@node9/proxy 1.67.4 → 2.0.0

package/dist/dashboard.mjs

@@ -2376,7 +2376,11 @@ var init_config_schema = __esm({
       settings: z.object({
         mode: z.enum(["standard", "strict", "audit", "observe"]).optional(),
         autoStartDaemon: z.boolean().optional(),
-        enableUndo: z.boolean().optional(),
+        // enableUndo / policy.snapshot: removed with the undo feature. The
+        // schema strips undeclared keys silently (plain zod object — no
+        // .strict(), no .passthrough()), so a config still carrying them stays
+        // valid and simply loses them. Keeping the fields would instead make
+        // `node9_config_get` advertise a removed feature as a live knob.
         enableHookLogDebug: z.boolean().optional(),
         approvalTimeoutMs: z.number().nonnegative().optional(),
         approvalTimeoutSeconds: z.number().nonnegative().optional(),
@@ -2428,11 +2432,6 @@ var init_config_schema = __esm({
         ignoredTools: z.array(z.string()).optional(),
         toolInspection: z.record(z.string()).optional(),
         smartRules: z.array(SmartRuleSchema).optional(),
-        snapshot: z.object({
-          tools: z.array(z.string()).optional(),
-          onlyPaths: z.array(z.string()).optional(),
-          ignorePaths: z.array(z.string()).optional()
-        }).optional(),
         dlp: z.object({
           enabled: z.boolean().optional(),
           scanIgnoredTools: z.boolean().optional(),
@@ -2597,14 +2596,6 @@ var init_config = __esm({
       settings: {
         mode: "standard",
         autoStartDaemon: true,
-        // OFF by default. The snapshot store is a per-project bare git repo with
-        // no size ceiling, and eviction drops the index row without deleting the
-        // objects — on one machine it reached 378G (352G of it orphaned tmp_pack_*
-        // from interrupted `git gc`) and filled the disk. A security tool must not
-        // be what fills a customer's disk. Re-enable per install with
-        // `{"settings":{"enableUndo":true}}`; the default flips back when the
-        // bounded copy-store lands (doc/undo-v2-copy-store-design.md).
-        enableUndo: false,
         enableHookLogDebug: true,
         approvalTimeoutMs: 12e4,
         // 120-second auto-deny timeout
@@ -2645,25 +2636,6 @@ var init_config = __esm({
           "terminal.execute": "command",
           "postgres:query": "sql"
         },
-        snapshot: {
-          tools: [
-            "str_replace_based_edit_tool",
-            "write_file",
-            "edit_file",
-            "create_file",
-            "edit",
-            "replace",
-            // Claude / canonicalised Hermes — shouldSnapshot lowercases the
-            // incoming name before set-membership, so we list the lowercase
-            // forms of `Bash`/`Write`/`Edit`/`MultiEdit`. Without these,
-            // post-canonicalisation Hermes `patch` / `write_file` (which now
-            // arrive as `Edit` / `Write`) silently skipped snapshotting.
-            "write",
-            "multiedit"
-          ],
-          onlyPaths: [],
-          ignorePaths: ["**/node_modules/**", "dist/**", "build/**", ".next/**", "**/*.log"]
-        },
         smartRules: [
           // ── rm safety (critical — always evaluated first) ──────────────────────
           {
@@ -3915,7 +3887,6 @@ var init_provenance = __esm({
 });
 
 // src/policy/index.ts
-import pm2 from "picomatch";
 var init_policy = __esm({
   "src/policy/index.ts"() {
     "use strict";
@@ -5438,17 +5409,6 @@ function subscribeToSse(onEvent, onResolve, onForensic, onError) {
 function toActivityEvent(eventName, data) {
   const payload = data.activity ?? data;
   const ts = normalizeTs(payload.ts);
-  if (eventName === "snapshot") {
-    const rawSummary = payload.argsSummary ?? payload.tool ?? "snapshot";
-    return {
-      kind: "snapshot",
-      id: payload.id ?? `${ts}-snapshot`,
-      ts,
-      hash: payload.hash ?? "",
-      summary: compactPath(rawSummary),
-      fileCount: typeof payload.fileCount === "number" ? payload.fileCount : 0
-    };
-  }
   if (eventName !== "activity" && eventName !== "add") return null;
   const toolName = payload.tool ?? payload.toolName;
   if (!toolName) return null;
@@ -5839,9 +5799,6 @@ function applyFilter(events, filter) {
   if (!filter) return events;
   const needle = filter.toLowerCase();
   return events.filter((e) => {
-    if (e.kind === "snapshot") {
-      return e.hash.toLowerCase().includes(needle) || e.summary.toLowerCase().includes(needle);
-    }
     if (e.tool.toLowerCase().includes(needle)) return true;
     if (e.agent && e.agent.toLowerCase().includes(needle)) return true;
     if (e.preview.toLowerCase().includes(needle)) return true;
@@ -5852,19 +5809,6 @@ function applyFilter(events, filter) {
 }
 function ActivityRow({ event }) {
   const t = localTimeOf(event.ts);
-  if (event.kind === "snapshot") {
-    const filesSuffix = event.fileCount > 0 ? ` \xB7 ${event.fileCount} file${event.fileCount === 1 ? "" : "s"}` : "";
-    return /* @__PURE__ */ jsxs(Text, { wrap: "truncate-end", children: [
-      /* @__PURE__ */ jsxs(Text, { dimColor: true, children: [
-        t,
-        " "
-      ] }),
-      /* @__PURE__ */ jsx(Text, { color: COL.agentClaude, children: "\u{1F4F8} snapshot" }),
-      /* @__PURE__ */ jsx(Text, { dimColor: true, children: `  ${event.hash}  ` }),
-      /* @__PURE__ */ jsx(Text, { children: event.summary }),
-      /* @__PURE__ */ jsx(Text, { dimColor: true, children: filesSuffix })
-    ] });
-  }
   const agentLabel = event.agent ? `[${truncate(capitalize(event.agent), 8)}]`.padEnd(10) : " ".repeat(10);
   const isLoop = event.checkedBy === "loop-detected";
   const verdictIcon = isLoop ? "\u{1F501}" : event.verdict === "block" ? "\u{1F6D1}" : event.verdict === "review" ? "\u{1F7E1}" : event.verdict === "allow" ? "\u2713 " : "\u2026 ";

package/dist/index.js

@@ -295,7 +295,11 @@ var ConfigFileSchema = import_zod.z.object({
   settings: import_zod.z.object({
     mode: import_zod.z.enum(["standard", "strict", "audit", "observe"]).optional(),
     autoStartDaemon: import_zod.z.boolean().optional(),
-    enableUndo: import_zod.z.boolean().optional(),
+    // enableUndo / policy.snapshot: removed with the undo feature. The
+    // schema strips undeclared keys silently (plain zod object — no
+    // .strict(), no .passthrough()), so a config still carrying them stays
+    // valid and simply loses them. Keeping the fields would instead make
+    // `node9_config_get` advertise a removed feature as a live knob.
     enableHookLogDebug: import_zod.z.boolean().optional(),
     approvalTimeoutMs: import_zod.z.number().nonnegative().optional(),
     approvalTimeoutSeconds: import_zod.z.number().nonnegative().optional(),
@@ -347,11 +351,6 @@ var ConfigFileSchema = import_zod.z.object({
     ignoredTools: import_zod.z.array(import_zod.z.string()).optional(),
     toolInspection: import_zod.z.record(import_zod.z.string()).optional(),
     smartRules: import_zod.z.array(SmartRuleSchema).optional(),
-    snapshot: import_zod.z.object({
-      tools: import_zod.z.array(import_zod.z.string()).optional(),
-      onlyPaths: import_zod.z.array(import_zod.z.string()).optional(),
-      ignorePaths: import_zod.z.array(import_zod.z.string()).optional()
-    }).optional(),
     dlp: import_zod.z.object({
       enabled: import_zod.z.boolean().optional(),
       scanIgnoredTools: import_zod.z.boolean().optional(),
@@ -4181,14 +4180,6 @@ var DEFAULT_CONFIG = {
   settings: {
     mode: "standard",
     autoStartDaemon: true,
-    // OFF by default. The snapshot store is a per-project bare git repo with
-    // no size ceiling, and eviction drops the index row without deleting the
-    // objects — on one machine it reached 378G (352G of it orphaned tmp_pack_*
-    // from interrupted `git gc`) and filled the disk. A security tool must not
-    // be what fills a customer's disk. Re-enable per install with
-    // `{"settings":{"enableUndo":true}}`; the default flips back when the
-    // bounded copy-store lands (doc/undo-v2-copy-store-design.md).
-    enableUndo: false,
     enableHookLogDebug: true,
     approvalTimeoutMs: 12e4,
     // 120-second auto-deny timeout
@@ -4229,25 +4220,6 @@ var DEFAULT_CONFIG = {
       "terminal.execute": "command",
       "postgres:query": "sql"
     },
-    snapshot: {
-      tools: [
-        "str_replace_based_edit_tool",
-        "write_file",
-        "edit_file",
-        "create_file",
-        "edit",
-        "replace",
-        // Claude / canonicalised Hermes — shouldSnapshot lowercases the
-        // incoming name before set-membership, so we list the lowercase
-        // forms of `Bash`/`Write`/`Edit`/`MultiEdit`. Without these,
-        // post-canonicalisation Hermes `patch` / `write_file` (which now
-        // arrive as `Edit` / `Write`) silently skipped snapshotting.
-        "write",
-        "multiedit"
-      ],
-      onlyPaths: [],
-      ignorePaths: ["**/node_modules/**", "dist/**", "build/**", ".next/**", "**/*.log"]
-    },
     smartRules: [
       // ── rm safety (critical — always evaluated first) ──────────────────────
       {
@@ -4558,11 +4530,6 @@ function getConfig(cwd) {
     ignoredTools: [...DEFAULT_CONFIG.policy.ignoredTools],
     toolInspection: { ...DEFAULT_CONFIG.policy.toolInspection },
     smartRules: [...DEFAULT_CONFIG.policy.smartRules],
-    snapshot: {
-      tools: [...DEFAULT_CONFIG.policy.snapshot.tools],
-      onlyPaths: [...DEFAULT_CONFIG.policy.snapshot.onlyPaths],
-      ignorePaths: [...DEFAULT_CONFIG.policy.snapshot.ignorePaths]
-    },
     dlp: { ...DEFAULT_CONFIG.policy.dlp },
     egress: {
       ...DEFAULT_CONFIG.policy.egress,
@@ -4597,7 +4564,6 @@ function getConfig(cwd) {
     const p = source.policy || {};
     if (s.mode !== void 0) mergedSettings.mode = s.mode;
     if (s.autoStartDaemon !== void 0) mergedSettings.autoStartDaemon = s.autoStartDaemon;
-    if (s.enableUndo !== void 0) mergedSettings.enableUndo = s.enableUndo;
     if (s.enableHookLogDebug !== void 0)
       mergedSettings.enableHookLogDebug = s.enableHookLogDebug;
     if (s.approvers) mergedSettings.approvers = { ...mergedSettings.approvers, ...s.approvers };
@@ -4631,12 +4597,6 @@ function getConfig(cwd) {
       );
       mergedPolicy.smartRules = [...filteredBlocks, ...localRules, ...filteredNonBlocks];
     }
-    if (p.snapshot) {
-      const s2 = p.snapshot;
-      if (s2.tools) mergedPolicy.snapshot.tools.push(...s2.tools);
-      if (s2.onlyPaths) mergedPolicy.snapshot.onlyPaths.push(...s2.onlyPaths);
-      if (s2.ignorePaths) mergedPolicy.snapshot.ignorePaths.push(...s2.ignorePaths);
-    }
     if (p.dlp) {
       const d = p.dlp;
       if (d.enabled !== void 0) mergedPolicy.dlp.enabled = d.enabled;
@@ -4971,9 +4931,6 @@ function getConfig(cwd) {
   mergedPolicy.dangerousWords = [...new Set(mergedPolicy.dangerousWords)];
   mergedPolicy.ignoredTools = [...new Set(mergedPolicy.ignoredTools)];
   mergedPolicy.skillPinning.roots = [...new Set(mergedPolicy.skillPinning.roots)];
-  mergedPolicy.snapshot.tools = [...new Set(mergedPolicy.snapshot.tools)];
-  mergedPolicy.snapshot.onlyPaths = [...new Set(mergedPolicy.snapshot.onlyPaths)];
-  mergedPolicy.snapshot.ignorePaths = [...new Set(mergedPolicy.snapshot.ignorePaths)];
   const result = {
     settings: mergedSettings,
     policy: mergedPolicy,
@@ -5036,9 +4993,6 @@ ${error.replace("Invalid config:\n", "")}
   return sanitized;
 }
 
-// src/policy/index.ts
-var import_picomatch2 = __toESM(require("picomatch"));
-
 // src/dlp.ts
 var import_fs5 = __toESM(require("fs"));
 var import_path5 = __toESM(require("path"));

package/dist/index.mjs

@@ -265,7 +265,11 @@ var ConfigFileSchema = z.object({
   settings: z.object({
     mode: z.enum(["standard", "strict", "audit", "observe"]).optional(),
     autoStartDaemon: z.boolean().optional(),
-    enableUndo: z.boolean().optional(),
+    // enableUndo / policy.snapshot: removed with the undo feature. The
+    // schema strips undeclared keys silently (plain zod object — no
+    // .strict(), no .passthrough()), so a config still carrying them stays
+    // valid and simply loses them. Keeping the fields would instead make
+    // `node9_config_get` advertise a removed feature as a live knob.
     enableHookLogDebug: z.boolean().optional(),
     approvalTimeoutMs: z.number().nonnegative().optional(),
     approvalTimeoutSeconds: z.number().nonnegative().optional(),
@@ -317,11 +321,6 @@ var ConfigFileSchema = z.object({
     ignoredTools: z.array(z.string()).optional(),
     toolInspection: z.record(z.string()).optional(),
     smartRules: z.array(SmartRuleSchema).optional(),
-    snapshot: z.object({
-      tools: z.array(z.string()).optional(),
-      onlyPaths: z.array(z.string()).optional(),
-      ignorePaths: z.array(z.string()).optional()
-    }).optional(),
     dlp: z.object({
       enabled: z.boolean().optional(),
       scanIgnoredTools: z.boolean().optional(),
@@ -4151,14 +4150,6 @@ var DEFAULT_CONFIG = {
   settings: {
     mode: "standard",
     autoStartDaemon: true,
-    // OFF by default. The snapshot store is a per-project bare git repo with
-    // no size ceiling, and eviction drops the index row without deleting the
-    // objects — on one machine it reached 378G (352G of it orphaned tmp_pack_*
-    // from interrupted `git gc`) and filled the disk. A security tool must not
-    // be what fills a customer's disk. Re-enable per install with
-    // `{"settings":{"enableUndo":true}}`; the default flips back when the
-    // bounded copy-store lands (doc/undo-v2-copy-store-design.md).
-    enableUndo: false,
     enableHookLogDebug: true,
     approvalTimeoutMs: 12e4,
     // 120-second auto-deny timeout
@@ -4199,25 +4190,6 @@ var DEFAULT_CONFIG = {
       "terminal.execute": "command",
       "postgres:query": "sql"
     },
-    snapshot: {
-      tools: [
-        "str_replace_based_edit_tool",
-        "write_file",
-        "edit_file",
-        "create_file",
-        "edit",
-        "replace",
-        // Claude / canonicalised Hermes — shouldSnapshot lowercases the
-        // incoming name before set-membership, so we list the lowercase
-        // forms of `Bash`/`Write`/`Edit`/`MultiEdit`. Without these,
-        // post-canonicalisation Hermes `patch` / `write_file` (which now
-        // arrive as `Edit` / `Write`) silently skipped snapshotting.
-        "write",
-        "multiedit"
-      ],
-      onlyPaths: [],
-      ignorePaths: ["**/node_modules/**", "dist/**", "build/**", ".next/**", "**/*.log"]
-    },
     smartRules: [
       // ── rm safety (critical — always evaluated first) ──────────────────────
       {
@@ -4528,11 +4500,6 @@ function getConfig(cwd) {
     ignoredTools: [...DEFAULT_CONFIG.policy.ignoredTools],
     toolInspection: { ...DEFAULT_CONFIG.policy.toolInspection },
     smartRules: [...DEFAULT_CONFIG.policy.smartRules],
-    snapshot: {
-      tools: [...DEFAULT_CONFIG.policy.snapshot.tools],
-      onlyPaths: [...DEFAULT_CONFIG.policy.snapshot.onlyPaths],
-      ignorePaths: [...DEFAULT_CONFIG.policy.snapshot.ignorePaths]
-    },
     dlp: { ...DEFAULT_CONFIG.policy.dlp },
     egress: {
       ...DEFAULT_CONFIG.policy.egress,
@@ -4567,7 +4534,6 @@ function getConfig(cwd) {
     const p = source.policy || {};
     if (s.mode !== void 0) mergedSettings.mode = s.mode;
     if (s.autoStartDaemon !== void 0) mergedSettings.autoStartDaemon = s.autoStartDaemon;
-    if (s.enableUndo !== void 0) mergedSettings.enableUndo = s.enableUndo;
     if (s.enableHookLogDebug !== void 0)
       mergedSettings.enableHookLogDebug = s.enableHookLogDebug;
     if (s.approvers) mergedSettings.approvers = { ...mergedSettings.approvers, ...s.approvers };
@@ -4601,12 +4567,6 @@ function getConfig(cwd) {
       );
       mergedPolicy.smartRules = [...filteredBlocks, ...localRules, ...filteredNonBlocks];
     }
-    if (p.snapshot) {
-      const s2 = p.snapshot;
-      if (s2.tools) mergedPolicy.snapshot.tools.push(...s2.tools);
-      if (s2.onlyPaths) mergedPolicy.snapshot.onlyPaths.push(...s2.onlyPaths);
-      if (s2.ignorePaths) mergedPolicy.snapshot.ignorePaths.push(...s2.ignorePaths);
-    }
     if (p.dlp) {
       const d = p.dlp;
       if (d.enabled !== void 0) mergedPolicy.dlp.enabled = d.enabled;
@@ -4941,9 +4901,6 @@ function getConfig(cwd) {
   mergedPolicy.dangerousWords = [...new Set(mergedPolicy.dangerousWords)];
   mergedPolicy.ignoredTools = [...new Set(mergedPolicy.ignoredTools)];
   mergedPolicy.skillPinning.roots = [...new Set(mergedPolicy.skillPinning.roots)];
-  mergedPolicy.snapshot.tools = [...new Set(mergedPolicy.snapshot.tools)];
-  mergedPolicy.snapshot.onlyPaths = [...new Set(mergedPolicy.snapshot.onlyPaths)];
-  mergedPolicy.snapshot.ignorePaths = [...new Set(mergedPolicy.snapshot.ignorePaths)];
   const result = {
     settings: mergedSettings,
     policy: mergedPolicy,
@@ -5006,9 +4963,6 @@ ${error.replace("Invalid config:\n", "")}
   return sanitized;
 }
 
-// src/policy/index.ts
-import pm2 from "picomatch";
-
 // src/dlp.ts
 import fs5 from "fs";
 import path5 from "path";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.67.4",
+  "version": "2.0.0",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",