@node9/proxy 1.53.0 → 1.55.0

package/dist/cli.js

@@ -4241,6 +4241,15 @@ function applyManagedEgress(local, managed, locked) {
       locked.includes("egressMode")
     );
   }
+  if (Array.isArray(managed.allow) && managed.allow.length > 0) {
+    next.allow = [...managed.allow];
+  }
+  if (Array.isArray(managed.deny) && managed.deny.length > 0) {
+    next.deny = [.../* @__PURE__ */ new Set([...local.deny ?? [], ...managed.deny])];
+  }
+  if (typeof managed.allowPrivate === "boolean") {
+    next.allowPrivate = locked.includes("egressAllowPrivate") ? managed.allowPrivate : (local.allowPrivate ?? true) && managed.allowPrivate;
+  }
   return next;
 }
 function applyManagedDlp(local, managed, locked) {
@@ -4489,11 +4498,15 @@ function getConfig(cwd) {
           );
         }
         if (mc.egress && typeof mc.egress === "object") {
+          const hosts = (v) => Array.isArray(v) ? v.filter((h) => typeof h === "string") : void 0;
           mergedPolicy.egress = applyManagedEgress(
             mergedPolicy.egress,
             {
               enabled: typeof mc.egress.enabled === "boolean" ? mc.egress.enabled : void 0,
-              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0
+              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0,
+              allow: hosts(mc.egress.allow),
+              deny: hosts(mc.egress.deny),
+              allowPrivate: typeof mc.egress.allowPrivate === "boolean" ? mc.egress.allowPrivate : void 0
             },
             locked
           );
@@ -8640,10 +8653,27 @@ function claudeDesktopConfigPath(homeDir2 = import_os12.default.homedir()) {
   }
   return null;
 }
-function binaryInPath(binary) {
+function opencodeConfigDir(home = import_os12.default.homedir()) {
+  const xdg = process.env.XDG_CONFIG_HOME;
+  const base = xdg && import_path15.default.isAbsolute(xdg) ? xdg : import_path15.default.join(home, ".config");
+  return import_path15.default.join(base, "opencode");
+}
+function commonBinDirs(home) {
+  return [
+    import_path15.default.join(home, ".local", "bin"),
+    import_path15.default.join(home, ".bun", "bin"),
+    import_path15.default.join(home, ".npm-global", "bin"),
+    "/usr/local/bin",
+    "/opt/homebrew/bin"
+  ];
+}
+function binaryInPath(binary, home = import_os12.default.homedir()) {
   const pathEnv = process.env.PATH ?? "";
-  for (const dir of pathEnv.split(import_path15.default.delimiter)) {
-    if (!dir) continue;
+  const dirs = [...pathEnv.split(import_path15.default.delimiter), ...commonBinDirs(home)];
+  const seen = /* @__PURE__ */ new Set();
+  for (const dir of dirs) {
+    if (!dir || seen.has(dir)) continue;
+    seen.add(dir);
     try {
       import_fs13.default.accessSync(import_path15.default.join(dir, binary), import_fs13.default.constants.X_OK);
       return true;
@@ -8677,35 +8707,36 @@ function detectAgents(homeDir2 = import_os12.default.homedir()) {
     // creates ~/.gemini/settings.json on first run; agy does not touch
     // it (it uses antigravity-cli/settings.json) — that file is the
     // legacy-CLI discriminator.
-    gemini: exists2(import_path15.default.join(homeDir2, ".gemini", "settings.json")) || binaryInPath("gemini"),
+    gemini: exists2(import_path15.default.join(homeDir2, ".gemini", "settings.json")) || binaryInPath("gemini", homeDir2),
     // agy creates ~/.gemini/antigravity-cli/ on first launch; the IDE
     // creates antigravity-ide/. PATH fallback covers installed-but-
     // never-launched (same class as opencode #186).
-    antigravity: exists2(import_path15.default.join(homeDir2, ".gemini", "antigravity-cli")) || exists2(import_path15.default.join(homeDir2, ".gemini", "antigravity-ide")) || binaryInPath("agy"),
+    antigravity: exists2(import_path15.default.join(homeDir2, ".gemini", "antigravity-cli")) || exists2(import_path15.default.join(homeDir2, ".gemini", "antigravity-ide")) || binaryInPath("agy", homeDir2),
     // GitHub Copilot CLI creates ~/.copilot on first launch; PATH
     // fallback covers installed-but-never-launched (same as opencode #186).
-    copilot: exists2(import_path15.default.join(homeDir2, ".copilot")) || binaryInPath("copilot"),
+    copilot: exists2(import_path15.default.join(homeDir2, ".copilot")) || binaryInPath("copilot", homeDir2),
     cursor: exists2(import_path15.default.join(homeDir2, ".cursor")),
     codex: exists2(import_path15.default.join(homeDir2, ".codex")),
     windsurf: exists2(import_path15.default.join(homeDir2, ".codeium", "windsurf")),
     vscode: exists2(import_path15.default.join(homeDir2, ".vscode")),
     claudeDesktop: desktopPath !== null && exists2(import_path15.default.dirname(desktopPath)),
-    // Opencode creates ~/.config/opencode lazily on first launch — fall back
-    // to a PATH lookup so installed-but-never-launched CLIs are still wired.
-    opencode: exists2(import_path15.default.join(homeDir2, ".config", "opencode")) || binaryInPath("opencode"),
+    // Opencode creates its config dir lazily on first launch — fall back to a
+    // PATH lookup so installed-but-never-launched CLIs are still wired. Config
+    // dir honors $XDG_CONFIG_HOME via opencodeConfigDir (#186, custom-XDG).
+    opencode: exists2(opencodeConfigDir(homeDir2)) || binaryInPath("opencode", homeDir2),
     // Pi (https://pi.dev): config dir is ~/.pi/agent (CONFIG_DIR_NAME=".pi"
     // + agentDir, verified against opensources/pi-main/packages/coding-agent/
     // src/config.ts:449,475). The Bun-compiled binary path may create this
     // dir lazily on first launch — same class of bug as opencode's #186
     // (design R6) — so fall back to PATH lookup for installed-but-never-
     // launched pi.
-    pi: exists2(import_path15.default.join(homeDir2, ".pi", "agent")) || binaryInPath("pi"),
+    pi: exists2(import_path15.default.join(homeDir2, ".pi", "agent")) || binaryInPath("pi", homeDir2),
     // Hermes Agent (https://github.com/NousResearch/hermes-agent): home dir
     // is $HERMES_HOME (default ~/.hermes) per hermes_constants.py:30. config.yaml
     // appears after `hermes setup` has run; the directory alone exists from
     // install time. PATH fallback covers the rare case where the user blew
     // away ~/.hermes but kept the binary.
-    hermes: exists2(hermesHomeDir(homeDir2)) || binaryInPath("hermes")
+    hermes: exists2(hermesHomeDir(homeDir2)) || binaryInPath("hermes", homeDir2)
   };
 }
 async function setupCursor() {
@@ -9358,7 +9389,7 @@ function node9Version() {
 async function setupOpencode() {
   seedMcpPinsIfMissing();
   const homeDir2 = import_os12.default.homedir();
-  const configDir = import_path15.default.join(homeDir2, ".config", "opencode");
+  const configDir = opencodeConfigDir(homeDir2);
   const pluginsDir = import_path15.default.join(configDir, "plugins");
   const configPath = import_path15.default.join(configDir, "opencode.json");
   const pluginPath = import_path15.default.join(pluginsDir, OPENCODE_PLUGIN_NAME);
@@ -9426,7 +9457,7 @@ async function setupOpencode() {
 }
 function teardownOpencode() {
   const homeDir2 = import_os12.default.homedir();
-  const configDir = import_path15.default.join(homeDir2, ".config", "opencode");
+  const configDir = opencodeConfigDir(homeDir2);
   const pluginsDir = import_path15.default.join(configDir, "plugins");
   const configPath = import_path15.default.join(configDir, "opencode.json");
   const pluginPath = import_path15.default.join(pluginsDir, OPENCODE_PLUGIN_NAME);
@@ -10068,8 +10099,8 @@ var init_agent_wiring = __esm({
         setupCommand: "node9 agents add opencode",
         hookFormat: "flat",
         hookEvents: [],
-        shimFile: (h) => import_path16.default.join(h, ".config", "opencode", "plugins", "node9.js"),
-        present: (h) => exists(import_path16.default.join(h, ".config", "opencode")) || exists(import_path16.default.join(h, ".config", "opencode", "plugins", "node9.js"))
+        shimFile: (h) => import_path16.default.join(opencodeConfigDir(h), "plugins", "node9.js"),
+        present: (h) => exists(opencodeConfigDir(h)) || exists(import_path16.default.join(opencodeConfigDir(h), "plugins", "node9.js"))
       },
       {
         id: "pi",
@@ -17031,7 +17062,17 @@ function extractManagedConfig(body) {
     const e = {};
     if (typeof mc.egress.enabled === "boolean") e.enabled = mc.egress.enabled;
     if (typeof mc.egress.mode === "string") e.mode = mc.egress.mode;
-    if (e.enabled !== void 0 || e.mode !== void 0) out.egress = e;
+    const cleanHosts = (v) => Array.isArray(v) ? v.filter((h) => typeof h === "string") : [];
+    const allow = cleanHosts(mc.egress.allow);
+    const deny = cleanHosts(mc.egress.deny);
+    if (allow.length) e.allow = allow;
+    if (deny.length) e.deny = deny;
+    if (typeof mc.egress.allowPrivate === "boolean") {
+      e.allowPrivate = mc.egress.allowPrivate;
+    }
+    if (e.enabled !== void 0 || e.mode !== void 0 || e.allow !== void 0 || e.deny !== void 0 || e.allowPrivate !== void 0) {
+      out.egress = e;
+    }
   }
   if (mc.dlp && typeof mc.dlp === "object") {
     const d = {};

package/dist/cli.mjs

@@ -4219,6 +4219,15 @@ function applyManagedEgress(local, managed, locked) {
       locked.includes("egressMode")
     );
   }
+  if (Array.isArray(managed.allow) && managed.allow.length > 0) {
+    next.allow = [...managed.allow];
+  }
+  if (Array.isArray(managed.deny) && managed.deny.length > 0) {
+    next.deny = [.../* @__PURE__ */ new Set([...local.deny ?? [], ...managed.deny])];
+  }
+  if (typeof managed.allowPrivate === "boolean") {
+    next.allowPrivate = locked.includes("egressAllowPrivate") ? managed.allowPrivate : (local.allowPrivate ?? true) && managed.allowPrivate;
+  }
   return next;
 }
 function applyManagedDlp(local, managed, locked) {
@@ -4470,11 +4479,15 @@ function getConfig(cwd) {
           );
         }
         if (mc.egress && typeof mc.egress === "object") {
+          const hosts = (v) => Array.isArray(v) ? v.filter((h) => typeof h === "string") : void 0;
           mergedPolicy.egress = applyManagedEgress(
             mergedPolicy.egress,
             {
               enabled: typeof mc.egress.enabled === "boolean" ? mc.egress.enabled : void 0,
-              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0
+              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0,
+              allow: hosts(mc.egress.allow),
+              deny: hosts(mc.egress.deny),
+              allowPrivate: typeof mc.egress.allowPrivate === "boolean" ? mc.egress.allowPrivate : void 0
             },
             locked
           );
@@ -8622,10 +8635,27 @@ function claudeDesktopConfigPath(homeDir2 = os12.homedir()) {
   }
   return null;
 }
-function binaryInPath(binary) {
+function opencodeConfigDir(home = os12.homedir()) {
+  const xdg = process.env.XDG_CONFIG_HOME;
+  const base = xdg && path15.isAbsolute(xdg) ? xdg : path15.join(home, ".config");
+  return path15.join(base, "opencode");
+}
+function commonBinDirs(home) {
+  return [
+    path15.join(home, ".local", "bin"),
+    path15.join(home, ".bun", "bin"),
+    path15.join(home, ".npm-global", "bin"),
+    "/usr/local/bin",
+    "/opt/homebrew/bin"
+  ];
+}
+function binaryInPath(binary, home = os12.homedir()) {
   const pathEnv = process.env.PATH ?? "";
-  for (const dir of pathEnv.split(path15.delimiter)) {
-    if (!dir) continue;
+  const dirs = [...pathEnv.split(path15.delimiter), ...commonBinDirs(home)];
+  const seen = /* @__PURE__ */ new Set();
+  for (const dir of dirs) {
+    if (!dir || seen.has(dir)) continue;
+    seen.add(dir);
     try {
       fs13.accessSync(path15.join(dir, binary), fs13.constants.X_OK);
       return true;
@@ -8659,35 +8689,36 @@ function detectAgents(homeDir2 = os12.homedir()) {
     // creates ~/.gemini/settings.json on first run; agy does not touch
     // it (it uses antigravity-cli/settings.json) — that file is the
     // legacy-CLI discriminator.
-    gemini: exists2(path15.join(homeDir2, ".gemini", "settings.json")) || binaryInPath("gemini"),
+    gemini: exists2(path15.join(homeDir2, ".gemini", "settings.json")) || binaryInPath("gemini", homeDir2),
     // agy creates ~/.gemini/antigravity-cli/ on first launch; the IDE
     // creates antigravity-ide/. PATH fallback covers installed-but-
     // never-launched (same class as opencode #186).
-    antigravity: exists2(path15.join(homeDir2, ".gemini", "antigravity-cli")) || exists2(path15.join(homeDir2, ".gemini", "antigravity-ide")) || binaryInPath("agy"),
+    antigravity: exists2(path15.join(homeDir2, ".gemini", "antigravity-cli")) || exists2(path15.join(homeDir2, ".gemini", "antigravity-ide")) || binaryInPath("agy", homeDir2),
     // GitHub Copilot CLI creates ~/.copilot on first launch; PATH
     // fallback covers installed-but-never-launched (same as opencode #186).
-    copilot: exists2(path15.join(homeDir2, ".copilot")) || binaryInPath("copilot"),
+    copilot: exists2(path15.join(homeDir2, ".copilot")) || binaryInPath("copilot", homeDir2),
     cursor: exists2(path15.join(homeDir2, ".cursor")),
     codex: exists2(path15.join(homeDir2, ".codex")),
     windsurf: exists2(path15.join(homeDir2, ".codeium", "windsurf")),
     vscode: exists2(path15.join(homeDir2, ".vscode")),
     claudeDesktop: desktopPath !== null && exists2(path15.dirname(desktopPath)),
-    // Opencode creates ~/.config/opencode lazily on first launch — fall back
-    // to a PATH lookup so installed-but-never-launched CLIs are still wired.
-    opencode: exists2(path15.join(homeDir2, ".config", "opencode")) || binaryInPath("opencode"),
+    // Opencode creates its config dir lazily on first launch — fall back to a
+    // PATH lookup so installed-but-never-launched CLIs are still wired. Config
+    // dir honors $XDG_CONFIG_HOME via opencodeConfigDir (#186, custom-XDG).
+    opencode: exists2(opencodeConfigDir(homeDir2)) || binaryInPath("opencode", homeDir2),
     // Pi (https://pi.dev): config dir is ~/.pi/agent (CONFIG_DIR_NAME=".pi"
     // + agentDir, verified against opensources/pi-main/packages/coding-agent/
     // src/config.ts:449,475). The Bun-compiled binary path may create this
     // dir lazily on first launch — same class of bug as opencode's #186
     // (design R6) — so fall back to PATH lookup for installed-but-never-
     // launched pi.
-    pi: exists2(path15.join(homeDir2, ".pi", "agent")) || binaryInPath("pi"),
+    pi: exists2(path15.join(homeDir2, ".pi", "agent")) || binaryInPath("pi", homeDir2),
     // Hermes Agent (https://github.com/NousResearch/hermes-agent): home dir
     // is $HERMES_HOME (default ~/.hermes) per hermes_constants.py:30. config.yaml
     // appears after `hermes setup` has run; the directory alone exists from
     // install time. PATH fallback covers the rare case where the user blew
     // away ~/.hermes but kept the binary.
-    hermes: exists2(hermesHomeDir(homeDir2)) || binaryInPath("hermes")
+    hermes: exists2(hermesHomeDir(homeDir2)) || binaryInPath("hermes", homeDir2)
   };
 }
 async function setupCursor() {
@@ -9340,7 +9371,7 @@ function node9Version() {
 async function setupOpencode() {
   seedMcpPinsIfMissing();
   const homeDir2 = os12.homedir();
-  const configDir = path15.join(homeDir2, ".config", "opencode");
+  const configDir = opencodeConfigDir(homeDir2);
   const pluginsDir = path15.join(configDir, "plugins");
   const configPath = path15.join(configDir, "opencode.json");
   const pluginPath = path15.join(pluginsDir, OPENCODE_PLUGIN_NAME);
@@ -9408,7 +9439,7 @@ async function setupOpencode() {
 }
 function teardownOpencode() {
   const homeDir2 = os12.homedir();
-  const configDir = path15.join(homeDir2, ".config", "opencode");
+  const configDir = opencodeConfigDir(homeDir2);
   const pluginsDir = path15.join(configDir, "plugins");
   const configPath = path15.join(configDir, "opencode.json");
   const pluginPath = path15.join(pluginsDir, OPENCODE_PLUGIN_NAME);
@@ -10043,8 +10074,8 @@ var init_agent_wiring = __esm({
         setupCommand: "node9 agents add opencode",
         hookFormat: "flat",
         hookEvents: [],
-        shimFile: (h) => path16.join(h, ".config", "opencode", "plugins", "node9.js"),
-        present: (h) => exists(path16.join(h, ".config", "opencode")) || exists(path16.join(h, ".config", "opencode", "plugins", "node9.js"))
+        shimFile: (h) => path16.join(opencodeConfigDir(h), "plugins", "node9.js"),
+        present: (h) => exists(opencodeConfigDir(h)) || exists(path16.join(opencodeConfigDir(h), "plugins", "node9.js"))
       },
       {
         id: "pi",
@@ -17005,7 +17036,17 @@ function extractManagedConfig(body) {
     const e = {};
     if (typeof mc.egress.enabled === "boolean") e.enabled = mc.egress.enabled;
     if (typeof mc.egress.mode === "string") e.mode = mc.egress.mode;
-    if (e.enabled !== void 0 || e.mode !== void 0) out.egress = e;
+    const cleanHosts = (v) => Array.isArray(v) ? v.filter((h) => typeof h === "string") : [];
+    const allow = cleanHosts(mc.egress.allow);
+    const deny = cleanHosts(mc.egress.deny);
+    if (allow.length) e.allow = allow;
+    if (deny.length) e.deny = deny;
+    if (typeof mc.egress.allowPrivate === "boolean") {
+      e.allowPrivate = mc.egress.allowPrivate;
+    }
+    if (e.enabled !== void 0 || e.mode !== void 0 || e.allow !== void 0 || e.deny !== void 0 || e.allowPrivate !== void 0) {
+      out.egress = e;
+    }
   }
   if (mc.dlp && typeof mc.dlp === "object") {
     const d = {};

package/dist/index.js

@@ -3528,6 +3528,15 @@ function applyManagedEgress(local, managed, locked) {
       locked.includes("egressMode")
     );
   }
+  if (Array.isArray(managed.allow) && managed.allow.length > 0) {
+    next.allow = [...managed.allow];
+  }
+  if (Array.isArray(managed.deny) && managed.deny.length > 0) {
+    next.deny = [.../* @__PURE__ */ new Set([...local.deny ?? [], ...managed.deny])];
+  }
+  if (typeof managed.allowPrivate === "boolean") {
+    next.allowPrivate = locked.includes("egressAllowPrivate") ? managed.allowPrivate : (local.allowPrivate ?? true) && managed.allowPrivate;
+  }
   return next;
 }
 var DLP_PII_ORDER = ["off", "block"];
@@ -4015,11 +4024,15 @@ function getConfig(cwd) {
           );
         }
         if (mc.egress && typeof mc.egress === "object") {
+          const hosts = (v) => Array.isArray(v) ? v.filter((h) => typeof h === "string") : void 0;
           mergedPolicy.egress = applyManagedEgress(
             mergedPolicy.egress,
             {
               enabled: typeof mc.egress.enabled === "boolean" ? mc.egress.enabled : void 0,
-              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0
+              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0,
+              allow: hosts(mc.egress.allow),
+              deny: hosts(mc.egress.deny),
+              allowPrivate: typeof mc.egress.allowPrivate === "boolean" ? mc.egress.allowPrivate : void 0
             },
             locked
           );

package/dist/index.mjs

@@ -3498,6 +3498,15 @@ function applyManagedEgress(local, managed, locked) {
       locked.includes("egressMode")
     );
   }
+  if (Array.isArray(managed.allow) && managed.allow.length > 0) {
+    next.allow = [...managed.allow];
+  }
+  if (Array.isArray(managed.deny) && managed.deny.length > 0) {
+    next.deny = [.../* @__PURE__ */ new Set([...local.deny ?? [], ...managed.deny])];
+  }
+  if (typeof managed.allowPrivate === "boolean") {
+    next.allowPrivate = locked.includes("egressAllowPrivate") ? managed.allowPrivate : (local.allowPrivate ?? true) && managed.allowPrivate;
+  }
   return next;
 }
 var DLP_PII_ORDER = ["off", "block"];
@@ -3985,11 +3994,15 @@ function getConfig(cwd) {
           );
         }
         if (mc.egress && typeof mc.egress === "object") {
+          const hosts = (v) => Array.isArray(v) ? v.filter((h) => typeof h === "string") : void 0;
           mergedPolicy.egress = applyManagedEgress(
             mergedPolicy.egress,
             {
               enabled: typeof mc.egress.enabled === "boolean" ? mc.egress.enabled : void 0,
-              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0
+              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0,
+              allow: hosts(mc.egress.allow),
+              deny: hosts(mc.egress.deny),
+              allowPrivate: typeof mc.egress.allowPrivate === "boolean" ? mc.egress.allowPrivate : void 0
             },
             locked
           );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.53.0",
+  "version": "1.55.0",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",