@node9/proxy 1.54.0 → 1.55.1

package/dist/cli.js

@@ -4241,6 +4241,15 @@ function applyManagedEgress(local, managed, locked) {
       locked.includes("egressMode")
     );
   }
+  if (Array.isArray(managed.allow) && managed.allow.length > 0) {
+    next.allow = [...managed.allow];
+  }
+  if (Array.isArray(managed.deny) && managed.deny.length > 0) {
+    next.deny = [.../* @__PURE__ */ new Set([...local.deny ?? [], ...managed.deny])];
+  }
+  if (typeof managed.allowPrivate === "boolean") {
+    next.allowPrivate = locked.includes("egressAllowPrivate") ? managed.allowPrivate : (local.allowPrivate ?? true) && managed.allowPrivate;
+  }
   return next;
 }
 function applyManagedDlp(local, managed, locked) {
@@ -4489,11 +4498,15 @@ function getConfig(cwd) {
           );
         }
         if (mc.egress && typeof mc.egress === "object") {
+          const hosts = (v) => Array.isArray(v) ? v.filter((h) => typeof h === "string") : void 0;
           mergedPolicy.egress = applyManagedEgress(
             mergedPolicy.egress,
             {
               enabled: typeof mc.egress.enabled === "boolean" ? mc.egress.enabled : void 0,
-              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0
+              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0,
+              allow: hosts(mc.egress.allow),
+              deny: hosts(mc.egress.deny),
+              allowPrivate: typeof mc.egress.allowPrivate === "boolean" ? mc.egress.allowPrivate : void 0
             },
             locked
           );
@@ -7850,6 +7863,11 @@ function fullPathCommand(subcommand) {
 function toForwardSlashes(p) {
   return p.replace(/\\/g, "/");
 }
+function isNode9StatusLine(command) {
+  if (!command) return false;
+  const c = String(command).trim();
+  return c.includes("node9") && /(^|\s)hud$/.test(c);
+}
 function isStaleHookCommand(command) {
   if (!command) return false;
   const tokens = [];
@@ -8114,7 +8132,8 @@ async function setupClaude() {
   const statusLineObj = { type: "command", command: hudCommand };
   const existingStatusLine = settings.statusLine;
   const existingStatusCommand = typeof existingStatusLine === "object" ? existingStatusLine?.command : existingStatusLine;
-  if (existingStatusCommand !== hudCommand) {
+  const isNode9OrEmpty = !existingStatusCommand || isNode9StatusLine(existingStatusCommand);
+  if (isNode9OrEmpty && existingStatusCommand !== hudCommand) {
     settings.statusLine = statusLineObj;
     hooksChanged = true;
     anythingChanged = true;
@@ -9022,13 +9041,15 @@ function setupHud() {
     console.log(import_chalk.default.gray("   Restart Claude Code to activate."));
     return;
   }
-  if (existing && existingCommand !== hudCommand) {
+  if (existing && existingCommand !== hudCommand && !isNode9StatusLine(existingCommand)) {
     console.log(
       import_chalk.default.yellow(
         `  \u26A0\uFE0F  statusLine is already set to: "${existingCommand}"
-     Overwriting with node9 HUD.`
+     Leaving it as-is \u2014 node9 won't overwrite a statusLine you configured.
+     Remove it from ~/.claude/settings.json first if you want the node9 HUD.`
       )
     );
+    return;
   }
   settings.statusLine = statusLineObj;
   writeJson(hooksPath, settings);
@@ -9046,7 +9067,7 @@ function teardownHud() {
   }
   const existing = settings.statusLine;
   const existingCommand = typeof existing === "object" ? existing?.command : existing;
-  if (!existingCommand || !String(existingCommand).includes("node9")) {
+  if (!isNode9StatusLine(existingCommand)) {
     console.log(import_chalk.default.blue("  \u2139\uFE0F  node9 HUD not found in ~/.claude/settings.json"));
     return;
   }
@@ -17049,7 +17070,17 @@ function extractManagedConfig(body) {
     const e = {};
     if (typeof mc.egress.enabled === "boolean") e.enabled = mc.egress.enabled;
     if (typeof mc.egress.mode === "string") e.mode = mc.egress.mode;
-    if (e.enabled !== void 0 || e.mode !== void 0) out.egress = e;
+    const cleanHosts = (v) => Array.isArray(v) ? v.filter((h) => typeof h === "string") : [];
+    const allow = cleanHosts(mc.egress.allow);
+    const deny = cleanHosts(mc.egress.deny);
+    if (allow.length) e.allow = allow;
+    if (deny.length) e.deny = deny;
+    if (typeof mc.egress.allowPrivate === "boolean") {
+      e.allowPrivate = mc.egress.allowPrivate;
+    }
+    if (e.enabled !== void 0 || e.mode !== void 0 || e.allow !== void 0 || e.deny !== void 0 || e.allowPrivate !== void 0) {
+      out.egress = e;
+    }
   }
   if (mc.dlp && typeof mc.dlp === "object") {
     const d = {};

package/dist/cli.mjs

@@ -4219,6 +4219,15 @@ function applyManagedEgress(local, managed, locked) {
       locked.includes("egressMode")
     );
   }
+  if (Array.isArray(managed.allow) && managed.allow.length > 0) {
+    next.allow = [...managed.allow];
+  }
+  if (Array.isArray(managed.deny) && managed.deny.length > 0) {
+    next.deny = [.../* @__PURE__ */ new Set([...local.deny ?? [], ...managed.deny])];
+  }
+  if (typeof managed.allowPrivate === "boolean") {
+    next.allowPrivate = locked.includes("egressAllowPrivate") ? managed.allowPrivate : (local.allowPrivate ?? true) && managed.allowPrivate;
+  }
   return next;
 }
 function applyManagedDlp(local, managed, locked) {
@@ -4470,11 +4479,15 @@ function getConfig(cwd) {
           );
         }
         if (mc.egress && typeof mc.egress === "object") {
+          const hosts = (v) => Array.isArray(v) ? v.filter((h) => typeof h === "string") : void 0;
           mergedPolicy.egress = applyManagedEgress(
             mergedPolicy.egress,
             {
               enabled: typeof mc.egress.enabled === "boolean" ? mc.egress.enabled : void 0,
-              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0
+              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0,
+              allow: hosts(mc.egress.allow),
+              deny: hosts(mc.egress.deny),
+              allowPrivate: typeof mc.egress.allowPrivate === "boolean" ? mc.egress.allowPrivate : void 0
             },
             locked
           );
@@ -7832,6 +7845,11 @@ function fullPathCommand(subcommand) {
 function toForwardSlashes(p) {
   return p.replace(/\\/g, "/");
 }
+function isNode9StatusLine(command) {
+  if (!command) return false;
+  const c = String(command).trim();
+  return c.includes("node9") && /(^|\s)hud$/.test(c);
+}
 function isStaleHookCommand(command) {
   if (!command) return false;
   const tokens = [];
@@ -8096,7 +8114,8 @@ async function setupClaude() {
   const statusLineObj = { type: "command", command: hudCommand };
   const existingStatusLine = settings.statusLine;
   const existingStatusCommand = typeof existingStatusLine === "object" ? existingStatusLine?.command : existingStatusLine;
-  if (existingStatusCommand !== hudCommand) {
+  const isNode9OrEmpty = !existingStatusCommand || isNode9StatusLine(existingStatusCommand);
+  if (isNode9OrEmpty && existingStatusCommand !== hudCommand) {
     settings.statusLine = statusLineObj;
     hooksChanged = true;
     anythingChanged = true;
@@ -9004,13 +9023,15 @@ function setupHud() {
     console.log(chalk.gray("   Restart Claude Code to activate."));
     return;
   }
-  if (existing && existingCommand !== hudCommand) {
+  if (existing && existingCommand !== hudCommand && !isNode9StatusLine(existingCommand)) {
     console.log(
       chalk.yellow(
         `  \u26A0\uFE0F  statusLine is already set to: "${existingCommand}"
-     Overwriting with node9 HUD.`
+     Leaving it as-is \u2014 node9 won't overwrite a statusLine you configured.
+     Remove it from ~/.claude/settings.json first if you want the node9 HUD.`
       )
     );
+    return;
   }
   settings.statusLine = statusLineObj;
   writeJson(hooksPath, settings);
@@ -9028,7 +9049,7 @@ function teardownHud() {
   }
   const existing = settings.statusLine;
   const existingCommand = typeof existing === "object" ? existing?.command : existing;
-  if (!existingCommand || !String(existingCommand).includes("node9")) {
+  if (!isNode9StatusLine(existingCommand)) {
     console.log(chalk.blue("  \u2139\uFE0F  node9 HUD not found in ~/.claude/settings.json"));
     return;
   }
@@ -17023,7 +17044,17 @@ function extractManagedConfig(body) {
     const e = {};
     if (typeof mc.egress.enabled === "boolean") e.enabled = mc.egress.enabled;
     if (typeof mc.egress.mode === "string") e.mode = mc.egress.mode;
-    if (e.enabled !== void 0 || e.mode !== void 0) out.egress = e;
+    const cleanHosts = (v) => Array.isArray(v) ? v.filter((h) => typeof h === "string") : [];
+    const allow = cleanHosts(mc.egress.allow);
+    const deny = cleanHosts(mc.egress.deny);
+    if (allow.length) e.allow = allow;
+    if (deny.length) e.deny = deny;
+    if (typeof mc.egress.allowPrivate === "boolean") {
+      e.allowPrivate = mc.egress.allowPrivate;
+    }
+    if (e.enabled !== void 0 || e.mode !== void 0 || e.allow !== void 0 || e.deny !== void 0 || e.allowPrivate !== void 0) {
+      out.egress = e;
+    }
   }
   if (mc.dlp && typeof mc.dlp === "object") {
     const d = {};

package/dist/index.js

@@ -3528,6 +3528,15 @@ function applyManagedEgress(local, managed, locked) {
       locked.includes("egressMode")
     );
   }
+  if (Array.isArray(managed.allow) && managed.allow.length > 0) {
+    next.allow = [...managed.allow];
+  }
+  if (Array.isArray(managed.deny) && managed.deny.length > 0) {
+    next.deny = [.../* @__PURE__ */ new Set([...local.deny ?? [], ...managed.deny])];
+  }
+  if (typeof managed.allowPrivate === "boolean") {
+    next.allowPrivate = locked.includes("egressAllowPrivate") ? managed.allowPrivate : (local.allowPrivate ?? true) && managed.allowPrivate;
+  }
   return next;
 }
 var DLP_PII_ORDER = ["off", "block"];
@@ -4015,11 +4024,15 @@ function getConfig(cwd) {
           );
         }
         if (mc.egress && typeof mc.egress === "object") {
+          const hosts = (v) => Array.isArray(v) ? v.filter((h) => typeof h === "string") : void 0;
           mergedPolicy.egress = applyManagedEgress(
             mergedPolicy.egress,
             {
               enabled: typeof mc.egress.enabled === "boolean" ? mc.egress.enabled : void 0,
-              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0
+              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0,
+              allow: hosts(mc.egress.allow),
+              deny: hosts(mc.egress.deny),
+              allowPrivate: typeof mc.egress.allowPrivate === "boolean" ? mc.egress.allowPrivate : void 0
             },
             locked
           );

package/dist/index.mjs

@@ -3498,6 +3498,15 @@ function applyManagedEgress(local, managed, locked) {
       locked.includes("egressMode")
     );
   }
+  if (Array.isArray(managed.allow) && managed.allow.length > 0) {
+    next.allow = [...managed.allow];
+  }
+  if (Array.isArray(managed.deny) && managed.deny.length > 0) {
+    next.deny = [.../* @__PURE__ */ new Set([...local.deny ?? [], ...managed.deny])];
+  }
+  if (typeof managed.allowPrivate === "boolean") {
+    next.allowPrivate = locked.includes("egressAllowPrivate") ? managed.allowPrivate : (local.allowPrivate ?? true) && managed.allowPrivate;
+  }
   return next;
 }
 var DLP_PII_ORDER = ["off", "block"];
@@ -3985,11 +3994,15 @@ function getConfig(cwd) {
           );
         }
         if (mc.egress && typeof mc.egress === "object") {
+          const hosts = (v) => Array.isArray(v) ? v.filter((h) => typeof h === "string") : void 0;
           mergedPolicy.egress = applyManagedEgress(
             mergedPolicy.egress,
             {
               enabled: typeof mc.egress.enabled === "boolean" ? mc.egress.enabled : void 0,
-              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0
+              mode: typeof mc.egress.mode === "string" ? mc.egress.mode : void 0,
+              allow: hosts(mc.egress.allow),
+              deny: hosts(mc.egress.deny),
+              allowPrivate: typeof mc.egress.allowPrivate === "boolean" ? mc.egress.allowPrivate : void 0
             },
             locked
           );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.54.0",
+  "version": "1.55.1",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",