@node9/proxy 1.25.0 → 1.26.1

package/dist/cli.js

@@ -2273,6 +2273,42 @@ var init_dist = __esm({
         regex: /\bAGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JNLH]{58}\b/,
         severity: "block",
         keywords: ["age-secret-key-"]
+      },
+      // ── Database connection strings ───────────────────────────────────────────
+      // Universal <scheme>://[user]:<password>@<host> shape. Covers the gap
+      // vendor-prefix patterns (AWS / GitHub / Stripe / …) leave open. Matches
+      // the whole URL so maskSecret produces `<scheme>...:****@...<host>` —
+      // the password value never appears in the redacted sample.
+      //
+      // Schemes covered: redis, rediss (TLS), postgres, postgresql,
+      // mongodb, mongodb+srv, mysql, mariadb, amqp, amqps, kafka,
+      // clickhouse, cassandra. HTTP(S) / FTP / SSH are intentionally
+      // excluded — they're not database URLs and adding them would
+      // create false positives on every basic-auth URL in the wild.
+      //
+      // Requires `:password@` (4+ char password) so user-only URLs like
+      // `redis://user@host` don't match. Stopwords ('your', '${', '<your',
+      // 'placeholder', 'changeme', etc.) keep doc/README scans clean.
+      {
+        name: "Database Connection String",
+        regex: /\b(redis|rediss|postgres|postgresql|mongodb|mongodb\+srv|mysql|mariadb|amqp|amqps|kafka|clickhouse|cassandra):\/\/[^:/\s@]*:[^@\s]{4,}@[^\s/]+/,
+        severity: "block",
+        keywords: [
+          "redis://",
+          "rediss://",
+          "postgres://",
+          "postgresql://",
+          "mongodb://",
+          "mongodb+srv://",
+          "mysql://",
+          "mariadb://",
+          "amqp://",
+          "amqps://",
+          "kafka://",
+          "clickhouse://",
+          "cassandra://"
+        ],
+        minEntropy: 3
       }
     ];
     DLP_PATTERNS_GLOBAL = DLP_PATTERNS.map(
@@ -2375,7 +2411,7 @@ var init_dist = __esm({
       },
       {
         // Mirrors the JSON shield's `.env` pattern (project-jail.json's
-        // review-read-env-any-tool) so the AST FS-op path catches the
+        // block-read-env-any-tool) so the AST FS-op path catches the
         // same set the regex shield does — including Next.js / Vite's
         // `.env.<env>.local` double-suffix overrides which are commonly
         // gitignored AND commonly contain real secrets.
@@ -3121,7 +3157,7 @@ var init_dist = __esm({
             {
               field: "command",
               op: "matches",
-              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.ssh[\\/\\\\]",
+              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.ssh[\\/\\\\]",
               flags: "i"
             }
           ],
@@ -3135,7 +3171,7 @@ var init_dist = __esm({
             {
               field: "command",
               op: "matches",
-              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.aws[\\/\\\\]",
+              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.aws[\\/\\\\]",
               flags: "i"
             }
           ],
@@ -3149,7 +3185,7 @@ var init_dist = __esm({
             {
               field: "command",
               op: "matches",
-              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*\\.env(\\.local|\\.production|\\.staging)?\\b",
+              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.env(\\.(local|production|staging|development|production\\.local|staging\\.local|development\\.local))?(?=\\s|$|[;&|>)<])",
               flags: "i"
             }
           ],
@@ -3163,7 +3199,7 @@ var init_dist = __esm({
             {
               field: "command",
               op: "matches",
-              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials)",
+              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials)",
               flags: "i"
             }
           ],
@@ -3199,7 +3235,7 @@ var init_dist = __esm({
           reason: "Reading AWS credentials is blocked by project-jail shield"
         },
         {
-          name: "shield:project-jail:review-read-env-any-tool",
+          name: "shield:project-jail:block-read-env-any-tool",
           tool: "*",
           conditions: [
             {
@@ -3209,8 +3245,8 @@ var init_dist = __esm({
               flags: "i"
             }
           ],
-          verdict: "review",
-          reason: "Reading .env files requires approval (project-jail shield)"
+          verdict: "block",
+          reason: "Reading .env files is blocked by project-jail shield"
         },
         {
           name: "shield:project-jail:review-read-credentials-any-tool",
@@ -3471,6 +3507,30 @@ function writeShieldOverride(shieldName, ruleName, verdict) {
   overrides[shieldName] = { ...overrides[shieldName] ?? {}, [ruleName]: verdict };
   writeShieldsFile({ ...current, overrides });
 }
+function migrateRenamedRuleKeys() {
+  const current = readShieldsFile();
+  if (!current.overrides || Object.keys(current.overrides).length === 0) return [];
+  const renameMap = new Map(RULE_KEY_MIGRATIONS);
+  const migrated = [];
+  const nextOverrides = {};
+  let anyChange = false;
+  for (const [shield, rules] of Object.entries(current.overrides)) {
+    const nextRules = {};
+    for (const [key, verdict] of Object.entries(rules)) {
+      const newKey = renameMap.get(key);
+      if (newKey) {
+        if (!(newKey in nextRules)) nextRules[newKey] = verdict;
+        migrated.push({ shield, oldKey: key, newKey });
+        anyChange = true;
+      } else {
+        nextRules[key] = verdict;
+      }
+    }
+    if (Object.keys(nextRules).length > 0) nextOverrides[shield] = nextRules;
+  }
+  if (anyChange) writeShieldsFile({ ...current, overrides: nextOverrides });
+  return migrated;
+}
 function clearShieldOverride(shieldName, ruleName) {
   const current = readShieldsFile();
   if (!current.overrides?.[shieldName]?.[ruleName]) return;
@@ -3519,7 +3579,7 @@ function installShield(name, shieldJson) {
   import_fs2.default.writeFileSync(tmp, JSON.stringify(shieldJson, null, 2), { mode: 384 });
   import_fs2.default.renameSync(tmp, filePath);
 }
-var import_fs2, import_path2, import_os2, import_crypto3, USER_SHIELDS_DIR, SHIELDS, SHIELDS_STATE_FILE;
+var import_fs2, import_path2, import_os2, import_crypto3, USER_SHIELDS_DIR, SHIELDS, SHIELDS_STATE_FILE, RULE_KEY_MIGRATIONS;
 var init_shields = __esm({
   "src/shields.ts"() {
     "use strict";
@@ -3532,6 +3592,14 @@ var init_shields = __esm({
     USER_SHIELDS_DIR = import_path2.default.join(import_os2.default.homedir(), ".node9", "shields");
     SHIELDS = buildSHIELDS();
     SHIELDS_STATE_FILE = import_path2.default.join(import_os2.default.homedir(), ".node9", "shields.json");
+    RULE_KEY_MIGRATIONS = [
+      // 2026-05-21 — project-jail .env reads promoted review → block. Renamed
+      // so the key honestly describes the verdict. Credential-file rules
+      // (.netrc, .npmrc, .docker, .kube, gcloud) deliberately stay at `review`
+      // — see the rationale in packages/policy-engine/src/shell/index.ts
+      // around the review-read-credentials rule.
+      ["shield:project-jail:review-read-env-any-tool", "shield:project-jail:block-read-env-any-tool"]
+    ];
   }
 });
 
@@ -7035,6 +7103,18 @@ function claudeDesktopConfigPath(homeDir2 = import_os12.default.homedir()) {
   }
   return null;
 }
+function binaryInPath(binary) {
+  const pathEnv = process.env.PATH ?? "";
+  for (const dir of pathEnv.split(import_path15.default.delimiter)) {
+    if (!dir) continue;
+    try {
+      import_fs13.default.accessSync(import_path15.default.join(dir, binary), import_fs13.default.constants.X_OK);
+      return true;
+    } catch {
+    }
+  }
+  return false;
+}
 function detectAgents(homeDir2 = import_os12.default.homedir()) {
   const exists = (p) => {
     try {
@@ -7057,7 +7137,9 @@ function detectAgents(homeDir2 = import_os12.default.homedir()) {
     windsurf: exists(import_path15.default.join(homeDir2, ".codeium", "windsurf")),
     vscode: exists(import_path15.default.join(homeDir2, ".vscode")),
     claudeDesktop: desktopPath !== null && exists(import_path15.default.dirname(desktopPath)),
-    opencode: exists(import_path15.default.join(homeDir2, ".config", "opencode"))
+    // Opencode creates ~/.config/opencode lazily on first launch — fall back
+    // to a PATH lookup so installed-but-never-launched CLIs are still wired.
+    opencode: exists(import_path15.default.join(homeDir2, ".config", "opencode")) || binaryInPath("opencode")
   };
 }
 async function setupCursor() {
@@ -18744,14 +18826,18 @@ init_setup();
 init_shields();
 init_service();
 var DEFAULT_SHIELDS = ["bash-safe", "filesystem", "project-jail"];
-function fireTelemetryPing(agents) {
+function buildTelemetryPayload(agents, firstInstall) {
+  return {
+    event: "init_completed",
+    agents_detected: agents,
+    os: process.platform,
+    node9_version: node9Version(),
+    first_install: firstInstall
+  };
+}
+function fireTelemetryPing(agents, firstInstall) {
   try {
-    const body = JSON.stringify({
-      event: "init_completed",
-      agents_detected: agents,
-      os: process.platform,
-      node9_version: process.env.npm_package_version ?? "unknown"
-    });
+    const body = JSON.stringify(buildTelemetryPayload(agents, firstInstall));
     const req = import_https4.default.request(
       {
         hostname: "api.node9.ai",
@@ -18784,6 +18870,12 @@ function registerInitCommand(program2) {
   ).action(
     async (options) => {
       console.log(import_chalk16.default.cyan.bold("\n\u{1F6E1}\uFE0F  Node9 Init\n"));
+      {
+        const migrated = migrateRenamedRuleKeys();
+        for (const m of migrated) {
+          console.log(import_chalk16.default.dim(`  \u{1F527} Rule renamed: ${m.oldKey} \u2192 ${m.newKey}`));
+        }
+      }
       let chosenMode = options.mode.toLowerCase();
       if (!["standard", "strict", "audit", "observe"].includes(chosenMode)) {
         chosenMode = DEFAULT_CONFIG.settings.mode;
@@ -18818,6 +18910,7 @@ function registerInitCommand(program2) {
         console.log("");
       }
       const configPath = import_path39.default.join(import_os34.default.homedir(), ".node9", "config.json");
+      const isFirstInstall = !import_fs38.default.existsSync(configPath);
       if (import_fs38.default.existsSync(configPath) && !options.force) {
         try {
           const existing = JSON.parse(import_fs38.default.readFileSync(configPath, "utf-8"));
@@ -18921,7 +19014,7 @@ function registerInitCommand(program2) {
           message: "Send anonymous usage stats to help improve node9? (no code, no args)",
           default: true
         });
-        if (sendTelemetry) fireTelemetryPing(found);
+        if (sendTelemetry) fireTelemetryPing(found, isFirstInstall);
         console.log("");
       }
       const agentList = found.join(", ");

package/dist/cli.mjs

@@ -2251,6 +2251,42 @@ var init_dist = __esm({
         regex: /\bAGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JNLH]{58}\b/,
         severity: "block",
         keywords: ["age-secret-key-"]
+      },
+      // ── Database connection strings ───────────────────────────────────────────
+      // Universal <scheme>://[user]:<password>@<host> shape. Covers the gap
+      // vendor-prefix patterns (AWS / GitHub / Stripe / …) leave open. Matches
+      // the whole URL so maskSecret produces `<scheme>...:****@...<host>` —
+      // the password value never appears in the redacted sample.
+      //
+      // Schemes covered: redis, rediss (TLS), postgres, postgresql,
+      // mongodb, mongodb+srv, mysql, mariadb, amqp, amqps, kafka,
+      // clickhouse, cassandra. HTTP(S) / FTP / SSH are intentionally
+      // excluded — they're not database URLs and adding them would
+      // create false positives on every basic-auth URL in the wild.
+      //
+      // Requires `:password@` (4+ char password) so user-only URLs like
+      // `redis://user@host` don't match. Stopwords ('your', '${', '<your',
+      // 'placeholder', 'changeme', etc.) keep doc/README scans clean.
+      {
+        name: "Database Connection String",
+        regex: /\b(redis|rediss|postgres|postgresql|mongodb|mongodb\+srv|mysql|mariadb|amqp|amqps|kafka|clickhouse|cassandra):\/\/[^:/\s@]*:[^@\s]{4,}@[^\s/]+/,
+        severity: "block",
+        keywords: [
+          "redis://",
+          "rediss://",
+          "postgres://",
+          "postgresql://",
+          "mongodb://",
+          "mongodb+srv://",
+          "mysql://",
+          "mariadb://",
+          "amqp://",
+          "amqps://",
+          "kafka://",
+          "clickhouse://",
+          "cassandra://"
+        ],
+        minEntropy: 3
       }
     ];
     DLP_PATTERNS_GLOBAL = DLP_PATTERNS.map(
@@ -2353,7 +2389,7 @@ var init_dist = __esm({
       },
       {
         // Mirrors the JSON shield's `.env` pattern (project-jail.json's
-        // review-read-env-any-tool) so the AST FS-op path catches the
+        // block-read-env-any-tool) so the AST FS-op path catches the
         // same set the regex shield does — including Next.js / Vite's
         // `.env.<env>.local` double-suffix overrides which are commonly
         // gitignored AND commonly contain real secrets.
@@ -3099,7 +3135,7 @@ var init_dist = __esm({
             {
               field: "command",
               op: "matches",
-              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.ssh[\\/\\\\]",
+              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.ssh[\\/\\\\]",
               flags: "i"
             }
           ],
@@ -3113,7 +3149,7 @@ var init_dist = __esm({
             {
               field: "command",
               op: "matches",
-              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.aws[\\/\\\\]",
+              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.aws[\\/\\\\]",
               flags: "i"
             }
           ],
@@ -3127,7 +3163,7 @@ var init_dist = __esm({
             {
               field: "command",
               op: "matches",
-              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*\\.env(\\.local|\\.production|\\.staging)?\\b",
+              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.env(\\.(local|production|staging|development|production\\.local|staging\\.local|development\\.local))?(?=\\s|$|[;&|>)<])",
               flags: "i"
             }
           ],
@@ -3141,7 +3177,7 @@ var init_dist = __esm({
             {
               field: "command",
               op: "matches",
-              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials)",
+              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials)",
               flags: "i"
             }
           ],
@@ -3177,7 +3213,7 @@ var init_dist = __esm({
           reason: "Reading AWS credentials is blocked by project-jail shield"
         },
         {
-          name: "shield:project-jail:review-read-env-any-tool",
+          name: "shield:project-jail:block-read-env-any-tool",
           tool: "*",
           conditions: [
             {
@@ -3187,8 +3223,8 @@ var init_dist = __esm({
               flags: "i"
             }
           ],
-          verdict: "review",
-          reason: "Reading .env files requires approval (project-jail shield)"
+          verdict: "block",
+          reason: "Reading .env files is blocked by project-jail shield"
         },
         {
           name: "shield:project-jail:review-read-credentials-any-tool",
@@ -3453,6 +3489,30 @@ function writeShieldOverride(shieldName, ruleName, verdict) {
   overrides[shieldName] = { ...overrides[shieldName] ?? {}, [ruleName]: verdict };
   writeShieldsFile({ ...current, overrides });
 }
+function migrateRenamedRuleKeys() {
+  const current = readShieldsFile();
+  if (!current.overrides || Object.keys(current.overrides).length === 0) return [];
+  const renameMap = new Map(RULE_KEY_MIGRATIONS);
+  const migrated = [];
+  const nextOverrides = {};
+  let anyChange = false;
+  for (const [shield, rules] of Object.entries(current.overrides)) {
+    const nextRules = {};
+    for (const [key, verdict] of Object.entries(rules)) {
+      const newKey = renameMap.get(key);
+      if (newKey) {
+        if (!(newKey in nextRules)) nextRules[newKey] = verdict;
+        migrated.push({ shield, oldKey: key, newKey });
+        anyChange = true;
+      } else {
+        nextRules[key] = verdict;
+      }
+    }
+    if (Object.keys(nextRules).length > 0) nextOverrides[shield] = nextRules;
+  }
+  if (anyChange) writeShieldsFile({ ...current, overrides: nextOverrides });
+  return migrated;
+}
 function clearShieldOverride(shieldName, ruleName) {
   const current = readShieldsFile();
   if (!current.overrides?.[shieldName]?.[ruleName]) return;
@@ -3501,7 +3561,7 @@ function installShield(name, shieldJson) {
   fs2.writeFileSync(tmp, JSON.stringify(shieldJson, null, 2), { mode: 384 });
   fs2.renameSync(tmp, filePath);
 }
-var USER_SHIELDS_DIR, SHIELDS, SHIELDS_STATE_FILE;
+var USER_SHIELDS_DIR, SHIELDS, SHIELDS_STATE_FILE, RULE_KEY_MIGRATIONS;
 var init_shields = __esm({
   "src/shields.ts"() {
     "use strict";
@@ -3510,6 +3570,14 @@ var init_shields = __esm({
     USER_SHIELDS_DIR = path2.join(os2.homedir(), ".node9", "shields");
     SHIELDS = buildSHIELDS();
     SHIELDS_STATE_FILE = path2.join(os2.homedir(), ".node9", "shields.json");
+    RULE_KEY_MIGRATIONS = [
+      // 2026-05-21 — project-jail .env reads promoted review → block. Renamed
+      // so the key honestly describes the verdict. Credential-file rules
+      // (.netrc, .npmrc, .docker, .kube, gcloud) deliberately stay at `review`
+      // — see the rationale in packages/policy-engine/src/shell/index.ts
+      // around the review-read-credentials rule.
+      ["shield:project-jail:review-read-env-any-tool", "shield:project-jail:block-read-env-any-tool"]
+    ];
   }
 });
 
@@ -7016,6 +7084,18 @@ function claudeDesktopConfigPath(homeDir2 = os12.homedir()) {
   }
   return null;
 }
+function binaryInPath(binary) {
+  const pathEnv = process.env.PATH ?? "";
+  for (const dir of pathEnv.split(path15.delimiter)) {
+    if (!dir) continue;
+    try {
+      fs13.accessSync(path15.join(dir, binary), fs13.constants.X_OK);
+      return true;
+    } catch {
+    }
+  }
+  return false;
+}
 function detectAgents(homeDir2 = os12.homedir()) {
   const exists = (p) => {
     try {
@@ -7038,7 +7118,9 @@ function detectAgents(homeDir2 = os12.homedir()) {
     windsurf: exists(path15.join(homeDir2, ".codeium", "windsurf")),
     vscode: exists(path15.join(homeDir2, ".vscode")),
     claudeDesktop: desktopPath !== null && exists(path15.dirname(desktopPath)),
-    opencode: exists(path15.join(homeDir2, ".config", "opencode"))
+    // Opencode creates ~/.config/opencode lazily on first launch — fall back
+    // to a PATH lookup so installed-but-never-launched CLIs are still wired.
+    opencode: exists(path15.join(homeDir2, ".config", "opencode")) || binaryInPath("opencode")
   };
 }
 async function setupCursor() {
@@ -18716,14 +18798,18 @@ import path39 from "path";
 import os34 from "os";
 import https4 from "https";
 var DEFAULT_SHIELDS = ["bash-safe", "filesystem", "project-jail"];
-function fireTelemetryPing(agents) {
+function buildTelemetryPayload(agents, firstInstall) {
+  return {
+    event: "init_completed",
+    agents_detected: agents,
+    os: process.platform,
+    node9_version: node9Version(),
+    first_install: firstInstall
+  };
+}
+function fireTelemetryPing(agents, firstInstall) {
   try {
-    const body = JSON.stringify({
-      event: "init_completed",
-      agents_detected: agents,
-      os: process.platform,
-      node9_version: process.env.npm_package_version ?? "unknown"
-    });
+    const body = JSON.stringify(buildTelemetryPayload(agents, firstInstall));
     const req = https4.request(
       {
         hostname: "api.node9.ai",
@@ -18756,6 +18842,12 @@ function registerInitCommand(program2) {
   ).action(
     async (options) => {
       console.log(chalk16.cyan.bold("\n\u{1F6E1}\uFE0F  Node9 Init\n"));
+      {
+        const migrated = migrateRenamedRuleKeys();
+        for (const m of migrated) {
+          console.log(chalk16.dim(`  \u{1F527} Rule renamed: ${m.oldKey} \u2192 ${m.newKey}`));
+        }
+      }
       let chosenMode = options.mode.toLowerCase();
       if (!["standard", "strict", "audit", "observe"].includes(chosenMode)) {
         chosenMode = DEFAULT_CONFIG.settings.mode;
@@ -18790,6 +18882,7 @@ function registerInitCommand(program2) {
         console.log("");
       }
       const configPath = path39.join(os34.homedir(), ".node9", "config.json");
+      const isFirstInstall = !fs38.existsSync(configPath);
       if (fs38.existsSync(configPath) && !options.force) {
         try {
           const existing = JSON.parse(fs38.readFileSync(configPath, "utf-8"));
@@ -18893,7 +18986,7 @@ function registerInitCommand(program2) {
           message: "Send anonymous usage stats to help improve node9? (no code, no args)",
           default: true
         });
-        if (sendTelemetry) fireTelemetryPing(found);
+        if (sendTelemetry) fireTelemetryPing(found, isFirstInstall);
         console.log("");
       }
       const agentList = found.join(", ");

package/dist/dashboard.mjs

@@ -1030,6 +1030,42 @@ var init_dist = __esm({
         regex: /\bAGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JNLH]{58}\b/,
         severity: "block",
         keywords: ["age-secret-key-"]
+      },
+      // ── Database connection strings ───────────────────────────────────────────
+      // Universal <scheme>://[user]:<password>@<host> shape. Covers the gap
+      // vendor-prefix patterns (AWS / GitHub / Stripe / …) leave open. Matches
+      // the whole URL so maskSecret produces `<scheme>...:****@...<host>` —
+      // the password value never appears in the redacted sample.
+      //
+      // Schemes covered: redis, rediss (TLS), postgres, postgresql,
+      // mongodb, mongodb+srv, mysql, mariadb, amqp, amqps, kafka,
+      // clickhouse, cassandra. HTTP(S) / FTP / SSH are intentionally
+      // excluded — they're not database URLs and adding them would
+      // create false positives on every basic-auth URL in the wild.
+      //
+      // Requires `:password@` (4+ char password) so user-only URLs like
+      // `redis://user@host` don't match. Stopwords ('your', '${', '<your',
+      // 'placeholder', 'changeme', etc.) keep doc/README scans clean.
+      {
+        name: "Database Connection String",
+        regex: /\b(redis|rediss|postgres|postgresql|mongodb|mongodb\+srv|mysql|mariadb|amqp|amqps|kafka|clickhouse|cassandra):\/\/[^:/\s@]*:[^@\s]{4,}@[^\s/]+/,
+        severity: "block",
+        keywords: [
+          "redis://",
+          "rediss://",
+          "postgres://",
+          "postgresql://",
+          "mongodb://",
+          "mongodb+srv://",
+          "mysql://",
+          "mariadb://",
+          "amqp://",
+          "amqps://",
+          "kafka://",
+          "clickhouse://",
+          "cassandra://"
+        ],
+        minEntropy: 3
       }
     ];
     DLP_PATTERNS_GLOBAL = DLP_PATTERNS.map(
@@ -1132,7 +1168,7 @@ var init_dist = __esm({
       },
       {
         // Mirrors the JSON shield's `.env` pattern (project-jail.json's
-        // review-read-env-any-tool) so the AST FS-op path catches the
+        // block-read-env-any-tool) so the AST FS-op path catches the
         // same set the regex shield does — including Next.js / Vite's
         // `.env.<env>.local` double-suffix overrides which are commonly
         // gitignored AND commonly contain real secrets.
@@ -1742,7 +1778,7 @@ var init_dist = __esm({
             {
               field: "command",
               op: "matches",
-              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.ssh[\\/\\\\]",
+              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.ssh[\\/\\\\]",
               flags: "i"
             }
           ],
@@ -1756,7 +1792,7 @@ var init_dist = __esm({
             {
               field: "command",
               op: "matches",
-              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.aws[\\/\\\\]",
+              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.aws[\\/\\\\]",
               flags: "i"
             }
           ],
@@ -1770,7 +1806,7 @@ var init_dist = __esm({
             {
               field: "command",
               op: "matches",
-              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*\\.env(\\.local|\\.production|\\.staging)?\\b",
+              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.env(\\.(local|production|staging|development|production\\.local|staging\\.local|development\\.local))?(?=\\s|$|[;&|>)<])",
               flags: "i"
             }
           ],
@@ -1784,7 +1820,7 @@ var init_dist = __esm({
             {
               field: "command",
               op: "matches",
-              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials)",
+              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials)",
               flags: "i"
             }
           ],
@@ -1820,7 +1856,7 @@ var init_dist = __esm({
           reason: "Reading AWS credentials is blocked by project-jail shield"
         },
         {
-          name: "shield:project-jail:review-read-env-any-tool",
+          name: "shield:project-jail:block-read-env-any-tool",
           tool: "*",
           conditions: [
             {
@@ -1830,8 +1866,8 @@ var init_dist = __esm({
               flags: "i"
             }
           ],
-          verdict: "review",
-          reason: "Reading .env files requires approval (project-jail shield)"
+          verdict: "block",
+          reason: "Reading .env files is blocked by project-jail shield"
         },
         {
           name: "shield:project-jail:review-read-credentials-any-tool",

package/dist/index.js

@@ -739,6 +739,42 @@ var DLP_PATTERNS = [
     regex: /\bAGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JNLH]{58}\b/,
     severity: "block",
     keywords: ["age-secret-key-"]
+  },
+  // ── Database connection strings ───────────────────────────────────────────
+  // Universal <scheme>://[user]:<password>@<host> shape. Covers the gap
+  // vendor-prefix patterns (AWS / GitHub / Stripe / …) leave open. Matches
+  // the whole URL so maskSecret produces `<scheme>...:****@...<host>` —
+  // the password value never appears in the redacted sample.
+  //
+  // Schemes covered: redis, rediss (TLS), postgres, postgresql,
+  // mongodb, mongodb+srv, mysql, mariadb, amqp, amqps, kafka,
+  // clickhouse, cassandra. HTTP(S) / FTP / SSH are intentionally
+  // excluded — they're not database URLs and adding them would
+  // create false positives on every basic-auth URL in the wild.
+  //
+  // Requires `:password@` (4+ char password) so user-only URLs like
+  // `redis://user@host` don't match. Stopwords ('your', '${', '<your',
+  // 'placeholder', 'changeme', etc.) keep doc/README scans clean.
+  {
+    name: "Database Connection String",
+    regex: /\b(redis|rediss|postgres|postgresql|mongodb|mongodb\+srv|mysql|mariadb|amqp|amqps|kafka|clickhouse|cassandra):\/\/[^:/\s@]*:[^@\s]{4,}@[^\s/]+/,
+    severity: "block",
+    keywords: [
+      "redis://",
+      "rediss://",
+      "postgres://",
+      "postgresql://",
+      "mongodb://",
+      "mongodb+srv://",
+      "mysql://",
+      "mariadb://",
+      "amqp://",
+      "amqps://",
+      "kafka://",
+      "clickhouse://",
+      "cassandra://"
+    ],
+    minEntropy: 3
   }
 ];
 var DLP_PATTERNS_GLOBAL = DLP_PATTERNS.map(
@@ -1092,7 +1128,7 @@ var SENSITIVE_PATH_RULES = [
   },
   {
     // Mirrors the JSON shield's `.env` pattern (project-jail.json's
-    // review-read-env-any-tool) so the AST FS-op path catches the
+    // block-read-env-any-tool) so the AST FS-op path catches the
     // same set the regex shield does — including Next.js / Vite's
     // `.env.<env>.local` double-suffix overrides which are commonly
     // gitignored AND commonly contain real secrets.
@@ -2554,7 +2590,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.ssh[\\/\\\\]",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.ssh[\\/\\\\]",
           flags: "i"
         }
       ],
@@ -2568,7 +2604,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.aws[\\/\\\\]",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.aws[\\/\\\\]",
           flags: "i"
         }
       ],
@@ -2582,7 +2618,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*\\.env(\\.local|\\.production|\\.staging)?\\b",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.env(\\.(local|production|staging|development|production\\.local|staging\\.local|development\\.local))?(?=\\s|$|[;&|>)<])",
           flags: "i"
         }
       ],
@@ -2596,7 +2632,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials)",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials)",
           flags: "i"
         }
       ],
@@ -2632,7 +2668,7 @@ var project_jail_default = {
       reason: "Reading AWS credentials is blocked by project-jail shield"
     },
     {
-      name: "shield:project-jail:review-read-env-any-tool",
+      name: "shield:project-jail:block-read-env-any-tool",
       tool: "*",
       conditions: [
         {
@@ -2642,8 +2678,8 @@ var project_jail_default = {
           flags: "i"
         }
       ],
-      verdict: "review",
-      reason: "Reading .env files requires approval (project-jail shield)"
+      verdict: "block",
+      reason: "Reading .env files is blocked by project-jail shield"
     },
     {
       name: "shield:project-jail:review-read-credentials-any-tool",

package/dist/index.mjs

@@ -709,6 +709,42 @@ var DLP_PATTERNS = [
     regex: /\bAGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JNLH]{58}\b/,
     severity: "block",
     keywords: ["age-secret-key-"]
+  },
+  // ── Database connection strings ───────────────────────────────────────────
+  // Universal <scheme>://[user]:<password>@<host> shape. Covers the gap
+  // vendor-prefix patterns (AWS / GitHub / Stripe / …) leave open. Matches
+  // the whole URL so maskSecret produces `<scheme>...:****@...<host>` —
+  // the password value never appears in the redacted sample.
+  //
+  // Schemes covered: redis, rediss (TLS), postgres, postgresql,
+  // mongodb, mongodb+srv, mysql, mariadb, amqp, amqps, kafka,
+  // clickhouse, cassandra. HTTP(S) / FTP / SSH are intentionally
+  // excluded — they're not database URLs and adding them would
+  // create false positives on every basic-auth URL in the wild.
+  //
+  // Requires `:password@` (4+ char password) so user-only URLs like
+  // `redis://user@host` don't match. Stopwords ('your', '${', '<your',
+  // 'placeholder', 'changeme', etc.) keep doc/README scans clean.
+  {
+    name: "Database Connection String",
+    regex: /\b(redis|rediss|postgres|postgresql|mongodb|mongodb\+srv|mysql|mariadb|amqp|amqps|kafka|clickhouse|cassandra):\/\/[^:/\s@]*:[^@\s]{4,}@[^\s/]+/,
+    severity: "block",
+    keywords: [
+      "redis://",
+      "rediss://",
+      "postgres://",
+      "postgresql://",
+      "mongodb://",
+      "mongodb+srv://",
+      "mysql://",
+      "mariadb://",
+      "amqp://",
+      "amqps://",
+      "kafka://",
+      "clickhouse://",
+      "cassandra://"
+    ],
+    minEntropy: 3
   }
 ];
 var DLP_PATTERNS_GLOBAL = DLP_PATTERNS.map(
@@ -1062,7 +1098,7 @@ var SENSITIVE_PATH_RULES = [
   },
   {
     // Mirrors the JSON shield's `.env` pattern (project-jail.json's
-    // review-read-env-any-tool) so the AST FS-op path catches the
+    // block-read-env-any-tool) so the AST FS-op path catches the
     // same set the regex shield does — including Next.js / Vite's
     // `.env.<env>.local` double-suffix overrides which are commonly
     // gitignored AND commonly contain real secrets.
@@ -2524,7 +2560,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.ssh[\\/\\\\]",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.ssh[\\/\\\\]",
           flags: "i"
         }
       ],
@@ -2538,7 +2574,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.aws[\\/\\\\]",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.aws[\\/\\\\]",
           flags: "i"
         }
       ],
@@ -2552,7 +2588,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*\\.env(\\.local|\\.production|\\.staging)?\\b",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.env(\\.(local|production|staging|development|production\\.local|staging\\.local|development\\.local))?(?=\\s|$|[;&|>)<])",
           flags: "i"
         }
       ],
@@ -2566,7 +2602,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials)",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials)",
           flags: "i"
         }
       ],
@@ -2602,7 +2638,7 @@ var project_jail_default = {
       reason: "Reading AWS credentials is blocked by project-jail shield"
     },
     {
-      name: "shield:project-jail:review-read-env-any-tool",
+      name: "shield:project-jail:block-read-env-any-tool",
       tool: "*",
       conditions: [
         {
@@ -2612,8 +2648,8 @@ var project_jail_default = {
           flags: "i"
         }
       ],
-      verdict: "review",
-      reason: "Reading .env files requires approval (project-jail shield)"
+      verdict: "block",
+      reason: "Reading .env files is blocked by project-jail shield"
     },
     {
       name: "shield:project-jail:review-read-credentials-any-tool",

package/dist/scan-ink.mjs

@@ -729,6 +729,42 @@ var DLP_PATTERNS = [
     regex: /\bAGE-SECRET-KEY-1[QPZRY9X8GF2TVDW0S3JNLH]{58}\b/,
     severity: "block",
     keywords: ["age-secret-key-"]
+  },
+  // ── Database connection strings ───────────────────────────────────────────
+  // Universal <scheme>://[user]:<password>@<host> shape. Covers the gap
+  // vendor-prefix patterns (AWS / GitHub / Stripe / …) leave open. Matches
+  // the whole URL so maskSecret produces `<scheme>...:****@...<host>` —
+  // the password value never appears in the redacted sample.
+  //
+  // Schemes covered: redis, rediss (TLS), postgres, postgresql,
+  // mongodb, mongodb+srv, mysql, mariadb, amqp, amqps, kafka,
+  // clickhouse, cassandra. HTTP(S) / FTP / SSH are intentionally
+  // excluded — they're not database URLs and adding them would
+  // create false positives on every basic-auth URL in the wild.
+  //
+  // Requires `:password@` (4+ char password) so user-only URLs like
+  // `redis://user@host` don't match. Stopwords ('your', '${', '<your',
+  // 'placeholder', 'changeme', etc.) keep doc/README scans clean.
+  {
+    name: "Database Connection String",
+    regex: /\b(redis|rediss|postgres|postgresql|mongodb|mongodb\+srv|mysql|mariadb|amqp|amqps|kafka|clickhouse|cassandra):\/\/[^:/\s@]*:[^@\s]{4,}@[^\s/]+/,
+    severity: "block",
+    keywords: [
+      "redis://",
+      "rediss://",
+      "postgres://",
+      "postgresql://",
+      "mongodb://",
+      "mongodb+srv://",
+      "mysql://",
+      "mariadb://",
+      "amqp://",
+      "amqps://",
+      "kafka://",
+      "clickhouse://",
+      "cassandra://"
+    ],
+    minEntropy: 3
   }
 ];
 var DLP_PATTERNS_GLOBAL = DLP_PATTERNS.map(
@@ -1333,7 +1369,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.ssh[\\/\\\\]",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.ssh[\\/\\\\]",
           flags: "i"
         }
       ],
@@ -1347,7 +1383,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.aws[\\/\\\\]",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.aws[\\/\\\\]",
           flags: "i"
         }
       ],
@@ -1361,7 +1397,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*\\.env(\\.local|\\.production|\\.staging)?\\b",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*?\\.env(\\.(local|production|staging|development|production\\.local|staging\\.local|development\\.local))?(?=\\s|$|[;&|>)<])",
           flags: "i"
         }
       ],
@@ -1375,7 +1411,7 @@ var project_jail_default = {
         {
           field: "command",
           op: "matches",
-          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials)",
+          value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type|grep|egrep|fgrep|rg|ag|ack|awk|gawk|sed|cut|tr|jq|yq|od|xxd|hexdump|strings|sort|uniq|tac|nl|dd)\\s+.*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials)",
           flags: "i"
         }
       ],
@@ -1411,7 +1447,7 @@ var project_jail_default = {
       reason: "Reading AWS credentials is blocked by project-jail shield"
     },
     {
-      name: "shield:project-jail:review-read-env-any-tool",
+      name: "shield:project-jail:block-read-env-any-tool",
       tool: "*",
       conditions: [
         {
@@ -1421,8 +1457,8 @@ var project_jail_default = {
           flags: "i"
         }
       ],
-      verdict: "review",
-      reason: "Reading .env files requires approval (project-jail shield)"
+      verdict: "block",
+      reason: "Reading .env files is blocked by project-jail shield"
     },
     {
       name: "shield:project-jail:review-read-credentials-any-tool",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.25.0",
+  "version": "1.26.1",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code & MCP.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",