@node9/proxy 1.35.2 → 1.36.0

package/dist/cli.js

@@ -19968,6 +19968,7 @@ var import_fs38 = __toESM(require("fs"));
 var import_path39 = __toESM(require("path"));
 var import_os34 = __toESM(require("os"));
 var yaml2 = __toESM(require("yaml"));
+var import_smol_toml2 = require("smol-toml");
 init_setup();
 function readJson2(filePath) {
   if (!import_fs38.default.existsSync(filePath)) return null;
@@ -20003,15 +20004,26 @@ function eventWired(root, ev, format) {
   if (format === "matcher") return matchersHaveNode9Hook(arr);
   return flatHaveNode9Hook(arr);
 }
-function readMcp(filePath) {
-  const parsed = readJson2(filePath);
-  if (parsed === null || parsed === "invalid") return { wrapped: [], present: false };
-  const servers = parsed.mcpServers ?? {};
-  const entries = Object.entries(servers);
+function detectMcp(servers) {
+  const entries = Object.entries(servers ?? {});
   const present = entries.some(([, s]) => s?.command === "node9");
   const wrapped = entries.filter(([, s]) => s?.command === "node9" && Array.isArray(s.args) && s.args.length > 0).map(([name, s]) => `${name} \u2192 ${s.args.join(" ")}`);
   return { wrapped, present };
 }
+function readMcp(filePath, format) {
+  if (!import_fs38.default.existsSync(filePath)) return { wrapped: [], present: false };
+  try {
+    if (format === "toml") {
+      const parsed2 = (0, import_smol_toml2.parse)(import_fs38.default.readFileSync(filePath, "utf-8"));
+      return detectMcp(parsed2?.mcp_servers);
+    }
+    const parsed = readJson2(filePath);
+    if (parsed === null || parsed === "invalid") return { wrapped: [], present: false };
+    return detectMcp(parsed.mcpServers);
+  } catch {
+    return { wrapped: [], present: false };
+  }
+}
 var exists = (p) => {
   try {
     return import_fs38.default.existsSync(p);
@@ -20051,6 +20063,8 @@ var AGENT_SPECS = [
     hookFile: (h) => import_path39.default.join(h, ".codex", "hooks.json"),
     hookFormat: "matcher",
     hookEvents: [ck("PreToolUse"), ck("UserPromptSubmit")],
+    mcpFile: (h) => import_path39.default.join(h, ".codex", "config.toml"),
+    mcpFormat: "toml",
     present: (h) => exists(import_path39.default.join(h, ".codex"))
   },
   {
@@ -20093,35 +20107,69 @@ var AGENT_SPECS = [
     labelPad: 14,
     // 'post_tool_call' is wider than the default
     present: (h) => exists(hermesConfigPath(h))
+  },
+  {
+    // Plugin-shim agents — protected by a node9-authored plugin/extension file
+    // (no hooks, no MCP). hookFormat is unused for these (shimFile drives it).
+    id: "opencode",
+    label: "OpenCode",
+    setupCommand: "node9 setup opencode",
+    hookFormat: "flat",
+    hookEvents: [],
+    shimFile: (h) => import_path39.default.join(h, ".config", "opencode", "plugins", "node9.js"),
+    present: (h) => exists(import_path39.default.join(h, ".config", "opencode")) || exists(import_path39.default.join(h, ".config", "opencode", "plugins", "node9.js"))
+  },
+  {
+    id: "pi",
+    label: "Pi",
+    setupCommand: "node9 setup pi",
+    hookFormat: "flat",
+    hookEvents: [],
+    shimFile: (h) => import_path39.default.join(h, ".pi", "agent", "extensions", "node9.js"),
+    present: (h) => exists(import_path39.default.join(h, ".pi", "agent")) || exists(import_path39.default.join(h, ".pi", "agent", "extensions", "node9.js"))
   }
 ];
 function getAgentWiring(home = import_os34.default.homedir()) {
   const detected = detectAgents(home);
   return AGENT_SPECS.map((spec) => {
-    const root = spec.hookFile ? readHookRoot(spec.hookFile(home), spec.hookFormat) : "absent";
-    const primary = spec.hookEvents[0];
-    const rootPresent = root !== "absent" && root !== "invalid";
+    const present = spec.present(home);
     const pad = spec.labelPad ?? DEFAULT_LABEL_PAD;
-    const hooks = spec.hookEvents.map((ev) => ({
-      label: hookLabelOf(ev, pad),
-      wired: rootPresent && eventWired(root, ev, spec.hookFormat)
-    }));
+    let hooks;
     let wireState;
-    if (root === "absent") wireState = "absent";
-    else if (root === "invalid") wireState = "invalid";
-    else wireState = primary && eventWired(root, primary, spec.hookFormat) ? "wired" : "unwired";
-    const mcp = spec.mcpFile ? readMcp(spec.mcpFile(home)) : null;
+    let hookLabel;
+    let settingsPath;
+    if (spec.shimFile) {
+      const shimWired = exists(spec.shimFile(home));
+      hooks = [{ label: "node9 plugin (node9 check)", wired: shimWired }];
+      wireState = shimWired ? "wired" : present ? "unwired" : "absent";
+      hookLabel = "node9 plugin";
+      settingsPath = spec.shimFile(home);
+    } else {
+      const root = spec.hookFile ? readHookRoot(spec.hookFile(home), spec.hookFormat) : "absent";
+      const primary = spec.hookEvents[0];
+      const rootPresent = root !== "absent" && root !== "invalid";
+      hooks = spec.hookEvents.map((ev) => ({
+        label: hookLabelOf(ev, pad),
+        wired: rootPresent && eventWired(root, ev, spec.hookFormat)
+      }));
+      if (root === "absent") wireState = "absent";
+      else if (root === "invalid") wireState = "invalid";
+      else wireState = primary && eventWired(root, primary, spec.hookFormat) ? "wired" : "unwired";
+      hookLabel = primary ? `${primary.key} hook` : "MCP proxy";
+      settingsPath = spec.hookFile ? spec.hookFile(home) : spec.mcpFile ? spec.mcpFile(home) : "";
+    }
+    const mcp = spec.mcpFile ? readMcp(spec.mcpFile(home), spec.mcpFormat ?? "json") : null;
     const anyHookWired = hooks.some((h) => h.wired);
     return {
       id: spec.id,
       label: spec.label,
       setupCommand: spec.setupCommand,
       installed: detected[spec.id],
-      present: spec.present(home),
+      present,
       hooks,
       wireState,
-      hookLabel: primary ? `${primary.key} hook` : "MCP proxy",
-      settingsPath: spec.hookFile ? spec.hookFile(home) : spec.mcpFile ? spec.mcpFile(home) : "",
+      hookLabel,
+      settingsPath,
       configFormat: spec.hookFormat === "yaml" ? "YAML" : "JSON",
       mcpServers: mcp ? mcp.wrapped : null,
       mcpProtected: mcp ? mcp.present : false,

package/dist/cli.mjs

@@ -19941,6 +19941,7 @@ import fs38 from "fs";
 import path39 from "path";
 import os34 from "os";
 import * as yaml2 from "yaml";
+import { parse as parseToml2 } from "smol-toml";
 function readJson2(filePath) {
   if (!fs38.existsSync(filePath)) return null;
   try {
@@ -19975,15 +19976,26 @@ function eventWired(root, ev, format) {
   if (format === "matcher") return matchersHaveNode9Hook(arr);
   return flatHaveNode9Hook(arr);
 }
-function readMcp(filePath) {
-  const parsed = readJson2(filePath);
-  if (parsed === null || parsed === "invalid") return { wrapped: [], present: false };
-  const servers = parsed.mcpServers ?? {};
-  const entries = Object.entries(servers);
+function detectMcp(servers) {
+  const entries = Object.entries(servers ?? {});
   const present = entries.some(([, s]) => s?.command === "node9");
   const wrapped = entries.filter(([, s]) => s?.command === "node9" && Array.isArray(s.args) && s.args.length > 0).map(([name, s]) => `${name} \u2192 ${s.args.join(" ")}`);
   return { wrapped, present };
 }
+function readMcp(filePath, format) {
+  if (!fs38.existsSync(filePath)) return { wrapped: [], present: false };
+  try {
+    if (format === "toml") {
+      const parsed2 = parseToml2(fs38.readFileSync(filePath, "utf-8"));
+      return detectMcp(parsed2?.mcp_servers);
+    }
+    const parsed = readJson2(filePath);
+    if (parsed === null || parsed === "invalid") return { wrapped: [], present: false };
+    return detectMcp(parsed.mcpServers);
+  } catch {
+    return { wrapped: [], present: false };
+  }
+}
 var exists = (p) => {
   try {
     return fs38.existsSync(p);
@@ -20023,6 +20035,8 @@ var AGENT_SPECS = [
     hookFile: (h) => path39.join(h, ".codex", "hooks.json"),
     hookFormat: "matcher",
     hookEvents: [ck("PreToolUse"), ck("UserPromptSubmit")],
+    mcpFile: (h) => path39.join(h, ".codex", "config.toml"),
+    mcpFormat: "toml",
     present: (h) => exists(path39.join(h, ".codex"))
   },
   {
@@ -20065,35 +20079,69 @@ var AGENT_SPECS = [
     labelPad: 14,
     // 'post_tool_call' is wider than the default
     present: (h) => exists(hermesConfigPath(h))
+  },
+  {
+    // Plugin-shim agents — protected by a node9-authored plugin/extension file
+    // (no hooks, no MCP). hookFormat is unused for these (shimFile drives it).
+    id: "opencode",
+    label: "OpenCode",
+    setupCommand: "node9 setup opencode",
+    hookFormat: "flat",
+    hookEvents: [],
+    shimFile: (h) => path39.join(h, ".config", "opencode", "plugins", "node9.js"),
+    present: (h) => exists(path39.join(h, ".config", "opencode")) || exists(path39.join(h, ".config", "opencode", "plugins", "node9.js"))
+  },
+  {
+    id: "pi",
+    label: "Pi",
+    setupCommand: "node9 setup pi",
+    hookFormat: "flat",
+    hookEvents: [],
+    shimFile: (h) => path39.join(h, ".pi", "agent", "extensions", "node9.js"),
+    present: (h) => exists(path39.join(h, ".pi", "agent")) || exists(path39.join(h, ".pi", "agent", "extensions", "node9.js"))
   }
 ];
 function getAgentWiring(home = os34.homedir()) {
   const detected = detectAgents(home);
   return AGENT_SPECS.map((spec) => {
-    const root = spec.hookFile ? readHookRoot(spec.hookFile(home), spec.hookFormat) : "absent";
-    const primary = spec.hookEvents[0];
-    const rootPresent = root !== "absent" && root !== "invalid";
+    const present = spec.present(home);
     const pad = spec.labelPad ?? DEFAULT_LABEL_PAD;
-    const hooks = spec.hookEvents.map((ev) => ({
-      label: hookLabelOf(ev, pad),
-      wired: rootPresent && eventWired(root, ev, spec.hookFormat)
-    }));
+    let hooks;
     let wireState;
-    if (root === "absent") wireState = "absent";
-    else if (root === "invalid") wireState = "invalid";
-    else wireState = primary && eventWired(root, primary, spec.hookFormat) ? "wired" : "unwired";
-    const mcp = spec.mcpFile ? readMcp(spec.mcpFile(home)) : null;
+    let hookLabel;
+    let settingsPath;
+    if (spec.shimFile) {
+      const shimWired = exists(spec.shimFile(home));
+      hooks = [{ label: "node9 plugin (node9 check)", wired: shimWired }];
+      wireState = shimWired ? "wired" : present ? "unwired" : "absent";
+      hookLabel = "node9 plugin";
+      settingsPath = spec.shimFile(home);
+    } else {
+      const root = spec.hookFile ? readHookRoot(spec.hookFile(home), spec.hookFormat) : "absent";
+      const primary = spec.hookEvents[0];
+      const rootPresent = root !== "absent" && root !== "invalid";
+      hooks = spec.hookEvents.map((ev) => ({
+        label: hookLabelOf(ev, pad),
+        wired: rootPresent && eventWired(root, ev, spec.hookFormat)
+      }));
+      if (root === "absent") wireState = "absent";
+      else if (root === "invalid") wireState = "invalid";
+      else wireState = primary && eventWired(root, primary, spec.hookFormat) ? "wired" : "unwired";
+      hookLabel = primary ? `${primary.key} hook` : "MCP proxy";
+      settingsPath = spec.hookFile ? spec.hookFile(home) : spec.mcpFile ? spec.mcpFile(home) : "";
+    }
+    const mcp = spec.mcpFile ? readMcp(spec.mcpFile(home), spec.mcpFormat ?? "json") : null;
     const anyHookWired = hooks.some((h) => h.wired);
     return {
       id: spec.id,
       label: spec.label,
       setupCommand: spec.setupCommand,
       installed: detected[spec.id],
-      present: spec.present(home),
+      present,
       hooks,
       wireState,
-      hookLabel: primary ? `${primary.key} hook` : "MCP proxy",
-      settingsPath: spec.hookFile ? spec.hookFile(home) : spec.mcpFile ? spec.mcpFile(home) : "",
+      hookLabel,
+      settingsPath,
       configFormat: spec.hookFormat === "yaml" ? "YAML" : "JSON",
       mcpServers: mcp ? mcp.wrapped : null,
       mcpProtected: mcp ? mcp.present : false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.35.2",
+  "version": "1.36.0",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",