@node9/proxy 1.67.5 → 2.0.0

package/dist/dashboard.mjs

@@ -2596,19 +2596,6 @@ var init_config = __esm({
       settings: {
         mode: "standard",
         autoStartDaemon: true,
-        // The undo feature was REMOVED. This default is one of two places that say
-        // so; the other is the pin further down, which overwrites whatever a config
-        // file, the dashboard or the cloud supplies. Setting `enableUndo` anywhere
-        // has no effect — do not restore the advice that used to live here, because
-        // a comment recommending a knob that is silently discarded is the same lie
-        // on disk the pin exists to prevent.
-        //
-        // Why it went: the store was a per-project bare git repo with no size
-        // ceiling, and eviction dropped the index row without deleting the objects.
-        // On one machine it reached 378G (352G of it orphaned tmp_pack_* from an
-        // interrupted `git gc`) and filled the disk. A security tool must not be
-        // what fills a customer's disk. Leftovers: `node9 undo --purge`.
-        enableUndo: false,
         enableHookLogDebug: true,
         approvalTimeoutMs: 12e4,
         // 120-second auto-deny timeout
@@ -2649,25 +2636,6 @@ var init_config = __esm({
           "terminal.execute": "command",
           "postgres:query": "sql"
         },
-        snapshot: {
-          tools: [
-            "str_replace_based_edit_tool",
-            "write_file",
-            "edit_file",
-            "create_file",
-            "edit",
-            "replace",
-            // Claude / canonicalised Hermes — shouldSnapshot lowercases the
-            // incoming name before set-membership, so we list the lowercase
-            // forms of `Bash`/`Write`/`Edit`/`MultiEdit`. Without these,
-            // post-canonicalisation Hermes `patch` / `write_file` (which now
-            // arrive as `Edit` / `Write`) silently skipped snapshotting.
-            "write",
-            "multiedit"
-          ],
-          onlyPaths: [],
-          ignorePaths: ["**/node_modules/**", "dist/**", "build/**", ".next/**", "**/*.log"]
-        },
         smartRules: [
           // ── rm safety (critical — always evaluated first) ──────────────────────
           {
@@ -3919,7 +3887,6 @@ var init_provenance = __esm({
 });
 
 // src/policy/index.ts
-import pm2 from "picomatch";
 var init_policy = __esm({
   "src/policy/index.ts"() {
     "use strict";
@@ -5442,17 +5409,6 @@ function subscribeToSse(onEvent, onResolve, onForensic, onError) {
 function toActivityEvent(eventName, data) {
   const payload = data.activity ?? data;
   const ts = normalizeTs(payload.ts);
-  if (eventName === "snapshot") {
-    const rawSummary = payload.argsSummary ?? payload.tool ?? "snapshot";
-    return {
-      kind: "snapshot",
-      id: payload.id ?? `${ts}-snapshot`,
-      ts,
-      hash: payload.hash ?? "",
-      summary: compactPath(rawSummary),
-      fileCount: typeof payload.fileCount === "number" ? payload.fileCount : 0
-    };
-  }
   if (eventName !== "activity" && eventName !== "add") return null;
   const toolName = payload.tool ?? payload.toolName;
   if (!toolName) return null;
@@ -5843,9 +5799,6 @@ function applyFilter(events, filter) {
   if (!filter) return events;
   const needle = filter.toLowerCase();
   return events.filter((e) => {
-    if (e.kind === "snapshot") {
-      return e.hash.toLowerCase().includes(needle) || e.summary.toLowerCase().includes(needle);
-    }
     if (e.tool.toLowerCase().includes(needle)) return true;
     if (e.agent && e.agent.toLowerCase().includes(needle)) return true;
     if (e.preview.toLowerCase().includes(needle)) return true;
@@ -5856,19 +5809,6 @@ function applyFilter(events, filter) {
 }
 function ActivityRow({ event }) {
   const t = localTimeOf(event.ts);
-  if (event.kind === "snapshot") {
-    const filesSuffix = event.fileCount > 0 ? ` \xB7 ${event.fileCount} file${event.fileCount === 1 ? "" : "s"}` : "";
-    return /* @__PURE__ */ jsxs(Text, { wrap: "truncate-end", children: [
-      /* @__PURE__ */ jsxs(Text, { dimColor: true, children: [
-        t,
-        " "
-      ] }),
-      /* @__PURE__ */ jsx(Text, { color: COL.agentClaude, children: "\u{1F4F8} snapshot" }),
-      /* @__PURE__ */ jsx(Text, { dimColor: true, children: `  ${event.hash}  ` }),
-      /* @__PURE__ */ jsx(Text, { children: event.summary }),
-      /* @__PURE__ */ jsx(Text, { dimColor: true, children: filesSuffix })
-    ] });
-  }
   const agentLabel = event.agent ? `[${truncate(capitalize(event.agent), 8)}]`.padEnd(10) : " ".repeat(10);
   const isLoop = event.checkedBy === "loop-detected";
   const verdictIcon = isLoop ? "\u{1F501}" : event.verdict === "block" ? "\u{1F6D1}" : event.verdict === "review" ? "\u{1F7E1}" : event.verdict === "allow" ? "\u2713 " : "\u2026 ";

package/dist/index.js

@@ -4180,19 +4180,6 @@ var DEFAULT_CONFIG = {
   settings: {
     mode: "standard",
     autoStartDaemon: true,
-    // The undo feature was REMOVED. This default is one of two places that say
-    // so; the other is the pin further down, which overwrites whatever a config
-    // file, the dashboard or the cloud supplies. Setting `enableUndo` anywhere
-    // has no effect — do not restore the advice that used to live here, because
-    // a comment recommending a knob that is silently discarded is the same lie
-    // on disk the pin exists to prevent.
-    //
-    // Why it went: the store was a per-project bare git repo with no size
-    // ceiling, and eviction dropped the index row without deleting the objects.
-    // On one machine it reached 378G (352G of it orphaned tmp_pack_* from an
-    // interrupted `git gc`) and filled the disk. A security tool must not be
-    // what fills a customer's disk. Leftovers: `node9 undo --purge`.
-    enableUndo: false,
     enableHookLogDebug: true,
     approvalTimeoutMs: 12e4,
     // 120-second auto-deny timeout
@@ -4233,25 +4220,6 @@ var DEFAULT_CONFIG = {
       "terminal.execute": "command",
       "postgres:query": "sql"
     },
-    snapshot: {
-      tools: [
-        "str_replace_based_edit_tool",
-        "write_file",
-        "edit_file",
-        "create_file",
-        "edit",
-        "replace",
-        // Claude / canonicalised Hermes — shouldSnapshot lowercases the
-        // incoming name before set-membership, so we list the lowercase
-        // forms of `Bash`/`Write`/`Edit`/`MultiEdit`. Without these,
-        // post-canonicalisation Hermes `patch` / `write_file` (which now
-        // arrive as `Edit` / `Write`) silently skipped snapshotting.
-        "write",
-        "multiedit"
-      ],
-      onlyPaths: [],
-      ignorePaths: ["**/node_modules/**", "dist/**", "build/**", ".next/**", "**/*.log"]
-    },
     smartRules: [
       // ── rm safety (critical — always evaluated first) ──────────────────────
       {
@@ -4562,11 +4530,6 @@ function getConfig(cwd) {
     ignoredTools: [...DEFAULT_CONFIG.policy.ignoredTools],
     toolInspection: { ...DEFAULT_CONFIG.policy.toolInspection },
     smartRules: [...DEFAULT_CONFIG.policy.smartRules],
-    snapshot: {
-      tools: [...DEFAULT_CONFIG.policy.snapshot.tools],
-      onlyPaths: [...DEFAULT_CONFIG.policy.snapshot.onlyPaths],
-      ignorePaths: [...DEFAULT_CONFIG.policy.snapshot.ignorePaths]
-    },
     dlp: { ...DEFAULT_CONFIG.policy.dlp },
     egress: {
       ...DEFAULT_CONFIG.policy.egress,
@@ -4634,12 +4597,6 @@ function getConfig(cwd) {
       );
       mergedPolicy.smartRules = [...filteredBlocks, ...localRules, ...filteredNonBlocks];
     }
-    if (p.snapshot) {
-      const s2 = p.snapshot;
-      if (s2.tools) mergedPolicy.snapshot.tools.push(...s2.tools);
-      if (s2.onlyPaths) mergedPolicy.snapshot.onlyPaths.push(...s2.onlyPaths);
-      if (s2.ignorePaths) mergedPolicy.snapshot.ignorePaths.push(...s2.ignorePaths);
-    }
     if (p.dlp) {
       const d = p.dlp;
       if (d.enabled !== void 0) mergedPolicy.dlp.enabled = d.enabled;
@@ -4974,10 +4931,6 @@ function getConfig(cwd) {
   mergedPolicy.dangerousWords = [...new Set(mergedPolicy.dangerousWords)];
   mergedPolicy.ignoredTools = [...new Set(mergedPolicy.ignoredTools)];
   mergedPolicy.skillPinning.roots = [...new Set(mergedPolicy.skillPinning.roots)];
-  mergedPolicy.snapshot.tools = [...new Set(mergedPolicy.snapshot.tools)];
-  mergedPolicy.snapshot.onlyPaths = [...new Set(mergedPolicy.snapshot.onlyPaths)];
-  mergedPolicy.snapshot.ignorePaths = [...new Set(mergedPolicy.snapshot.ignorePaths)];
-  mergedSettings.enableUndo = false;
   const result = {
     settings: mergedSettings,
     policy: mergedPolicy,
@@ -5040,9 +4993,6 @@ ${error.replace("Invalid config:\n", "")}
   return sanitized;
 }
 
-// src/policy/index.ts
-var import_picomatch2 = __toESM(require("picomatch"));
-
 // src/dlp.ts
 var import_fs5 = __toESM(require("fs"));
 var import_path5 = __toESM(require("path"));

package/dist/index.mjs

@@ -4150,19 +4150,6 @@ var DEFAULT_CONFIG = {
   settings: {
     mode: "standard",
     autoStartDaemon: true,
-    // The undo feature was REMOVED. This default is one of two places that say
-    // so; the other is the pin further down, which overwrites whatever a config
-    // file, the dashboard or the cloud supplies. Setting `enableUndo` anywhere
-    // has no effect — do not restore the advice that used to live here, because
-    // a comment recommending a knob that is silently discarded is the same lie
-    // on disk the pin exists to prevent.
-    //
-    // Why it went: the store was a per-project bare git repo with no size
-    // ceiling, and eviction dropped the index row without deleting the objects.
-    // On one machine it reached 378G (352G of it orphaned tmp_pack_* from an
-    // interrupted `git gc`) and filled the disk. A security tool must not be
-    // what fills a customer's disk. Leftovers: `node9 undo --purge`.
-    enableUndo: false,
     enableHookLogDebug: true,
     approvalTimeoutMs: 12e4,
     // 120-second auto-deny timeout
@@ -4203,25 +4190,6 @@ var DEFAULT_CONFIG = {
       "terminal.execute": "command",
       "postgres:query": "sql"
     },
-    snapshot: {
-      tools: [
-        "str_replace_based_edit_tool",
-        "write_file",
-        "edit_file",
-        "create_file",
-        "edit",
-        "replace",
-        // Claude / canonicalised Hermes — shouldSnapshot lowercases the
-        // incoming name before set-membership, so we list the lowercase
-        // forms of `Bash`/`Write`/`Edit`/`MultiEdit`. Without these,
-        // post-canonicalisation Hermes `patch` / `write_file` (which now
-        // arrive as `Edit` / `Write`) silently skipped snapshotting.
-        "write",
-        "multiedit"
-      ],
-      onlyPaths: [],
-      ignorePaths: ["**/node_modules/**", "dist/**", "build/**", ".next/**", "**/*.log"]
-    },
     smartRules: [
       // ── rm safety (critical — always evaluated first) ──────────────────────
       {
@@ -4532,11 +4500,6 @@ function getConfig(cwd) {
     ignoredTools: [...DEFAULT_CONFIG.policy.ignoredTools],
     toolInspection: { ...DEFAULT_CONFIG.policy.toolInspection },
     smartRules: [...DEFAULT_CONFIG.policy.smartRules],
-    snapshot: {
-      tools: [...DEFAULT_CONFIG.policy.snapshot.tools],
-      onlyPaths: [...DEFAULT_CONFIG.policy.snapshot.onlyPaths],
-      ignorePaths: [...DEFAULT_CONFIG.policy.snapshot.ignorePaths]
-    },
     dlp: { ...DEFAULT_CONFIG.policy.dlp },
     egress: {
       ...DEFAULT_CONFIG.policy.egress,
@@ -4604,12 +4567,6 @@ function getConfig(cwd) {
       );
       mergedPolicy.smartRules = [...filteredBlocks, ...localRules, ...filteredNonBlocks];
     }
-    if (p.snapshot) {
-      const s2 = p.snapshot;
-      if (s2.tools) mergedPolicy.snapshot.tools.push(...s2.tools);
-      if (s2.onlyPaths) mergedPolicy.snapshot.onlyPaths.push(...s2.onlyPaths);
-      if (s2.ignorePaths) mergedPolicy.snapshot.ignorePaths.push(...s2.ignorePaths);
-    }
     if (p.dlp) {
       const d = p.dlp;
       if (d.enabled !== void 0) mergedPolicy.dlp.enabled = d.enabled;
@@ -4944,10 +4901,6 @@ function getConfig(cwd) {
   mergedPolicy.dangerousWords = [...new Set(mergedPolicy.dangerousWords)];
   mergedPolicy.ignoredTools = [...new Set(mergedPolicy.ignoredTools)];
   mergedPolicy.skillPinning.roots = [...new Set(mergedPolicy.skillPinning.roots)];
-  mergedPolicy.snapshot.tools = [...new Set(mergedPolicy.snapshot.tools)];
-  mergedPolicy.snapshot.onlyPaths = [...new Set(mergedPolicy.snapshot.onlyPaths)];
-  mergedPolicy.snapshot.ignorePaths = [...new Set(mergedPolicy.snapshot.ignorePaths)];
-  mergedSettings.enableUndo = false;
   const result = {
     settings: mergedSettings,
     policy: mergedPolicy,
@@ -5010,9 +4963,6 @@ ${error.replace("Invalid config:\n", "")}
   return sanitized;
 }
 
-// src/policy/index.ts
-import pm2 from "picomatch";
-
 // src/dlp.ts
 import fs5 from "fs";
 import path5 from "path";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "1.67.5",
+  "version": "2.0.0",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",