",
+      "amqps://",
+      "kafka://",
+      "clickhouse://",
+      "cassandra://"
+    ],
+    minEntropy: 3
   }
 ];
 var DLP_PATTERNS_GLOBAL = DLP_PATTERNS.map(
@@ -1092,7 +1128,7 @@ var SENSITIVE_PATH_RULES = [
   },
   {
     // Mirrors the JSON shield's `.env` pattern (project-jail.json's
-    // review-read-env-any-tool) so the AST FS-op path catches the
+    // block-read-env-any-tool) so the AST FS-op path catches the
     // same set the regex shield does — including Next.js / Vite's
     // `.env.<env>.local` double-suffix overrides which are commonly
     // gitignored AND commonly contain real secrets.
@@ -2554,7 +2590,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.ssh[\\/\\\\]",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.ssh[\\/\\\\]",
           flags: "i"
         }
       ],
@@ -2568,7 +2604,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.aws[\\/\\\\]",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.aws[\\/\\\\]",
           flags: "i"
         }
       ],
@@ -2582,7 +2618,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*\\.env(\\.local|\\.production|\\.staging)?\\b",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.env(\\.(local|production|staging|development|production\\.local|staging\\.local|development\\.local))?(?=\\s|$|[;&|>)<])",
           flags: "i"
         }
       ],
@@ -2596,7 +2632,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials)",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials)",
           flags: "i"
         }
       ],
@@ -2632,7 +2668,7 @@ var project_jail_default = {
       reason: "Reading AWS credentials is blocked by project-jail shield"
     },
     {
-      name: "shield:project-jail:review-read-env-any-tool",
+      name: "shield:project-jail:block-read-env-any-tool",
       tool: "*",
       conditions: [
         {
@@ -2642,8 +2678,8 @@ var project_jail_default = {
           flags: "i"
         }
       ],
-      verdict: "review",
-      reason: "Reading .env files requires approval (project-jail shield)"
+      verdict: "block",
+      reason: "Reading .env files is blocked by project-jail shield"
     },
     {
       name: "shield:project-jail:review-read-credentials-any-tool",

package/dist/index.mjs

@@ -709,6 +709,42 @@ var DLP_PATTERNS = [
     regex: /\bAGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JNLH]{58}\b/,
     severity: "block",
     keywords: ["age-secret-key-"]
+  },
+  // ── Database connection strings ───────────────────────────────────────────
+  // Universal <scheme>://[user]:<password>@<host> shape. Covers the gap
+  // vendor-prefix patterns (AWS / GitHub / Stripe / …) leave open. Matches
+  // the whole URL so maskSecret produces `<scheme>...:****@...<host>` —
+  // the password value never appears in the redacted sample.
+  //
+  // Schemes covered: redis, rediss (TLS), postgres, postgresql,
+  // mongodb, mongodb+srv, mysql, mariadb, amqp, amqps, kafka,
+  // clickhouse, cassandra. HTTP(S) / FTP / SSH are intentionally
+  // excluded — they're not database URLs and adding them would
+  // create false positives on every basic-auth URL in the wild.
+  //
+  // Requires `:password@` (4+ char password) so user-only URLs like
+  // `redis://user@host` don't match. Stopwords ('your', '${', '<your',
+  // 'placeholder', 'changeme', etc.) keep doc/README scans clean.
+  {
+    name: "Database Connection String",
+    regex: /\b(redis|rediss|postgres|postgresql|mongodb|mongodb\+srv|mysql|mariadb|amqp|amqps|kafka|clickhouse|cassandra):\/\/[^:/\s@]*:[^@\s]{4,}@[^\s/]+/,
+    severity: "block",
+    keywords: [
+      "redis://",
+      "rediss://",
+      "postgres://",
+      "postgresql://",
+      "mongodb://",
+      "mongodb+srv://",
+      "mysql://",
+      "mariadb://",
+      "amqp://",
+      "amqps://",
+      "kafka://",
+      "clickhouse://",
+      "cassandra://"
+    ],
+    minEntropy: 3
   }
 ];
 var DLP_PATTERNS_GLOBAL = DLP_PATTERNS.map(
@@ -1062,7 +1098,7 @@ var SENSITIVE_PATH_RULES = [
   },
   {
     // Mirrors the JSON shield's `.env` pattern (project-jail.json's
-    // review-read-env-any-tool) so the AST FS-op path catches the
+    // block-read-env-any-tool) so the AST FS-op path catches the
     // same set the regex shield does — including Next.js / Vite's
     // `.env.<env>.local` double-suffix overrides which are commonly
     // gitignored AND commonly contain real secrets.
@@ -2524,7 +2560,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.ssh[\\/\\\\]",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.ssh[\\/\\\\]",
           flags: "i"
         }
       ],
@@ -2538,7 +2574,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.aws[\\/\\\\]",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.aws[\\/\\\\]",
           flags: "i"
         }
       ],
@@ -2552,7 +2588,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*\\.env(\\.local|\\.production|\\.staging)?\\b",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.env(\\.(local|production|staging|development|production\\.local|staging\\.local|development\\.local))?(?=\\s|$|[;&|>)<])",
           flags: "i"
         }
       ],
@@ -2566,7 +2602,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials)",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials)",
           flags: "i"
         }
       ],
@@ -2602,7 +2638,7 @@ var project_jail_default = {
       reason: "Reading AWS credentials is blocked by project-jail shield"
     },
     {
-      name: "shield:project-jail:review-read-env-any-tool",
+      name: "shield:project-jail:block-read-env-any-tool",
       tool: "*",
       conditions: [
         {
@@ -2612,8 +2648,8 @@ var project_jail_default = {
           flags: "i"
         }
       ],
-      verdict: "review",
-      reason: "Reading .env files requires approval (project-jail shield)"
+      verdict: "block",
+      reason: "Reading .env files is blocked by project-jail shield"
     },
     {
       name: "shield:project-jail:review-read-credentials-any-tool",

package/dist/scan-ink.mjs

@@ -729,6 +729,42 @@ var DLP_PATTERNS = [
     regex: /\bAGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JNLH]{58}\b/,
     severity: "block",
     keywords: ["age-secret-key-"]
+  },
+  // ── Database connection strings ───────────────────────────────────────────
+  // Universal <scheme>://[user]:<password>@<host> shape. Covers the gap
+  // vendor-prefix patterns (AWS / GitHub / Stripe / …) leave open. Matches
+  // the whole URL so maskSecret produces `<scheme>...:****@...<host>` —
+  // the password value never appears in the redacted sample.
+  //
+  // Schemes covered: redis, rediss (TLS), postgres, postgresql,
+  // mongodb, mongodb+srv, mysql, mariadb, amqp, amqps, kafka,
+  // clickhouse, cassandra. HTTP(S) / FTP / SSH are intentionally
+  // excluded — they're not database URLs and adding them would
+  // create false positives on every basic-auth URL in the wild.
+  //
+  // Requires `:password@` (4+ char password) so user-only URLs like
+  // `redis://user@host` don't match. Stopwords ('your', '${', '<your',
+  // 'placeholder', 'changeme', etc.) keep doc/README scans clean.
+  {
+    name: "Database Connection String",
+    regex: /\b(redis|rediss|postgres|postgresql|mongodb|mongodb\+srv|mysql|mariadb|amqp|amqps|kafka|clickhouse|cassandra):\/\/[^:/\s@]*:[^@\s]{4,}@[^\s/]+/,
+    severity: "block",
+    keywords: [
+      "redis://",
+      "rediss://",
+      "postgres://",
+      "postgresql://",
+      "mongodb://",
+      "mongodb+srv://",
+      "mysql://",
+      "mariadb://",
+      "amqp://",
+      "amqps://",
+      "kafka://",
+      "clickhouse://",
+      "cassandra://"
+    ],
+    minEntropy: 3
   }
 ];
 var DLP_PATTERNS_GLOBAL = DLP_PATTERNS.map(
@@ -1333,7 +1369,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.ssh[\\/\\\\]",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.ssh[\\/\\\\]",
           flags: "i"
         }
       ],
@@ -1347,7 +1383,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.aws[\\/\\\\]",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.aws[\\/\\\\]",
           flags: "i"
         }
       ],
@@ -1361,7 +1397,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*\\.env(\\.local|\\.production|\\.staging)?\\b",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.env(\\.(local|production|staging|development|production\\.local|staging\\.local|development\\.local))?(?=\\s|$|[;&|>)<])",
           flags: "i"
         }
       ],
@@ -1375,7 +1411,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials)",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials)",
           flags: "i"
         }
       ],
@@ -1411,7 +1447,7 @@ var project_jail_default = {
       reason: "Reading AWS credentials is blocked by project-jail shield"
     },
     {
-      name: "shield:project-jail:review-read-env-any-tool",
+      name: "shield:project-jail:block-read-env-any-tool",
       tool: "*",
       conditions: [
         {
@@ -1421,8 +1457,8 @@ var project_jail_default = {
           flags: "i"
         }
       ],
-      verdict: "review",
-      reason: "Reading .env files requires approval (project-jail shield)"
+      verdict: "block",
+      reason: "Reading .env files is blocked by project-jail shield"
     },
     {
       name: "shield:project-jail:review-read-credentials-any-tool",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.24.3",
+  "version": "1.26.0",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code & MCP.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",