@node9/proxy 1.64.0 → 1.65.0

package/dist/dashboard.mjs

@@ -2459,7 +2459,7 @@ var init_trusted_hosts = __esm({
 });
 
 // src/config/index.ts
-var DANGEROUS_WORDS, DEFAULT_CONFIG;
+var DANGEROUS_WORDS, DEFAULT_CONFIG, CACHE_LOG_REARM_MS;
 var init_config = __esm({
   "src/config/index.ts"() {
     "use strict";
@@ -2684,6 +2684,7 @@ var init_config = __esm({
       },
       environments: {}
     };
+    CACHE_LOG_REARM_MS = 5 * 60 * 1e3;
   }
 });
 

package/dist/index.js

@@ -4070,9 +4070,9 @@ function getActiveEnvironment(config) {
   const env = config.settings.environment || process.env.NODE_ENV || "development";
   return config.environments[env] ?? null;
 }
-var cacheReadFailureLogged = false;
 function readRulesCacheResilient(cacheFile) {
   let existed = false;
+  let sawReadError = false;
   for (let attempt = 0; attempt < 3; attempt++) {
     let content;
     try {
@@ -4080,30 +4080,42 @@ function readRulesCacheResilient(cacheFile) {
       existed = true;
     } catch (err) {
       if (err.code === "ENOENT") return {};
+      sawReadError = true;
       continue;
     }
     try {
-      return JSON.parse(content);
+      const parsed = JSON.parse(content);
+      lastParsedRulesCache = parsed;
+      return parsed;
     } catch {
     }
   }
-  if (existed) {
+  if (existed || sawReadError) {
     const backup = import_path4.default.join(import_path4.default.dirname(cacheFile), "rules-cache.last-good.json");
     if (backup !== cacheFile) {
       try {
         const raw = JSON.parse(import_fs4.default.readFileSync(backup, "utf-8"));
         logCacheReadIssue(cacheFile, "RULES_CACHE_CORRUPT_USED_BACKUP");
+        lastParsedRulesCache = raw;
         return raw;
       } catch {
       }
     }
+    if (lastParsedRulesCache) {
+      logCacheReadIssue(cacheFile, "RULES_CACHE_USED_MEMORY");
+      return lastParsedRulesCache;
+    }
     logCacheReadIssue(cacheFile, "RULES_CACHE_UNREADABLE");
   }
   return {};
 }
+var lastParsedRulesCache = null;
+var CACHE_LOG_REARM_MS = 5 * 60 * 1e3;
+var cacheReadLastLoggedAt = 0;
 function logCacheReadIssue(cacheFile, kind) {
-  if (cacheReadFailureLogged) return;
-  cacheReadFailureLogged = true;
+  const now = Date.now();
+  if (now - cacheReadLastLoggedAt < CACHE_LOG_REARM_MS) return;
+  cacheReadLastLoggedAt = now;
   try {
     import_fs4.default.appendFileSync(
       import_path4.default.join(import_os4.default.homedir(), ".node9", "hook-debug.log"),
@@ -5616,6 +5628,7 @@ async function _authorizeHeadlessCore(toolName, args, metaArg, options) {
   let riskMetadata;
   let statefulRecoveryCommand;
   let localSmartRuleMatched = false;
+  let hardBlockDowngraded = false;
   let taintWarning = null;
   if (isNetworkTool(toolName, args)) {
     const filePaths = extractFilePaths(toolName, args);
@@ -5857,6 +5870,7 @@ async function _authorizeHeadlessCore(toolName, args, metaArg, options) {
       return { approved: true, checkedBy: "local-policy" };
     }
     if (policyResult.decision === "block") {
+      hardBlockDowngraded = true;
       const daemonUp = isDaemonRunning();
       let humanApproverReachable = false;
       if (!policyResult.dependsOnStatePredicates?.length && daemonUp && !isTestEnv2) {
@@ -5930,7 +5944,8 @@ async function _authorizeHeadlessCore(toolName, args, metaArg, options) {
     explainableLabel = policyResult.blockedByLabel || "Local Config";
     policyMatchedField = policyResult.matchedField;
     policyMatchedWord = policyResult.matchedWord;
-    if (policyResult.ruleName || policyResult.tier === 7) localSmartRuleMatched = true;
+    if (policyResult.ruleName || policyResult.tier === 7 || hardBlockDowngraded)
+      localSmartRuleMatched = true;
     if (policyResult.ruleDescription) policyRuleDescription = policyResult.ruleDescription;
     else if (policyResult.reason) policyRuleDescription = policyResult.reason;
     riskMetadata = computeRiskMetadata(
@@ -5942,7 +5957,7 @@ async function _authorizeHeadlessCore(toolName, args, metaArg, options) {
       policyResult.ruleName
     );
     if (policyRuleDescription) riskMetadata.ruleDescription = policyRuleDescription.slice(0, 200);
-    const persistent = policyResult.ruleName || policyResult.tier === 7 ? null : getPersistentDecision(toolName);
+    const persistent = policyResult.ruleName || policyResult.tier === 7 || hardBlockDowngraded ? null : getPersistentDecision(toolName);
     if (persistent === "allow" && !appPermReview) {
       if (!isManual) appendLocalAudit(toolName, args, "allow", "persistent", meta, hashAuditArgs);
       return { approved: true, checkedBy: "persistent" };
@@ -5975,7 +5990,7 @@ async function _authorizeHeadlessCore(toolName, args, metaArg, options) {
       return { approved: true };
     }
   }
-  if (!taintWarning && !appPermReview && getActiveTrustSession(toolName, args)) {
+  if (!taintWarning && !appPermReview && !hardBlockDowngraded && getActiveTrustSession(toolName, args)) {
     if (!isManual) appendLocalAudit(toolName, args, "allow", "trust", meta, hashAuditArgs);
     return { approved: true, checkedBy: "trust" };
   }
@@ -6039,7 +6054,7 @@ ${appPermReview}`
         forceReview
       );
       if (!initResult.pending) {
-        if (initResult.shadowMode && !appPermReview) {
+        if (initResult.shadowMode && !localSmartRuleMatched && !options?.localSmartRuleMatched && !appPermReview) {
           return { approved: true, checkedBy: "cloud" };
         }
         if (!localSmartRuleMatched && !options?.localSmartRuleMatched && !appPermReview) {

package/dist/index.mjs

@@ -4040,9 +4040,9 @@ function getActiveEnvironment(config) {
   const env = config.settings.environment || process.env.NODE_ENV || "development";
   return config.environments[env] ?? null;
 }
-var cacheReadFailureLogged = false;
 function readRulesCacheResilient(cacheFile) {
   let existed = false;
+  let sawReadError = false;
   for (let attempt = 0; attempt < 3; attempt++) {
     let content;
     try {
@@ -4050,30 +4050,42 @@ function readRulesCacheResilient(cacheFile) {
       existed = true;
     } catch (err) {
       if (err.code === "ENOENT") return {};
+      sawReadError = true;
       continue;
     }
     try {
-      return JSON.parse(content);
+      const parsed = JSON.parse(content);
+      lastParsedRulesCache = parsed;
+      return parsed;
     } catch {
     }
   }
-  if (existed) {
+  if (existed || sawReadError) {
     const backup = path4.join(path4.dirname(cacheFile), "rules-cache.last-good.json");
     if (backup !== cacheFile) {
       try {
         const raw = JSON.parse(fs4.readFileSync(backup, "utf-8"));
         logCacheReadIssue(cacheFile, "RULES_CACHE_CORRUPT_USED_BACKUP");
+        lastParsedRulesCache = raw;
         return raw;
       } catch {
       }
     }
+    if (lastParsedRulesCache) {
+      logCacheReadIssue(cacheFile, "RULES_CACHE_USED_MEMORY");
+      return lastParsedRulesCache;
+    }
     logCacheReadIssue(cacheFile, "RULES_CACHE_UNREADABLE");
   }
   return {};
 }
+var lastParsedRulesCache = null;
+var CACHE_LOG_REARM_MS = 5 * 60 * 1e3;
+var cacheReadLastLoggedAt = 0;
 function logCacheReadIssue(cacheFile, kind) {
-  if (cacheReadFailureLogged) return;
-  cacheReadFailureLogged = true;
+  const now = Date.now();
+  if (now - cacheReadLastLoggedAt < CACHE_LOG_REARM_MS) return;
+  cacheReadLastLoggedAt = now;
   try {
     fs4.appendFileSync(
       path4.join(os4.homedir(), ".node9", "hook-debug.log"),
@@ -5586,6 +5598,7 @@ async function _authorizeHeadlessCore(toolName, args, metaArg, options) {
   let riskMetadata;
   let statefulRecoveryCommand;
   let localSmartRuleMatched = false;
+  let hardBlockDowngraded = false;
   let taintWarning = null;
   if (isNetworkTool(toolName, args)) {
     const filePaths = extractFilePaths(toolName, args);
@@ -5827,6 +5840,7 @@ async function _authorizeHeadlessCore(toolName, args, metaArg, options) {
       return { approved: true, checkedBy: "local-policy" };
     }
     if (policyResult.decision === "block") {
+      hardBlockDowngraded = true;
       const daemonUp = isDaemonRunning();
       let humanApproverReachable = false;
       if (!policyResult.dependsOnStatePredicates?.length && daemonUp && !isTestEnv2) {
@@ -5900,7 +5914,8 @@ async function _authorizeHeadlessCore(toolName, args, metaArg, options) {
     explainableLabel = policyResult.blockedByLabel || "Local Config";
     policyMatchedField = policyResult.matchedField;
     policyMatchedWord = policyResult.matchedWord;
-    if (policyResult.ruleName || policyResult.tier === 7) localSmartRuleMatched = true;
+    if (policyResult.ruleName || policyResult.tier === 7 || hardBlockDowngraded)
+      localSmartRuleMatched = true;
     if (policyResult.ruleDescription) policyRuleDescription = policyResult.ruleDescription;
     else if (policyResult.reason) policyRuleDescription = policyResult.reason;
     riskMetadata = computeRiskMetadata(
@@ -5912,7 +5927,7 @@ async function _authorizeHeadlessCore(toolName, args, metaArg, options) {
       policyResult.ruleName
     );
     if (policyRuleDescription) riskMetadata.ruleDescription = policyRuleDescription.slice(0, 200);
-    const persistent = policyResult.ruleName || policyResult.tier === 7 ? null : getPersistentDecision(toolName);
+    const persistent = policyResult.ruleName || policyResult.tier === 7 || hardBlockDowngraded ? null : getPersistentDecision(toolName);
     if (persistent === "allow" && !appPermReview) {
       if (!isManual) appendLocalAudit(toolName, args, "allow", "persistent", meta, hashAuditArgs);
       return { approved: true, checkedBy: "persistent" };
@@ -5945,7 +5960,7 @@ async function _authorizeHeadlessCore(toolName, args, metaArg, options) {
       return { approved: true };
     }
   }
-  if (!taintWarning && !appPermReview && getActiveTrustSession(toolName, args)) {
+  if (!taintWarning && !appPermReview && !hardBlockDowngraded && getActiveTrustSession(toolName, args)) {
     if (!isManual) appendLocalAudit(toolName, args, "allow", "trust", meta, hashAuditArgs);
     return { approved: true, checkedBy: "trust" };
   }
@@ -6009,7 +6024,7 @@ ${appPermReview}`
         forceReview
       );
       if (!initResult.pending) {
-        if (initResult.shadowMode && !appPermReview) {
+        if (initResult.shadowMode && !localSmartRuleMatched && !options?.localSmartRuleMatched && !appPermReview) {
           return { approved: true, checkedBy: "cloud" };
         }
         if (!localSmartRuleMatched && !options?.localSmartRuleMatched && !appPermReview) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.64.0",
+  "version": "1.65.0",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",