@node9/proxy 1.46.0 → 1.47.0

package/dist/cli.js

@@ -337,6 +337,11 @@ var init_config_schema = __esm({
         // must run them from the CLI. node9's threat model is the agent itself.
         mcpAllowWeakening: import_zod.z.boolean().optional(),
         cloudSyncIntervalHours: import_zod.z.number().positive().optional(),
+        // Seconds-granular override for the cloud policy sync cadence. Wins over
+        // cloudSyncIntervalHours when set. Lets you opt into fast apply (e.g. 20)
+        // for an incident; clamped to a 15s floor so it can't hammer the API.
+        // Unset → falls back to hours, then the 5h default.
+        cloudSyncIntervalSeconds: import_zod.z.number().positive().optional(),
         // Outbox shipper (audit.log → SaaS batch ingest). enabled defaults
         // to true; set false to fall back to local-only auditing.
         shipper: import_zod.z.object({
@@ -16777,6 +16782,11 @@ function buildSessionDeltas(findings, toolCallsBySession) {
     signals
   }));
 }
+function resolveSyncIntervalMs(settings) {
+  const rawSeconds = settings.cloudSyncIntervalSeconds ?? (settings.cloudSyncIntervalHours ?? DEFAULT_INTERVAL_HOURS) * 3600;
+  const clamped = Math.min(Math.max(rawSeconds, MIN_INTERVAL_SECONDS), MAX_INTERVAL_SECONDS);
+  return clamped * 1e3;
+}
 function readCredentials() {
   if (process.env.NODE9_API_KEY) {
     return {
@@ -17099,9 +17109,7 @@ function getCloudRules() {
   }
 }
 function startCloudSync() {
-  const rawHours = getConfig().settings.cloudSyncIntervalHours ?? DEFAULT_INTERVAL_HOURS;
-  const intervalHours = Math.max(rawHours, MIN_INTERVAL_HOURS);
-  const intervalMs = intervalHours * 60 * 60 * 1e3;
+  const intervalMs = resolveSyncIntervalMs(getConfig().settings);
   const initial = setTimeout(() => void syncOnce(), 3e4);
   initial.unref();
   const recurring = setInterval(() => void syncOnce(), intervalMs);
@@ -17126,7 +17134,7 @@ function startForensicBroadcast() {
   const recurring = setInterval(() => void tick(), FORENSIC_BROADCAST_INTERVAL_MS);
   recurring.unref();
 }
-var import_fs32, import_https4, import_os29, import_path31, FINDING_TO_SIGNAL3, rulesCacheFile, DEFAULT_API_URL, DEFAULT_INTERVAL_HOURS, MIN_INTERVAL_HOURS, FORENSIC_BROADCAST_INTERVAL_MS, FORENSIC_INITIAL_DELAY_MS, forensicBroadcastOffsets;
+var import_fs32, import_https4, import_os29, import_path31, FINDING_TO_SIGNAL3, rulesCacheFile, DEFAULT_API_URL, DEFAULT_INTERVAL_HOURS, MIN_INTERVAL_SECONDS, MAX_INTERVAL_SECONDS, FORENSIC_BROADCAST_INTERVAL_MS, FORENSIC_INITIAL_DELAY_MS, forensicBroadcastOffsets;
 var init_sync = __esm({
   "src/daemon/sync.ts"() {
     "use strict";
@@ -17160,7 +17168,8 @@ var init_sync = __esm({
     rulesCacheFile = () => import_path31.default.join(import_os29.default.homedir(), ".node9", "rules-cache.json");
     DEFAULT_API_URL = "https://api.node9.ai/api/v1/intercept/policies/sync";
     DEFAULT_INTERVAL_HOURS = 5;
-    MIN_INTERVAL_HOURS = 1;
+    MIN_INTERVAL_SECONDS = 15;
+    MAX_INTERVAL_SECONDS = 24 * 60 * 60;
     FORENSIC_BROADCAST_INTERVAL_MS = 3e4;
     FORENSIC_INITIAL_DELAY_MS = 5e3;
     forensicBroadcastOffsets = /* @__PURE__ */ new Map();

package/dist/cli.mjs

@@ -315,6 +315,11 @@ var init_config_schema = __esm({
         // must run them from the CLI. node9's threat model is the agent itself.
         mcpAllowWeakening: z.boolean().optional(),
         cloudSyncIntervalHours: z.number().positive().optional(),
+        // Seconds-granular override for the cloud policy sync cadence. Wins over
+        // cloudSyncIntervalHours when set. Lets you opt into fast apply (e.g. 20)
+        // for an incident; clamped to a 15s floor so it can't hammer the API.
+        // Unset → falls back to hours, then the 5h default.
+        cloudSyncIntervalSeconds: z.number().positive().optional(),
         // Outbox shipper (audit.log → SaaS batch ingest). enabled defaults
         // to true; set false to fall back to local-only auditing.
         shipper: z.object({
@@ -16751,6 +16756,11 @@ function buildSessionDeltas(findings, toolCallsBySession) {
     signals
   }));
 }
+function resolveSyncIntervalMs(settings) {
+  const rawSeconds = settings.cloudSyncIntervalSeconds ?? (settings.cloudSyncIntervalHours ?? DEFAULT_INTERVAL_HOURS) * 3600;
+  const clamped = Math.min(Math.max(rawSeconds, MIN_INTERVAL_SECONDS), MAX_INTERVAL_SECONDS);
+  return clamped * 1e3;
+}
 function readCredentials() {
   if (process.env.NODE9_API_KEY) {
     return {
@@ -17073,9 +17083,7 @@ function getCloudRules() {
   }
 }
 function startCloudSync() {
-  const rawHours = getConfig().settings.cloudSyncIntervalHours ?? DEFAULT_INTERVAL_HOURS;
-  const intervalHours = Math.max(rawHours, MIN_INTERVAL_HOURS);
-  const intervalMs = intervalHours * 60 * 60 * 1e3;
+  const intervalMs = resolveSyncIntervalMs(getConfig().settings);
   const initial = setTimeout(() => void syncOnce(), 3e4);
   initial.unref();
   const recurring = setInterval(() => void syncOnce(), intervalMs);
@@ -17100,7 +17108,7 @@ function startForensicBroadcast() {
   const recurring = setInterval(() => void tick(), FORENSIC_BROADCAST_INTERVAL_MS);
   recurring.unref();
 }
-var FINDING_TO_SIGNAL3, rulesCacheFile, DEFAULT_API_URL, DEFAULT_INTERVAL_HOURS, MIN_INTERVAL_HOURS, FORENSIC_BROADCAST_INTERVAL_MS, FORENSIC_INITIAL_DELAY_MS, forensicBroadcastOffsets;
+var FINDING_TO_SIGNAL3, rulesCacheFile, DEFAULT_API_URL, DEFAULT_INTERVAL_HOURS, MIN_INTERVAL_SECONDS, MAX_INTERVAL_SECONDS, FORENSIC_BROADCAST_INTERVAL_MS, FORENSIC_INITIAL_DELAY_MS, forensicBroadcastOffsets;
 var init_sync = __esm({
   "src/daemon/sync.ts"() {
     "use strict";
@@ -17130,7 +17138,8 @@ var init_sync = __esm({
     rulesCacheFile = () => path31.join(os29.homedir(), ".node9", "rules-cache.json");
     DEFAULT_API_URL = "https://api.node9.ai/api/v1/intercept/policies/sync";
     DEFAULT_INTERVAL_HOURS = 5;
-    MIN_INTERVAL_HOURS = 1;
+    MIN_INTERVAL_SECONDS = 15;
+    MAX_INTERVAL_SECONDS = 24 * 60 * 60;
     FORENSIC_BROADCAST_INTERVAL_MS = 3e4;
     FORENSIC_INITIAL_DELAY_MS = 5e3;
     forensicBroadcastOffsets = /* @__PURE__ */ new Map();

package/dist/dashboard.mjs

@@ -2280,6 +2280,11 @@ var init_config_schema = __esm({
         // must run them from the CLI. node9's threat model is the agent itself.
         mcpAllowWeakening: z.boolean().optional(),
         cloudSyncIntervalHours: z.number().positive().optional(),
+        // Seconds-granular override for the cloud policy sync cadence. Wins over
+        // cloudSyncIntervalHours when set. Lets you opt into fast apply (e.g. 20)
+        // for an incident; clamped to a 15s floor so it can't hammer the API.
+        // Unset → falls back to hours, then the 5h default.
+        cloudSyncIntervalSeconds: z.number().positive().optional(),
         // Outbox shipper (audit.log → SaaS batch ingest). enabled defaults
         // to true; set false to fall back to local-only auditing.
         shipper: z.object({

package/dist/index.js

@@ -322,6 +322,11 @@ var ConfigFileSchema = import_zod.z.object({
     // must run them from the CLI. node9's threat model is the agent itself.
     mcpAllowWeakening: import_zod.z.boolean().optional(),
     cloudSyncIntervalHours: import_zod.z.number().positive().optional(),
+    // Seconds-granular override for the cloud policy sync cadence. Wins over
+    // cloudSyncIntervalHours when set. Lets you opt into fast apply (e.g. 20)
+    // for an incident; clamped to a 15s floor so it can't hammer the API.
+    // Unset → falls back to hours, then the 5h default.
+    cloudSyncIntervalSeconds: import_zod.z.number().positive().optional(),
     // Outbox shipper (audit.log → SaaS batch ingest). enabled defaults
     // to true; set false to fall back to local-only auditing.
     shipper: import_zod.z.object({

package/dist/index.mjs

@@ -292,6 +292,11 @@ var ConfigFileSchema = z.object({
     // must run them from the CLI. node9's threat model is the agent itself.
     mcpAllowWeakening: z.boolean().optional(),
     cloudSyncIntervalHours: z.number().positive().optional(),
+    // Seconds-granular override for the cloud policy sync cadence. Wins over
+    // cloudSyncIntervalHours when set. Lets you opt into fast apply (e.g. 20)
+    // for an incident; clamped to a 15s floor so it can't hammer the API.
+    // Unset → falls back to hours, then the 5h default.
+    cloudSyncIntervalSeconds: z.number().positive().optional(),
     // Outbox shipper (audit.log → SaaS batch ingest). enabled defaults
     // to true; set false to fall back to local-only auditing.
     shipper: z.object({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.46.0",
+  "version": "1.47.0",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",