@node9/proxy 1.49.0 → 1.50.0

package/dist/cli.js

@@ -4217,19 +4217,38 @@ var init_shields = __esm({
 });
 
 // src/config/managed.ts
-function modeRank(mode) {
-  return MODE_ORDER.indexOf(mode);
+function rankIn(order, value) {
+  return order.indexOf(value);
 }
-function resolveManagedMode(local, cloud, locked) {
-  if (modeRank(cloud) === -1) return local;
+function resolveByOrder(order, local, cloud, locked) {
+  if (rankIn(order, cloud) === -1) return local;
   if (locked) return cloud;
-  return modeRank(local) > modeRank(cloud) ? local : cloud;
+  return rankIn(order, local) > rankIn(order, cloud) ? local : cloud;
+}
+function resolveManagedMode(local, cloud, locked) {
+  return resolveByOrder(MODE_ORDER, local, cloud, locked);
+}
+function applyManagedEgress(local, managed, locked) {
+  const next = { ...local };
+  if (typeof managed.enabled === "boolean") {
+    next.enabled = locked.includes("egressEnabled") ? managed.enabled : local.enabled || managed.enabled;
+  }
+  if (typeof managed.mode === "string") {
+    next.mode = resolveByOrder(
+      EGRESS_MODE_ORDER,
+      local.mode,
+      managed.mode,
+      locked.includes("egressMode")
+    );
+  }
+  return next;
 }
-var MODE_ORDER;
+var MODE_ORDER, EGRESS_MODE_ORDER;
 var init_managed = __esm({
   "src/config/managed.ts"() {
     "use strict";
     MODE_ORDER = ["observe", "audit", "standard", "strict"];
+    EGRESS_MODE_ORDER = ["off", "review", "block"];
   }
 });
 
@@ -4445,9 +4464,23 @@ function getConfig(cwd) {
       }
       if (raw.managedConfig && typeof raw.managedConfig === "object") {
         const mc = raw.managedConfig;
+        const locked = Array.isArray(mc.locked) ? mc.locked.filter((f) => typeof f === "string") : [];
         if (typeof mc.mode === "string") {
-          const locked = Array.isArray(mc.locked) && mc.locked.includes("mode");
-          mergedSettings.mode = resolveManagedMode(mergedSettings.mode, mc.mode, locked);
+          mergedSettings.mode = resolveManagedMode(
+            mergedSettings.mode,
+            mc.mode,
+            locked.includes("mode")
+          );
+        }
+        if (mc.egress && typeof mc.egress === "object") {
+          mergedPolicy.egress = applyManagedEgress(
+            mergedPolicy.egress,
+            {
+              enabled: typeof mc.egress.enabled === "boolean" ? mc.egress.enabled : void 0,
+              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0
+            },
+            locked
+          );
         }
       }
       if (raw.panicMode === true) {
@@ -16922,7 +16955,13 @@ function extractManagedConfig(body) {
     locked: Array.isArray(mc.locked) ? mc.locked.filter((f) => typeof f === "string") : []
   };
   if (typeof mc.mode === "string") out.mode = mc.mode;
-  return out.mode !== void 0 ? out : void 0;
+  if (mc.egress && typeof mc.egress === "object") {
+    const e = {};
+    if (typeof mc.egress.enabled === "boolean") e.enabled = mc.egress.enabled;
+    if (typeof mc.egress.mode === "string") e.mode = mc.egress.mode;
+    if (e.enabled !== void 0 || e.mode !== void 0) out.egress = e;
+  }
+  return out.mode !== void 0 || out.egress !== void 0 ? out : void 0;
 }
 function writeCache2(cache) {
   const dir = import_path31.default.dirname(rulesCacheFile());

package/dist/cli.mjs

@@ -4195,19 +4195,38 @@ var init_shields = __esm({
 });
 
 // src/config/managed.ts
-function modeRank(mode) {
-  return MODE_ORDER.indexOf(mode);
+function rankIn(order, value) {
+  return order.indexOf(value);
 }
-function resolveManagedMode(local, cloud, locked) {
-  if (modeRank(cloud) === -1) return local;
+function resolveByOrder(order, local, cloud, locked) {
+  if (rankIn(order, cloud) === -1) return local;
   if (locked) return cloud;
-  return modeRank(local) > modeRank(cloud) ? local : cloud;
+  return rankIn(order, local) > rankIn(order, cloud) ? local : cloud;
+}
+function resolveManagedMode(local, cloud, locked) {
+  return resolveByOrder(MODE_ORDER, local, cloud, locked);
+}
+function applyManagedEgress(local, managed, locked) {
+  const next = { ...local };
+  if (typeof managed.enabled === "boolean") {
+    next.enabled = locked.includes("egressEnabled") ? managed.enabled : local.enabled || managed.enabled;
+  }
+  if (typeof managed.mode === "string") {
+    next.mode = resolveByOrder(
+      EGRESS_MODE_ORDER,
+      local.mode,
+      managed.mode,
+      locked.includes("egressMode")
+    );
+  }
+  return next;
 }
-var MODE_ORDER;
+var MODE_ORDER, EGRESS_MODE_ORDER;
 var init_managed = __esm({
   "src/config/managed.ts"() {
     "use strict";
     MODE_ORDER = ["observe", "audit", "standard", "strict"];
+    EGRESS_MODE_ORDER = ["off", "review", "block"];
   }
 });
 
@@ -4426,9 +4445,23 @@ function getConfig(cwd) {
       }
       if (raw.managedConfig && typeof raw.managedConfig === "object") {
         const mc = raw.managedConfig;
+        const locked = Array.isArray(mc.locked) ? mc.locked.filter((f) => typeof f === "string") : [];
         if (typeof mc.mode === "string") {
-          const locked = Array.isArray(mc.locked) && mc.locked.includes("mode");
-          mergedSettings.mode = resolveManagedMode(mergedSettings.mode, mc.mode, locked);
+          mergedSettings.mode = resolveManagedMode(
+            mergedSettings.mode,
+            mc.mode,
+            locked.includes("mode")
+          );
+        }
+        if (mc.egress && typeof mc.egress === "object") {
+          mergedPolicy.egress = applyManagedEgress(
+            mergedPolicy.egress,
+            {
+              enabled: typeof mc.egress.enabled === "boolean" ? mc.egress.enabled : void 0,
+              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0
+            },
+            locked
+          );
         }
       }
       if (raw.panicMode === true) {
@@ -16896,7 +16929,13 @@ function extractManagedConfig(body) {
     locked: Array.isArray(mc.locked) ? mc.locked.filter((f) => typeof f === "string") : []
   };
   if (typeof mc.mode === "string") out.mode = mc.mode;
-  return out.mode !== void 0 ? out : void 0;
+  if (mc.egress && typeof mc.egress === "object") {
+    const e = {};
+    if (typeof mc.egress.enabled === "boolean") e.enabled = mc.egress.enabled;
+    if (typeof mc.egress.mode === "string") e.mode = mc.egress.mode;
+    if (e.enabled !== void 0 || e.mode !== void 0) out.egress = e;
+  }
+  return out.mode !== void 0 || out.egress !== void 0 ? out : void 0;
 }
 function writeCache2(cache) {
   const dir = path31.dirname(rulesCacheFile());

package/dist/index.js

@@ -3503,13 +3503,32 @@ function readShieldOverrides() {
 
 // src/config/managed.ts
 var MODE_ORDER = ["observe", "audit", "standard", "strict"];
-function modeRank(mode) {
-  return MODE_ORDER.indexOf(mode);
+var EGRESS_MODE_ORDER = ["off", "review", "block"];
+function rankIn(order, value) {
+  return order.indexOf(value);
 }
-function resolveManagedMode(local, cloud, locked) {
-  if (modeRank(cloud) === -1) return local;
+function resolveByOrder(order, local, cloud, locked) {
+  if (rankIn(order, cloud) === -1) return local;
   if (locked) return cloud;
-  return modeRank(local) > modeRank(cloud) ? local : cloud;
+  return rankIn(order, local) > rankIn(order, cloud) ? local : cloud;
+}
+function resolveManagedMode(local, cloud, locked) {
+  return resolveByOrder(MODE_ORDER, local, cloud, locked);
+}
+function applyManagedEgress(local, managed, locked) {
+  const next = { ...local };
+  if (typeof managed.enabled === "boolean") {
+    next.enabled = locked.includes("egressEnabled") ? managed.enabled : local.enabled || managed.enabled;
+  }
+  if (typeof managed.mode === "string") {
+    next.mode = resolveByOrder(
+      EGRESS_MODE_ORDER,
+      local.mode,
+      managed.mode,
+      locked.includes("egressMode")
+    );
+  }
+  return next;
 }
 
 // src/config/index.ts
@@ -3971,9 +3990,23 @@ function getConfig(cwd) {
       }
       if (raw.managedConfig && typeof raw.managedConfig === "object") {
         const mc = raw.managedConfig;
+        const locked = Array.isArray(mc.locked) ? mc.locked.filter((f) => typeof f === "string") : [];
         if (typeof mc.mode === "string") {
-          const locked = Array.isArray(mc.locked) && mc.locked.includes("mode");
-          mergedSettings.mode = resolveManagedMode(mergedSettings.mode, mc.mode, locked);
+          mergedSettings.mode = resolveManagedMode(
+            mergedSettings.mode,
+            mc.mode,
+            locked.includes("mode")
+          );
+        }
+        if (mc.egress && typeof mc.egress === "object") {
+          mergedPolicy.egress = applyManagedEgress(
+            mergedPolicy.egress,
+            {
+              enabled: typeof mc.egress.enabled === "boolean" ? mc.egress.enabled : void 0,
+              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0
+            },
+            locked
+          );
         }
       }
       if (raw.panicMode === true) {

package/dist/index.mjs

@@ -3473,13 +3473,32 @@ function readShieldOverrides() {
 
 // src/config/managed.ts
 var MODE_ORDER = ["observe", "audit", "standard", "strict"];
-function modeRank(mode) {
-  return MODE_ORDER.indexOf(mode);
+var EGRESS_MODE_ORDER = ["off", "review", "block"];
+function rankIn(order, value) {
+  return order.indexOf(value);
 }
-function resolveManagedMode(local, cloud, locked) {
-  if (modeRank(cloud) === -1) return local;
+function resolveByOrder(order, local, cloud, locked) {
+  if (rankIn(order, cloud) === -1) return local;
   if (locked) return cloud;
-  return modeRank(local) > modeRank(cloud) ? local : cloud;
+  return rankIn(order, local) > rankIn(order, cloud) ? local : cloud;
+}
+function resolveManagedMode(local, cloud, locked) {
+  return resolveByOrder(MODE_ORDER, local, cloud, locked);
+}
+function applyManagedEgress(local, managed, locked) {
+  const next = { ...local };
+  if (typeof managed.enabled === "boolean") {
+    next.enabled = locked.includes("egressEnabled") ? managed.enabled : local.enabled || managed.enabled;
+  }
+  if (typeof managed.mode === "string") {
+    next.mode = resolveByOrder(
+      EGRESS_MODE_ORDER,
+      local.mode,
+      managed.mode,
+      locked.includes("egressMode")
+    );
+  }
+  return next;
 }
 
 // src/config/index.ts
@@ -3941,9 +3960,23 @@ function getConfig(cwd) {
       }
       if (raw.managedConfig && typeof raw.managedConfig === "object") {
         const mc = raw.managedConfig;
+        const locked = Array.isArray(mc.locked) ? mc.locked.filter((f) => typeof f === "string") : [];
         if (typeof mc.mode === "string") {
-          const locked = Array.isArray(mc.locked) && mc.locked.includes("mode");
-          mergedSettings.mode = resolveManagedMode(mergedSettings.mode, mc.mode, locked);
+          mergedSettings.mode = resolveManagedMode(
+            mergedSettings.mode,
+            mc.mode,
+            locked.includes("mode")
+          );
+        }
+        if (mc.egress && typeof mc.egress === "object") {
+          mergedPolicy.egress = applyManagedEgress(
+            mergedPolicy.egress,
+            {
+              enabled: typeof mc.egress.enabled === "boolean" ? mc.egress.enabled : void 0,
+              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0
+            },
+            locked
+          );
         }
       }
       if (raw.panicMode === true) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.49.0",
+  "version": "1.50.0",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",