@node9/proxy 1.49.0 → 1.51.0

package/dist/cli.js

@@ -4217,19 +4217,54 @@ var init_shields = __esm({
 });
 
 // src/config/managed.ts
-function modeRank(mode) {
-  return MODE_ORDER.indexOf(mode);
+function rankIn(order, value) {
+  return order.indexOf(value);
 }
-function resolveManagedMode(local, cloud, locked) {
-  if (modeRank(cloud) === -1) return local;
+function resolveByOrder(order, local, cloud, locked) {
+  if (rankIn(order, cloud) === -1) return local;
   if (locked) return cloud;
-  return modeRank(local) > modeRank(cloud) ? local : cloud;
+  return rankIn(order, local) > rankIn(order, cloud) ? local : cloud;
+}
+function resolveManagedMode(local, cloud, locked) {
+  return resolveByOrder(MODE_ORDER, local, cloud, locked);
+}
+function applyManagedEgress(local, managed, locked) {
+  const next = { ...local };
+  if (typeof managed.enabled === "boolean") {
+    next.enabled = locked.includes("egressEnabled") ? managed.enabled : local.enabled || managed.enabled;
+  }
+  if (typeof managed.mode === "string") {
+    next.mode = resolveByOrder(
+      EGRESS_MODE_ORDER,
+      local.mode,
+      managed.mode,
+      locked.includes("egressMode")
+    );
+  }
+  return next;
+}
+function applyManagedDlp(local, managed, locked) {
+  const next = { ...local };
+  if (typeof managed.enabled === "boolean") {
+    next.enabled = locked.includes("dlpEnabled") ? managed.enabled : local.enabled || managed.enabled;
+  }
+  if (typeof managed.pii === "string") {
+    next.pii = resolveByOrder(
+      DLP_PII_ORDER,
+      local.pii ?? "off",
+      managed.pii,
+      locked.includes("dlpPii")
+    );
+  }
+  return next;
 }
-var MODE_ORDER;
+var MODE_ORDER, EGRESS_MODE_ORDER, DLP_PII_ORDER;
 var init_managed = __esm({
   "src/config/managed.ts"() {
     "use strict";
     MODE_ORDER = ["observe", "audit", "standard", "strict"];
+    EGRESS_MODE_ORDER = ["off", "review", "block"];
+    DLP_PII_ORDER = ["off", "block"];
   }
 });
 
@@ -4445,9 +4480,33 @@ function getConfig(cwd) {
       }
       if (raw.managedConfig && typeof raw.managedConfig === "object") {
         const mc = raw.managedConfig;
+        const locked = Array.isArray(mc.locked) ? mc.locked.filter((f) => typeof f === "string") : [];
         if (typeof mc.mode === "string") {
-          const locked = Array.isArray(mc.locked) && mc.locked.includes("mode");
-          mergedSettings.mode = resolveManagedMode(mergedSettings.mode, mc.mode, locked);
+          mergedSettings.mode = resolveManagedMode(
+            mergedSettings.mode,
+            mc.mode,
+            locked.includes("mode")
+          );
+        }
+        if (mc.egress && typeof mc.egress === "object") {
+          mergedPolicy.egress = applyManagedEgress(
+            mergedPolicy.egress,
+            {
+              enabled: typeof mc.egress.enabled === "boolean" ? mc.egress.enabled : void 0,
+              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0
+            },
+            locked
+          );
+        }
+        if (mc.dlp && typeof mc.dlp === "object") {
+          mergedPolicy.dlp = applyManagedDlp(
+            mergedPolicy.dlp,
+            {
+              enabled: typeof mc.dlp.enabled === "boolean" ? mc.dlp.enabled : void 0,
+              pii: typeof mc.dlp.pii === "string" ? mc.dlp.pii : void 0
+            },
+            locked
+          );
         }
       }
       if (raw.panicMode === true) {
@@ -16922,7 +16981,19 @@ function extractManagedConfig(body) {
     locked: Array.isArray(mc.locked) ? mc.locked.filter((f) => typeof f === "string") : []
   };
   if (typeof mc.mode === "string") out.mode = mc.mode;
-  return out.mode !== void 0 ? out : void 0;
+  if (mc.egress && typeof mc.egress === "object") {
+    const e = {};
+    if (typeof mc.egress.enabled === "boolean") e.enabled = mc.egress.enabled;
+    if (typeof mc.egress.mode === "string") e.mode = mc.egress.mode;
+    if (e.enabled !== void 0 || e.mode !== void 0) out.egress = e;
+  }
+  if (mc.dlp && typeof mc.dlp === "object") {
+    const d = {};
+    if (typeof mc.dlp.enabled === "boolean") d.enabled = mc.dlp.enabled;
+    if (typeof mc.dlp.pii === "string") d.pii = mc.dlp.pii;
+    if (d.enabled !== void 0 || d.pii !== void 0) out.dlp = d;
+  }
+  return out.mode !== void 0 || out.egress !== void 0 || out.dlp !== void 0 ? out : void 0;
 }
 function writeCache2(cache) {
   const dir = import_path31.default.dirname(rulesCacheFile());

package/dist/cli.mjs

@@ -4195,19 +4195,54 @@ var init_shields = __esm({
 });
 
 // src/config/managed.ts
-function modeRank(mode) {
-  return MODE_ORDER.indexOf(mode);
+function rankIn(order, value) {
+  return order.indexOf(value);
 }
-function resolveManagedMode(local, cloud, locked) {
-  if (modeRank(cloud) === -1) return local;
+function resolveByOrder(order, local, cloud, locked) {
+  if (rankIn(order, cloud) === -1) return local;
   if (locked) return cloud;
-  return modeRank(local) > modeRank(cloud) ? local : cloud;
+  return rankIn(order, local) > rankIn(order, cloud) ? local : cloud;
+}
+function resolveManagedMode(local, cloud, locked) {
+  return resolveByOrder(MODE_ORDER, local, cloud, locked);
+}
+function applyManagedEgress(local, managed, locked) {
+  const next = { ...local };
+  if (typeof managed.enabled === "boolean") {
+    next.enabled = locked.includes("egressEnabled") ? managed.enabled : local.enabled || managed.enabled;
+  }
+  if (typeof managed.mode === "string") {
+    next.mode = resolveByOrder(
+      EGRESS_MODE_ORDER,
+      local.mode,
+      managed.mode,
+      locked.includes("egressMode")
+    );
+  }
+  return next;
+}
+function applyManagedDlp(local, managed, locked) {
+  const next = { ...local };
+  if (typeof managed.enabled === "boolean") {
+    next.enabled = locked.includes("dlpEnabled") ? managed.enabled : local.enabled || managed.enabled;
+  }
+  if (typeof managed.pii === "string") {
+    next.pii = resolveByOrder(
+      DLP_PII_ORDER,
+      local.pii ?? "off",
+      managed.pii,
+      locked.includes("dlpPii")
+    );
+  }
+  return next;
 }
-var MODE_ORDER;
+var MODE_ORDER, EGRESS_MODE_ORDER, DLP_PII_ORDER;
 var init_managed = __esm({
   "src/config/managed.ts"() {
     "use strict";
     MODE_ORDER = ["observe", "audit", "standard", "strict"];
+    EGRESS_MODE_ORDER = ["off", "review", "block"];
+    DLP_PII_ORDER = ["off", "block"];
   }
 });
 
@@ -4426,9 +4461,33 @@ function getConfig(cwd) {
       }
       if (raw.managedConfig && typeof raw.managedConfig === "object") {
         const mc = raw.managedConfig;
+        const locked = Array.isArray(mc.locked) ? mc.locked.filter((f) => typeof f === "string") : [];
         if (typeof mc.mode === "string") {
-          const locked = Array.isArray(mc.locked) && mc.locked.includes("mode");
-          mergedSettings.mode = resolveManagedMode(mergedSettings.mode, mc.mode, locked);
+          mergedSettings.mode = resolveManagedMode(
+            mergedSettings.mode,
+            mc.mode,
+            locked.includes("mode")
+          );
+        }
+        if (mc.egress && typeof mc.egress === "object") {
+          mergedPolicy.egress = applyManagedEgress(
+            mergedPolicy.egress,
+            {
+              enabled: typeof mc.egress.enabled === "boolean" ? mc.egress.enabled : void 0,
+              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0
+            },
+            locked
+          );
+        }
+        if (mc.dlp && typeof mc.dlp === "object") {
+          mergedPolicy.dlp = applyManagedDlp(
+            mergedPolicy.dlp,
+            {
+              enabled: typeof mc.dlp.enabled === "boolean" ? mc.dlp.enabled : void 0,
+              pii: typeof mc.dlp.pii === "string" ? mc.dlp.pii : void 0
+            },
+            locked
+          );
         }
       }
       if (raw.panicMode === true) {
@@ -16896,7 +16955,19 @@ function extractManagedConfig(body) {
     locked: Array.isArray(mc.locked) ? mc.locked.filter((f) => typeof f === "string") : []
   };
   if (typeof mc.mode === "string") out.mode = mc.mode;
-  return out.mode !== void 0 ? out : void 0;
+  if (mc.egress && typeof mc.egress === "object") {
+    const e = {};
+    if (typeof mc.egress.enabled === "boolean") e.enabled = mc.egress.enabled;
+    if (typeof mc.egress.mode === "string") e.mode = mc.egress.mode;
+    if (e.enabled !== void 0 || e.mode !== void 0) out.egress = e;
+  }
+  if (mc.dlp && typeof mc.dlp === "object") {
+    const d = {};
+    if (typeof mc.dlp.enabled === "boolean") d.enabled = mc.dlp.enabled;
+    if (typeof mc.dlp.pii === "string") d.pii = mc.dlp.pii;
+    if (d.enabled !== void 0 || d.pii !== void 0) out.dlp = d;
+  }
+  return out.mode !== void 0 || out.egress !== void 0 || out.dlp !== void 0 ? out : void 0;
 }
 function writeCache2(cache) {
   const dir = path31.dirname(rulesCacheFile());

package/dist/index.js

@@ -3503,13 +3503,48 @@ function readShieldOverrides() {
 
 // src/config/managed.ts
 var MODE_ORDER = ["observe", "audit", "standard", "strict"];
-function modeRank(mode) {
-  return MODE_ORDER.indexOf(mode);
+var EGRESS_MODE_ORDER = ["off", "review", "block"];
+function rankIn(order, value) {
+  return order.indexOf(value);
 }
-function resolveManagedMode(local, cloud, locked) {
-  if (modeRank(cloud) === -1) return local;
+function resolveByOrder(order, local, cloud, locked) {
+  if (rankIn(order, cloud) === -1) return local;
   if (locked) return cloud;
-  return modeRank(local) > modeRank(cloud) ? local : cloud;
+  return rankIn(order, local) > rankIn(order, cloud) ? local : cloud;
+}
+function resolveManagedMode(local, cloud, locked) {
+  return resolveByOrder(MODE_ORDER, local, cloud, locked);
+}
+function applyManagedEgress(local, managed, locked) {
+  const next = { ...local };
+  if (typeof managed.enabled === "boolean") {
+    next.enabled = locked.includes("egressEnabled") ? managed.enabled : local.enabled || managed.enabled;
+  }
+  if (typeof managed.mode === "string") {
+    next.mode = resolveByOrder(
+      EGRESS_MODE_ORDER,
+      local.mode,
+      managed.mode,
+      locked.includes("egressMode")
+    );
+  }
+  return next;
+}
+var DLP_PII_ORDER = ["off", "block"];
+function applyManagedDlp(local, managed, locked) {
+  const next = { ...local };
+  if (typeof managed.enabled === "boolean") {
+    next.enabled = locked.includes("dlpEnabled") ? managed.enabled : local.enabled || managed.enabled;
+  }
+  if (typeof managed.pii === "string") {
+    next.pii = resolveByOrder(
+      DLP_PII_ORDER,
+      local.pii ?? "off",
+      managed.pii,
+      locked.includes("dlpPii")
+    );
+  }
+  return next;
 }
 
 // src/config/index.ts
@@ -3971,9 +4006,33 @@ function getConfig(cwd) {
       }
       if (raw.managedConfig && typeof raw.managedConfig === "object") {
         const mc = raw.managedConfig;
+        const locked = Array.isArray(mc.locked) ? mc.locked.filter((f) => typeof f === "string") : [];
         if (typeof mc.mode === "string") {
-          const locked = Array.isArray(mc.locked) && mc.locked.includes("mode");
-          mergedSettings.mode = resolveManagedMode(mergedSettings.mode, mc.mode, locked);
+          mergedSettings.mode = resolveManagedMode(
+            mergedSettings.mode,
+            mc.mode,
+            locked.includes("mode")
+          );
+        }
+        if (mc.egress && typeof mc.egress === "object") {
+          mergedPolicy.egress = applyManagedEgress(
+            mergedPolicy.egress,
+            {
+              enabled: typeof mc.egress.enabled === "boolean" ? mc.egress.enabled : void 0,
+              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0
+            },
+            locked
+          );
+        }
+        if (mc.dlp && typeof mc.dlp === "object") {
+          mergedPolicy.dlp = applyManagedDlp(
+            mergedPolicy.dlp,
+            {
+              enabled: typeof mc.dlp.enabled === "boolean" ? mc.dlp.enabled : void 0,
+              pii: typeof mc.dlp.pii === "string" ? mc.dlp.pii : void 0
+            },
+            locked
+          );
         }
       }
       if (raw.panicMode === true) {

package/dist/index.mjs

@@ -3473,13 +3473,48 @@ function readShieldOverrides() {
 
 // src/config/managed.ts
 var MODE_ORDER = ["observe", "audit", "standard", "strict"];
-function modeRank(mode) {
-  return MODE_ORDER.indexOf(mode);
+var EGRESS_MODE_ORDER = ["off", "review", "block"];
+function rankIn(order, value) {
+  return order.indexOf(value);
 }
-function resolveManagedMode(local, cloud, locked) {
-  if (modeRank(cloud) === -1) return local;
+function resolveByOrder(order, local, cloud, locked) {
+  if (rankIn(order, cloud) === -1) return local;
   if (locked) return cloud;
-  return modeRank(local) > modeRank(cloud) ? local : cloud;
+  return rankIn(order, local) > rankIn(order, cloud) ? local : cloud;
+}
+function resolveManagedMode(local, cloud, locked) {
+  return resolveByOrder(MODE_ORDER, local, cloud, locked);
+}
+function applyManagedEgress(local, managed, locked) {
+  const next = { ...local };
+  if (typeof managed.enabled === "boolean") {
+    next.enabled = locked.includes("egressEnabled") ? managed.enabled : local.enabled || managed.enabled;
+  }
+  if (typeof managed.mode === "string") {
+    next.mode = resolveByOrder(
+      EGRESS_MODE_ORDER,
+      local.mode,
+      managed.mode,
+      locked.includes("egressMode")
+    );
+  }
+  return next;
+}
+var DLP_PII_ORDER = ["off", "block"];
+function applyManagedDlp(local, managed, locked) {
+  const next = { ...local };
+  if (typeof managed.enabled === "boolean") {
+    next.enabled = locked.includes("dlpEnabled") ? managed.enabled : local.enabled || managed.enabled;
+  }
+  if (typeof managed.pii === "string") {
+    next.pii = resolveByOrder(
+      DLP_PII_ORDER,
+      local.pii ?? "off",
+      managed.pii,
+      locked.includes("dlpPii")
+    );
+  }
+  return next;
 }
 
 // src/config/index.ts
@@ -3941,9 +3976,33 @@ function getConfig(cwd) {
       }
       if (raw.managedConfig && typeof raw.managedConfig === "object") {
         const mc = raw.managedConfig;
+        const locked = Array.isArray(mc.locked) ? mc.locked.filter((f) => typeof f === "string") : [];
         if (typeof mc.mode === "string") {
-          const locked = Array.isArray(mc.locked) && mc.locked.includes("mode");
-          mergedSettings.mode = resolveManagedMode(mergedSettings.mode, mc.mode, locked);
+          mergedSettings.mode = resolveManagedMode(
+            mergedSettings.mode,
+            mc.mode,
+            locked.includes("mode")
+          );
+        }
+        if (mc.egress && typeof mc.egress === "object") {
+          mergedPolicy.egress = applyManagedEgress(
+            mergedPolicy.egress,
+            {
+              enabled: typeof mc.egress.enabled === "boolean" ? mc.egress.enabled : void 0,
+              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0
+            },
+            locked
+          );
+        }
+        if (mc.dlp && typeof mc.dlp === "object") {
+          mergedPolicy.dlp = applyManagedDlp(
+            mergedPolicy.dlp,
+            {
+              enabled: typeof mc.dlp.enabled === "boolean" ? mc.dlp.enabled : void 0,
+              pii: typeof mc.dlp.pii === "string" ? mc.dlp.pii : void 0
+            },
+            locked
+          );
         }
       }
       if (raw.panicMode === true) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.49.0",
+  "version": "1.51.0",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",