@node9/proxy 1.67.4 → 2.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -3
- package/dist/cli.js +1088 -1825
- package/dist/cli.mjs +1086 -1823
- package/dist/dashboard.mjs +5 -61
- package/dist/index.js +5 -51
- package/dist/index.mjs +5 -51
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -185,7 +185,6 @@ node9 shield list # show all shields + status
|
|
|
185
185
|
- **Shell** — catches `curl | bash`, unauthorized `sudo`
|
|
186
186
|
- **DLP** — flags AWS keys, GitHub tokens, Stripe keys, PEM private keys in any tool argument, file contents, or shell config (`~/.zshrc`, `~/.bashrc`)
|
|
187
187
|
- **Response DLP** — background scanner reads Claude's conversation history and alerts you if Claude _wrote_ a secret in its response text
|
|
188
|
-
- **Auto-undo** — git snapshot before every AI file edit → `node9 undo` to revert
|
|
189
188
|
- **Skills pinning** — SHA-256 verification of installed Claude skills / plugins between sessions
|
|
190
189
|
|
|
191
190
|
## Review prompts — approve inline, in your agent
|
|
@@ -266,7 +265,7 @@ Beyond the three flow commands above (`scan` / `monitor` / `report`):
|
|
|
266
265
|
| ---------------- | --------------------------------------------------------- | --------------------------------------- |
|
|
267
266
|
| `node9 blast` | What an AI agent can reach right now — files, creds, env | First thing to run on any machine |
|
|
268
267
|
| `node9 tail` | Live stream of every tool call (text-only, no TUI) | Piping into other tools, CI, logs |
|
|
269
|
-
| `node9 sessions` | Session history with prompt, tool trace, cost
|
|
268
|
+
| `node9 sessions` | Session history with prompt, tool trace, and cost | Reviewing a handoff or past work |
|
|
270
269
|
| `node9 dlp` | Credential-leak findings in Claude response text | Any time a DLP desktop alert fires |
|
|
271
270
|
| `node9 mask` | Redact plaintext secrets from local session history files | After a DLP finding — cleans local disk |
|
|
272
271
|
|
|
@@ -316,7 +315,6 @@ def run_command(cmd: str) -> str:
|
|
|
316
315
|
- **Runtime** intercepts tool calls via pre-execution hooks (Claude Code, Codex, Antigravity, GitHub Copilot CLI, Gemini CLI, Opencode, Pi) or via the MCP gateway (Cursor, Windsurf, VSCode, Claude Desktop). All decisions land in `~/.node9/audit.log` atomically.
|
|
317
316
|
- **MCP gateway** is a stdio proxy; intercepts `tools/list` + `tools/call` JSON-RPC, forwards the rest
|
|
318
317
|
- **Policy engine** uses [mvdan-sh](https://github.com/mvdan/sh) for bash AST analysis — defeats obfuscation via backslash escaping, variable substitution, eval of remote download
|
|
319
|
-
- **Shadow repo** for auto-undo lives at `~/.node9/snapshots/<hash16>/` — never touches your `.git`
|
|
320
318
|
- **Sandbox** generates a Dockerfile + entrypoint that seal an `ipset`/`iptables` deny-by-default egress wall, then drop to a non-root agent with node9's daemon + hooks running inside; only the agent's credential file is mounted, never your whole `~/.claude`
|
|
321
319
|
|
|
322
320
|
## Full docs
|