@node9/proxy 1.45.0 → 1.47.0

package/dist/dashboard.mjs

@@ -2280,6 +2280,11 @@ var init_config_schema = __esm({
         // must run them from the CLI. node9's threat model is the agent itself.
         mcpAllowWeakening: z.boolean().optional(),
         cloudSyncIntervalHours: z.number().positive().optional(),
+        // Seconds-granular override for the cloud policy sync cadence. Wins over
+        // cloudSyncIntervalHours when set. Lets you opt into fast apply (e.g. 20)
+        // for an incident; clamped to a 15s floor so it can't hammer the API.
+        // Unset → falls back to hours, then the 5h default.
+        cloudSyncIntervalSeconds: z.number().positive().optional(),
         // Outbox shipper (audit.log → SaaS batch ingest). enabled defaults
         // to true; set false to fall back to local-only auditing.
         shipper: z.object({

package/dist/index.js

@@ -322,6 +322,11 @@ var ConfigFileSchema = import_zod.z.object({
     // must run them from the CLI. node9's threat model is the agent itself.
     mcpAllowWeakening: import_zod.z.boolean().optional(),
     cloudSyncIntervalHours: import_zod.z.number().positive().optional(),
+    // Seconds-granular override for the cloud policy sync cadence. Wins over
+    // cloudSyncIntervalHours when set. Lets you opt into fast apply (e.g. 20)
+    // for an incident; clamped to a 15s floor so it can't hammer the API.
+    // Unset → falls back to hours, then the 5h default.
+    cloudSyncIntervalSeconds: import_zod.z.number().positive().optional(),
     // Outbox shipper (audit.log → SaaS batch ingest). enabled defaults
     // to true; set false to fall back to local-only auditing.
     shipper: import_zod.z.object({
@@ -2264,6 +2269,19 @@ function evaluateSmartConditions(args, rule) {
   });
   return mode === "any" ? results.some((r) => r) : results.every((r) => r);
 }
+var VERDICT_RANK = {
+  allow: 0,
+  review: 1,
+  block: 2
+};
+function resolvePinned(matches) {
+  if (matches.length === 0) return void 0;
+  const pinned = matches.filter((r) => r.pinned);
+  if (pinned.length === 0) return matches[0];
+  return pinned.reduce(
+    (best, r) => VERDICT_RANK[r.verdict] > VERDICT_RANK[best.verdict] ? r : best
+  );
+}
 function tokenize2(toolName) {
   return toolName.toLowerCase().split(/[_.\-\s]+/).filter(Boolean);
 }
@@ -2376,9 +2394,10 @@ async function evaluatePolicy(config, toolName, args, context = {}, hooks = {})
     }
   }
   if (config.policy.smartRules.length > 0) {
-    const matchedRule = config.policy.smartRules.find(
+    const matches = config.policy.smartRules.filter(
       (rule) => matchesPattern(toolName, rule.tool) && !(bashCommand !== null && rule.name && AST_FS_REGEX_RULES.has(rule.name)) && evaluateSmartConditions(args, rule)
     );
+    const matchedRule = resolvePinned(matches);
     if (matchedRule) {
       if (matchedRule.verdict === "allow")
         return { decision: "allow", ruleName: matchedRule.name ?? matchedRule.tool };

package/dist/index.mjs

@@ -292,6 +292,11 @@ var ConfigFileSchema = z.object({
     // must run them from the CLI. node9's threat model is the agent itself.
     mcpAllowWeakening: z.boolean().optional(),
     cloudSyncIntervalHours: z.number().positive().optional(),
+    // Seconds-granular override for the cloud policy sync cadence. Wins over
+    // cloudSyncIntervalHours when set. Lets you opt into fast apply (e.g. 20)
+    // for an incident; clamped to a 15s floor so it can't hammer the API.
+    // Unset → falls back to hours, then the 5h default.
+    cloudSyncIntervalSeconds: z.number().positive().optional(),
     // Outbox shipper (audit.log → SaaS batch ingest). enabled defaults
     // to true; set false to fall back to local-only auditing.
     shipper: z.object({
@@ -2234,6 +2239,19 @@ function evaluateSmartConditions(args, rule) {
   });
   return mode === "any" ? results.some((r) => r) : results.every((r) => r);
 }
+var VERDICT_RANK = {
+  allow: 0,
+  review: 1,
+  block: 2
+};
+function resolvePinned(matches) {
+  if (matches.length === 0) return void 0;
+  const pinned = matches.filter((r) => r.pinned);
+  if (pinned.length === 0) return matches[0];
+  return pinned.reduce(
+    (best, r) => VERDICT_RANK[r.verdict] > VERDICT_RANK[best.verdict] ? r : best
+  );
+}
 function tokenize2(toolName) {
   return toolName.toLowerCase().split(/[_.\-\s]+/).filter(Boolean);
 }
@@ -2346,9 +2364,10 @@ async function evaluatePolicy(config, toolName, args, context = {}, hooks = {})
     }
   }
   if (config.policy.smartRules.length > 0) {
-    const matchedRule = config.policy.smartRules.find(
+    const matches = config.policy.smartRules.filter(
       (rule) => matchesPattern(toolName, rule.tool) && !(bashCommand !== null && rule.name && AST_FS_REGEX_RULES.has(rule.name)) && evaluateSmartConditions(args, rule)
     );
+    const matchedRule = resolvePinned(matches);
     if (matchedRule) {
       if (matchedRule.verdict === "allow")
         return { decision: "allow", ruleName: matchedRule.name ?? matchedRule.tool };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.45.0",
+  "version": "1.47.0",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",