@node9/proxy 1.48.0 → 1.50.0

package/dist/cli.js

@@ -4216,6 +4216,42 @@ var init_shields = __esm({
   }
 });
 
+// src/config/managed.ts
+function rankIn(order, value) {
+  return order.indexOf(value);
+}
+function resolveByOrder(order, local, cloud, locked) {
+  if (rankIn(order, cloud) === -1) return local;
+  if (locked) return cloud;
+  return rankIn(order, local) > rankIn(order, cloud) ? local : cloud;
+}
+function resolveManagedMode(local, cloud, locked) {
+  return resolveByOrder(MODE_ORDER, local, cloud, locked);
+}
+function applyManagedEgress(local, managed, locked) {
+  const next = { ...local };
+  if (typeof managed.enabled === "boolean") {
+    next.enabled = locked.includes("egressEnabled") ? managed.enabled : local.enabled || managed.enabled;
+  }
+  if (typeof managed.mode === "string") {
+    next.mode = resolveByOrder(
+      EGRESS_MODE_ORDER,
+      local.mode,
+      managed.mode,
+      locked.includes("egressMode")
+    );
+  }
+  return next;
+}
+var MODE_ORDER, EGRESS_MODE_ORDER;
+var init_managed = __esm({
+  "src/config/managed.ts"() {
+    "use strict";
+    MODE_ORDER = ["observe", "audit", "standard", "strict"];
+    EGRESS_MODE_ORDER = ["off", "review", "block"];
+  }
+});
+
 // src/config/index.ts
 function _resetConfigCache() {
   cachedConfig = null;
@@ -4426,6 +4462,27 @@ function getConfig(cwd) {
       if (Array.isArray(raw.shields)) {
         cloudManagedShields = raw.shields.filter((s) => typeof s === "string");
       }
+      if (raw.managedConfig && typeof raw.managedConfig === "object") {
+        const mc = raw.managedConfig;
+        const locked = Array.isArray(mc.locked) ? mc.locked.filter((f) => typeof f === "string") : [];
+        if (typeof mc.mode === "string") {
+          mergedSettings.mode = resolveManagedMode(
+            mergedSettings.mode,
+            mc.mode,
+            locked.includes("mode")
+          );
+        }
+        if (mc.egress && typeof mc.egress === "object") {
+          mergedPolicy.egress = applyManagedEgress(
+            mergedPolicy.egress,
+            {
+              enabled: typeof mc.egress.enabled === "boolean" ? mc.egress.enabled : void 0,
+              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0
+            },
+            locked
+          );
+        }
+      }
       if (raw.panicMode === true) {
         mergedSettings.panicMode = true;
       }
@@ -4537,6 +4594,7 @@ var init_config = __esm({
     import_os3 = __toESM(require("os"));
     init_config_schema();
     init_shields();
+    init_managed();
     DANGEROUS_WORDS = [
       "mkfs",
       // formats/wipes a filesystem partition
@@ -16890,6 +16948,21 @@ function extractRules(body) {
 function extractShields(body) {
   return Array.isArray(body.shields) ? body.shields.filter((s) => typeof s === "string") : [];
 }
+function extractManagedConfig(body) {
+  const mc = body.managedConfig;
+  if (!mc || typeof mc !== "object") return void 0;
+  const out = {
+    locked: Array.isArray(mc.locked) ? mc.locked.filter((f) => typeof f === "string") : []
+  };
+  if (typeof mc.mode === "string") out.mode = mc.mode;
+  if (mc.egress && typeof mc.egress === "object") {
+    const e = {};
+    if (typeof mc.egress.enabled === "boolean") e.enabled = mc.egress.enabled;
+    if (typeof mc.egress.mode === "string") e.mode = mc.egress.mode;
+    if (e.enabled !== void 0 || e.mode !== void 0) out.egress = e;
+  }
+  return out.mode !== void 0 || out.egress !== void 0 ? out : void 0;
+}
 function writeCache2(cache) {
   const dir = import_path31.default.dirname(rulesCacheFile());
   if (!import_fs32.default.existsSync(dir)) import_fs32.default.mkdirSync(dir, { recursive: true });
@@ -16910,7 +16983,8 @@ async function syncOnce() {
         shadowMode: result.body.shadowMode,
         syncIntervalHours: result.body.syncIntervalHours,
         workspaceId: result.body.workspaceId,
-        shields: extractShields(result.body)
+        shields: extractShields(result.body),
+        managedConfig: extractManagedConfig(result.body)
       };
       writeCache2(cache);
     }
@@ -17083,7 +17157,8 @@ async function runCloudSync() {
       shadowMode: result.body.shadowMode,
       syncIntervalHours: result.body.syncIntervalHours,
       workspaceId: result.body.workspaceId,
-      shields: extractShields(result.body)
+      shields: extractShields(result.body),
+      managedConfig: extractManagedConfig(result.body)
     };
     writeCache2(cache);
     maybePushBlast();

package/dist/cli.mjs

@@ -4194,6 +4194,42 @@ var init_shields = __esm({
   }
 });
 
+// src/config/managed.ts
+function rankIn(order, value) {
+  return order.indexOf(value);
+}
+function resolveByOrder(order, local, cloud, locked) {
+  if (rankIn(order, cloud) === -1) return local;
+  if (locked) return cloud;
+  return rankIn(order, local) > rankIn(order, cloud) ? local : cloud;
+}
+function resolveManagedMode(local, cloud, locked) {
+  return resolveByOrder(MODE_ORDER, local, cloud, locked);
+}
+function applyManagedEgress(local, managed, locked) {
+  const next = { ...local };
+  if (typeof managed.enabled === "boolean") {
+    next.enabled = locked.includes("egressEnabled") ? managed.enabled : local.enabled || managed.enabled;
+  }
+  if (typeof managed.mode === "string") {
+    next.mode = resolveByOrder(
+      EGRESS_MODE_ORDER,
+      local.mode,
+      managed.mode,
+      locked.includes("egressMode")
+    );
+  }
+  return next;
+}
+var MODE_ORDER, EGRESS_MODE_ORDER;
+var init_managed = __esm({
+  "src/config/managed.ts"() {
+    "use strict";
+    MODE_ORDER = ["observe", "audit", "standard", "strict"];
+    EGRESS_MODE_ORDER = ["off", "review", "block"];
+  }
+});
+
 // src/config/index.ts
 import fs3 from "fs";
 import path3 from "path";
@@ -4407,6 +4443,27 @@ function getConfig(cwd) {
       if (Array.isArray(raw.shields)) {
         cloudManagedShields = raw.shields.filter((s) => typeof s === "string");
       }
+      if (raw.managedConfig && typeof raw.managedConfig === "object") {
+        const mc = raw.managedConfig;
+        const locked = Array.isArray(mc.locked) ? mc.locked.filter((f) => typeof f === "string") : [];
+        if (typeof mc.mode === "string") {
+          mergedSettings.mode = resolveManagedMode(
+            mergedSettings.mode,
+            mc.mode,
+            locked.includes("mode")
+          );
+        }
+        if (mc.egress && typeof mc.egress === "object") {
+          mergedPolicy.egress = applyManagedEgress(
+            mergedPolicy.egress,
+            {
+              enabled: typeof mc.egress.enabled === "boolean" ? mc.egress.enabled : void 0,
+              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0
+            },
+            locked
+          );
+        }
+      }
       if (raw.panicMode === true) {
         mergedSettings.panicMode = true;
       }
@@ -4515,6 +4572,7 @@ var init_config = __esm({
     "use strict";
     init_config_schema();
     init_shields();
+    init_managed();
     DANGEROUS_WORDS = [
       "mkfs",
       // formats/wipes a filesystem partition
@@ -16864,6 +16922,21 @@ function extractRules(body) {
 function extractShields(body) {
   return Array.isArray(body.shields) ? body.shields.filter((s) => typeof s === "string") : [];
 }
+function extractManagedConfig(body) {
+  const mc = body.managedConfig;
+  if (!mc || typeof mc !== "object") return void 0;
+  const out = {
+    locked: Array.isArray(mc.locked) ? mc.locked.filter((f) => typeof f === "string") : []
+  };
+  if (typeof mc.mode === "string") out.mode = mc.mode;
+  if (mc.egress && typeof mc.egress === "object") {
+    const e = {};
+    if (typeof mc.egress.enabled === "boolean") e.enabled = mc.egress.enabled;
+    if (typeof mc.egress.mode === "string") e.mode = mc.egress.mode;
+    if (e.enabled !== void 0 || e.mode !== void 0) out.egress = e;
+  }
+  return out.mode !== void 0 || out.egress !== void 0 ? out : void 0;
+}
 function writeCache2(cache) {
   const dir = path31.dirname(rulesCacheFile());
   if (!fs32.existsSync(dir)) fs32.mkdirSync(dir, { recursive: true });
@@ -16884,7 +16957,8 @@ async function syncOnce() {
         shadowMode: result.body.shadowMode,
         syncIntervalHours: result.body.syncIntervalHours,
         workspaceId: result.body.workspaceId,
-        shields: extractShields(result.body)
+        shields: extractShields(result.body),
+        managedConfig: extractManagedConfig(result.body)
       };
       writeCache2(cache);
     }
@@ -17057,7 +17131,8 @@ async function runCloudSync() {
       shadowMode: result.body.shadowMode,
       syncIntervalHours: result.body.syncIntervalHours,
       workspaceId: result.body.workspaceId,
-      shields: extractShields(result.body)
+      shields: extractShields(result.body),
+      managedConfig: extractManagedConfig(result.body)
     };
     writeCache2(cache);
     maybePushBlast();

package/dist/dashboard.mjs

@@ -2412,6 +2412,13 @@ var init_shields = __esm({
   }
 });
 
+// src/config/managed.ts
+var init_managed = __esm({
+  "src/config/managed.ts"() {
+    "use strict";
+  }
+});
+
 // src/config/index.ts
 var DANGEROUS_WORDS, DEFAULT_CONFIG;
 var init_config = __esm({
@@ -2419,6 +2426,7 @@ var init_config = __esm({
     "use strict";
     init_config_schema();
     init_shields();
+    init_managed();
     DANGEROUS_WORDS = [
       "mkfs",
       // formats/wipes a filesystem partition

package/dist/index.js

@@ -3501,6 +3501,36 @@ function readShieldOverrides() {
   return readShieldsFile().overrides ?? {};
 }
 
+// src/config/managed.ts
+var MODE_ORDER = ["observe", "audit", "standard", "strict"];
+var EGRESS_MODE_ORDER = ["off", "review", "block"];
+function rankIn(order, value) {
+  return order.indexOf(value);
+}
+function resolveByOrder(order, local, cloud, locked) {
+  if (rankIn(order, cloud) === -1) return local;
+  if (locked) return cloud;
+  return rankIn(order, local) > rankIn(order, cloud) ? local : cloud;
+}
+function resolveManagedMode(local, cloud, locked) {
+  return resolveByOrder(MODE_ORDER, local, cloud, locked);
+}
+function applyManagedEgress(local, managed, locked) {
+  const next = { ...local };
+  if (typeof managed.enabled === "boolean") {
+    next.enabled = locked.includes("egressEnabled") ? managed.enabled : local.enabled || managed.enabled;
+  }
+  if (typeof managed.mode === "string") {
+    next.mode = resolveByOrder(
+      EGRESS_MODE_ORDER,
+      local.mode,
+      managed.mode,
+      locked.includes("egressMode")
+    );
+  }
+  return next;
+}
+
 // src/config/index.ts
 var DANGEROUS_WORDS = [
   "mkfs",
@@ -3958,6 +3988,27 @@ function getConfig(cwd) {
       if (Array.isArray(raw.shields)) {
         cloudManagedShields = raw.shields.filter((s) => typeof s === "string");
       }
+      if (raw.managedConfig && typeof raw.managedConfig === "object") {
+        const mc = raw.managedConfig;
+        const locked = Array.isArray(mc.locked) ? mc.locked.filter((f) => typeof f === "string") : [];
+        if (typeof mc.mode === "string") {
+          mergedSettings.mode = resolveManagedMode(
+            mergedSettings.mode,
+            mc.mode,
+            locked.includes("mode")
+          );
+        }
+        if (mc.egress && typeof mc.egress === "object") {
+          mergedPolicy.egress = applyManagedEgress(
+            mergedPolicy.egress,
+            {
+              enabled: typeof mc.egress.enabled === "boolean" ? mc.egress.enabled : void 0,
+              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0
+            },
+            locked
+          );
+        }
+      }
       if (raw.panicMode === true) {
         mergedSettings.panicMode = true;
       }

package/dist/index.mjs

@@ -3471,6 +3471,36 @@ function readShieldOverrides() {
   return readShieldsFile().overrides ?? {};
 }
 
+// src/config/managed.ts
+var MODE_ORDER = ["observe", "audit", "standard", "strict"];
+var EGRESS_MODE_ORDER = ["off", "review", "block"];
+function rankIn(order, value) {
+  return order.indexOf(value);
+}
+function resolveByOrder(order, local, cloud, locked) {
+  if (rankIn(order, cloud) === -1) return local;
+  if (locked) return cloud;
+  return rankIn(order, local) > rankIn(order, cloud) ? local : cloud;
+}
+function resolveManagedMode(local, cloud, locked) {
+  return resolveByOrder(MODE_ORDER, local, cloud, locked);
+}
+function applyManagedEgress(local, managed, locked) {
+  const next = { ...local };
+  if (typeof managed.enabled === "boolean") {
+    next.enabled = locked.includes("egressEnabled") ? managed.enabled : local.enabled || managed.enabled;
+  }
+  if (typeof managed.mode === "string") {
+    next.mode = resolveByOrder(
+      EGRESS_MODE_ORDER,
+      local.mode,
+      managed.mode,
+      locked.includes("egressMode")
+    );
+  }
+  return next;
+}
+
 // src/config/index.ts
 var DANGEROUS_WORDS = [
   "mkfs",
@@ -3928,6 +3958,27 @@ function getConfig(cwd) {
       if (Array.isArray(raw.shields)) {
         cloudManagedShields = raw.shields.filter((s) => typeof s === "string");
       }
+      if (raw.managedConfig && typeof raw.managedConfig === "object") {
+        const mc = raw.managedConfig;
+        const locked = Array.isArray(mc.locked) ? mc.locked.filter((f) => typeof f === "string") : [];
+        if (typeof mc.mode === "string") {
+          mergedSettings.mode = resolveManagedMode(
+            mergedSettings.mode,
+            mc.mode,
+            locked.includes("mode")
+          );
+        }
+        if (mc.egress && typeof mc.egress === "object") {
+          mergedPolicy.egress = applyManagedEgress(
+            mergedPolicy.egress,
+            {
+              enabled: typeof mc.egress.enabled === "boolean" ? mc.egress.enabled : void 0,
+              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0
+            },
+            locked
+          );
+        }
+      }
       if (raw.panicMode === true) {
         mergedSettings.panicMode = true;
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.48.0",
+  "version": "1.50.0",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",